--- title: "Cloudflare" description: "Official Cloudflare API for DNS, zones, accounts, Workers, storage and security. Each command makes one request with your scoped API token. Writes can change production resources and incur provider charges. Deprecated op" --- > Documentation Index > Fetch the complete documentation index at: https://help.tooluse.net/llms.txt > Use this file to discover all available pages before exploring further. # Cloudflare

Official Cloudflare API for DNS, zones, accounts, Workers, storage and security. Each command makes one request with your scoped API token. Writes can change production resources and incur provider charges. Deprecated operations, binary uploads and unsupported contracts are explicitly excluded; R2 S3 access remains a separate integration.

What you can do (3154)

What you can do

Available commands: 3154 (1532 read, 1622 write). Enable only the commands your application needs.

Command Effect
Heartbeat response — cloudflare.getheartbeat Read
List Accounts — cloudflare.accounts-list-accounts Read
Create an Account — cloudflare.account-creation Write
Delete a specific account — cloudflare.account-deletion Write
Account Details — cloudflare.accounts-account-details Read
Update Account — cloudflare.accounts-update-account Write
List abuse reports against the account — cloudflare.listabusereports Read
List submitted abuse reports — cloudflare.listsubmittedabusereports Read
Get a submitted abuse report — cloudflare.getsubmittedabusereport Read
List emails sent to an abuse report submitter — cloudflare.listsubmittedabusereportemails Read
Check whether a report can be appealed — cloudflare.checkappealeligibility Read
List abuse report emails — cloudflare.listemails Read
List abuse report mitigations — cloudflare.listmitigations Read
Request review on mitigations — cloudflare.requestreview Write
Get an abuse report against the account — cloudflare.getabusereport Read
Per-portal MCP tool-call timeseries — cloudflare.mcp-portals-api-portal-tool-call-timeseries Read
Per-server MCP tool-call timeseries — cloudflare.mcp-portals-api-server-tool-call-timeseries Read
Account-global MCP tool-call timeseries — cloudflare.mcp-portals-api-account-tool-call-timeseries Read
List MCP Portals — cloudflare.mcp-portals-api-list-portals Read
Create a new MCP Portal — cloudflare.mcp-portals-api-create-portals Write
Delete an MCP Portal — cloudflare.mcp-portals-api-delete-portals Write
Read details of an MCP Portal — cloudflare.mcp-portals-api-fetch-gateways Read
Update an MCP Portal — cloudflare.mcp-portals-api-update-portals Write
Resolve an MCP server OAuth redirect URI — cloudflare.mcp-portals-api-effective-redirect-uri Read
List MCP Servers — cloudflare.mcp-portals-api-list-servers Read
Create a new MCP Server — cloudflare.mcp-portals-api-create-servers Write
Delete an MCP Server — cloudflare.mcp-portals-api-delete-servers Write
Read the details of an MCP Server — cloudflare.mcp-portals-api-fetch-servers Read
Update an MCP Server — cloudflare.mcp-portals-api-update-servers Write
Sync MCP Server Capabilities — cloudflare.mcp-portals-api-sync-server Write
List Access applications — cloudflare.access-applications-list-access-applications Read
Add an Access application — cloudflare.access-applications-add-an-application Write
List short-lived certificate CAs — cloudflare.access-short-lived-certificate-c-as-list-short-lived-certificate-c-as Read
Delete a short-lived certificate CA — cloudflare.access-short-lived-certificate-c-as-delete-a-short-lived-c-53df2aaf7d Write
Get a short-lived certificate CA — cloudflare.access-short-lived-certificate-c-as-get-a-short-lived-certificate-ca Read
Create a short-lived certificate CA — cloudflare.access-short-lived-certificate-c-as-create-a-short-lived-c-21a6dd88cb Write
List Access application policies — cloudflare.access-policies-list-access-app-policies Read
Create an Access application policy — cloudflare.access-policies-create-an-access-policy Write
Delete an Access application policy — cloudflare.access-policies-delete-an-access-policy Write
Get an Access application policy — cloudflare.access-policies-get-an-access-policy Read
Update an Access application policy — cloudflare.access-policies-update-an-access-policy Write
Convert an Access application policy to a reusable policy — cloudflare.access-policies-convert-reusable Write
List authenticator device AAGUIDs — cloudflare.access-authenticator-device-aaguids-list Read
List mTLS certificates — cloudflare.access-mtls-authentication-list-mtls-certificates Read
Add an mTLS certificate — cloudflare.access-mtls-authentication-add-an-mtls-certificate Write
List all mTLS hostname settings — cloudflare.access-mtls-authentication-list-mtls-certificates-hostname-settings Read
Update an mTLS certificate's hostname settings — cloudflare.access-mtls-authentication-update-an-mtls-certificate-settings Write
Delete an mTLS certificate — cloudflare.access-mtls-authentication-delete-an-mtls-certificate Write
Get an mTLS certificate — cloudflare.access-mtls-authentication-get-an-mtls-certificate Read
Update an mTLS certificate — cloudflare.access-mtls-authentication-update-an-mtls-certificate Write
List custom pages — cloudflare.access-custom-pages-list-custom-pages Read
Create a custom page — cloudflare.access-custom-pages-create-a-custom-page Write
Validate a custom page template — cloudflare.access-custom-pages-validate-a-custom-page-template Write
Delete a custom page — cloudflare.access-custom-pages-delete-a-custom-page Write
Get a custom page — cloudflare.access-custom-pages-get-a-custom-page Read
Update a custom page — cloudflare.access-custom-pages-update-a-custom-page Write
List SSH Certificate Authorities (CA) — cloudflare.access-gateway-ca-list-ssh-ca Read
Add a new SSH Certificate Authority (CA) — cloudflare.access-gateway-ca-add-an-ssh-ca Write
Delete an SSH Certificate Authority (CA) — cloudflare.access-gateway-ca-delete-an-ssh-ca Write
List Access groups — cloudflare.access-groups-list-access-groups Read
Create an Access group — cloudflare.access-groups-create-an-access-group Write
Delete an Access group — cloudflare.access-groups-delete-an-access-group Write
Get an Access group — cloudflare.access-groups-get-an-access-group Read
Update an Access group — cloudflare.access-groups-update-an-access-group Write
List Access identity providers — cloudflare.access-identity-providers-list-access-identity-providers Read
Add an Access identity provider — cloudflare.access-identity-providers-add-an-access-identity-provider Write
Delete an Access identity provider — cloudflare.access-identity-providers-delete-an-access-identity-provider Write
Get an Access identity provider — cloudflare.access-identity-providers-get-an-access-identity-provider Read
Update an Access identity provider — cloudflare.access-identity-providers-update-an-access-identity-provider Write
Create SAML encryption certificate for Identity Provider — cloudflare.access-identity-providers-create-saml-certificate-for-iden-2f0afb5921 Write
List SCIM Group resources — cloudflare.access-identity-providers-list-scim-group-resources Read
Delete a SCIM Group resource — cloudflare.access-identity-providers-delete-scim-group-resource Write
Get a SCIM Group resource — cloudflare.access-identity-providers-get-scim-group-resource Read
List SCIM User resources — cloudflare.access-identity-providers-list-scim-user-resources Read
Delete a SCIM User resource — cloudflare.access-identity-providers-delete-scim-user-resource Write
Get a SCIM User resource — cloudflare.access-identity-providers-get-scim-user-resource Read
List IdP federation grants — cloudflare.access-idp-federation-grants-list Read
Create an IdP federation grant — cloudflare.access-idp-federation-grants-create Write
Delete an IdP federation grant — cloudflare.access-idp-federation-grants-delete Write
Get an IdP federation grant — cloudflare.access-idp-federation-grants-get Read
Get the Access key configuration — cloudflare.access-key-configuration-get-the-access-key-configuration Read
Update the Access key configuration — cloudflare.access-key-configuration-update-the-access-key-configuration Write
Rotate Access keys — cloudflare.access-key-configuration-rotate-access-keys Write
Get Access authentication logs — cloudflare.access-authentication-logs-get-access-authentication-logs Read
List Access JIT request logs — cloudflare.access-jit-request-logs-list Read
Get an Access JIT request log — cloudflare.access-jit-request-logs-get Read
List Access SCIM update logs — cloudflare.access-scim-update-logs-list-access-scim-update-logs Read
Get your Zero Trust organization — cloudflare.zero-trust-organization-get-your-zero-trust-organization Read
Create your Zero Trust organization — cloudflare.zero-trust-organization-create-your-zero-trust-organization Write
Update your Zero Trust organization — cloudflare.zero-trust-organization-update-your-zero-trust-organization Write
Get your Zero Trust organization DoH settings — cloudflare.zero-trust-organization-get-your-zero-trust-organization-doh-settings Read
Update your Zero Trust organization DoH settings — cloudflare.zero-trust-organization-update-your-zero-trust-organizatio-c7ffe55106 Write
Revoke all Access tokens for a user — cloudflare.zero-trust-organization-revoke-all-access-tokens-for-a-user Write
Delete Zero Trust organization trust settings — cloudflare.zero-trust-organization-delete-trust-settings Write
Get Zero Trust organization trust settings — cloudflare.zero-trust-organization-get-trust-settings Read
Update Zero Trust organization trust settings — cloudflare.zero-trust-organization-update-trust-settings Write
Replace Zero Trust organization trust settings — cloudflare.zero-trust-organization-replace-trust-settings Write
List Access reusable policies — cloudflare.access-policies-list-access-reusable-policies Read
Create an Access reusable policy — cloudflare.access-policies-create-an-access-reusable-policy Write
Delete an Access reusable policy — cloudflare.access-policies-delete-an-access-reusable-policy Write
Get an Access reusable policy — cloudflare.access-policies-get-an-access-reusable-policy Read
Update an Access reusable policy — cloudflare.access-policies-update-an-access-reusable-policy Write
Start Access policy test — cloudflare.access-policy-tests Write
Get the current status of a given Access policy test — cloudflare.access-policy-tests-get-an-update Read
Get an Access policy test users page — cloudflare.access-policy-tests-get-a-user-page Read
List SAML certificate sets — cloudflare.access-saml-certificates-list-certificate-sets Read
Get SAML certificate set — cloudflare.access-saml-certificates-get-certificate-set Read
Download current certificate in PEM format — cloudflare.access-saml-certificates-get-pem Read
Rotate SAML certificate — cloudflare.access-saml-certificates-rotate-certificate Write
Update a user seat — cloudflare.zero-trust-seats-update-a-user-seat Write
List service tokens — cloudflare.access-service-tokens-list-service-tokens Read
Create a service token — cloudflare.access-service-tokens-create-a-service-token Write
Delete a service token — cloudflare.access-service-tokens-delete-a-service-token Write
Get a service token — cloudflare.access-service-tokens-get-a-service-token Read
Update a service token — cloudflare.access-service-tokens-update-a-service-token Write
Refresh a service token — cloudflare.access-service-tokens-refresh-a-service-token Write
Rotate a service token — cloudflare.access-service-tokens-rotate-a-service-token Write
List tags — cloudflare.access-tags-list-tags Read
Create a tag — cloudflare.access-tags-create-tag Write
Delete a tag — cloudflare.access-tags-delete-a-tag Write
Get a tag — cloudflare.access-tags-get-a-tag Read
Update a tag — cloudflare.access-tags-update-a-tag Write
List user populations — cloudflare.access-user-populations-list-user-populations Read
Create a user population — cloudflare.access-user-populations-create-user-population Write
Delete a user population — cloudflare.access-user-populations-delete-user-population Write
Get a user population — cloudflare.access-user-populations-get-user-population Read
Update a user population — cloudflare.access-user-populations-update-user-population Write
List users in a user population — cloudflare.access-user-populations-list-users Read
Create a user population user — cloudflare.access-user-populations-create-user Write
Delete a user population user — cloudflare.access-user-populations-delete-user Write
Get a user population user — cloudflare.access-user-populations-get-user Read
Update a user population user — cloudflare.access-user-populations-update-user Write
Replace a user population user — cloudflare.access-user-populations-replace-user Write
Get users — cloudflare.zero-trust-users-get-users Read
Create a user — cloudflare.zero-trust-users-create-user Write
Delete a user — cloudflare.zero-trust-users-delete-user Write
Get a user — cloudflare.zero-trust-users-get-user Read
Update a user — cloudflare.zero-trust-users-update-user Write
Get active sessions — cloudflare.zero-trust-users-get-active-sessions Read
Get single active session — cloudflare.zero-trust-users-get-active-session Read
Get failed logins — cloudflare.zero-trust-users-get-failed-logins Read
Get last seen identity — cloudflare.zero-trust-users-get-last-seen-identity Read
Delete a user's authenticator — cloudflare.zero-trust-users-delete-mfa-authenticator Write
Delete a user's passkey — cloudflare.zero-trust-users-delete-passkey Write
List Address Maps — cloudflare.ip-address-management-address-maps-list-address-maps Read
Create Address Map — cloudflare.ip-address-management-address-maps-create-address-map Write
Delete Address Map — cloudflare.ip-address-management-address-maps-delete-address-map Write
Address Map Details — cloudflare.ip-address-management-address-maps-address-map-details Read
Update Address Map — cloudflare.ip-address-management-address-maps-update-address-map Write
Remove an account membership from an Address Map — cloudflare.ip-address-management-address-maps-remove-an-account-membe-50c3d1b2c5 Write
Add an account membership to an Address Map — cloudflare.ip-address-management-address-maps-add-an-account-membersh-c09c729fdc Write
Remove Multiple IPs from an Address Map — cloudflare.ip-address-management-address-maps-remove-multiple-ips-fro-d3aaba0685 Write
Add Multiple IPs to an Address Map — cloudflare.ip-address-management-address-maps-add-multiple-ips-to-an-address-map Write
Remove an IP from an Address Map — cloudflare.ip-address-management-address-maps-remove-an-ip-from-an-address-map Write
Add an IP to an Address Map — cloudflare.ip-address-management-address-maps-add-an-ip-to-an-address-map Write
Remove Multiple Zones from an Address Map — cloudflare.ip-address-management-address-maps-remove-multiple-zones-f-5db05ad215 Write
Add Multiple Zones to an Address Map — cloudflare.ip-address-management-address-maps-add-multiple-zones-to-a-8db8398e99 Write
Remove a zone membership from an Address Map — cloudflare.ip-address-management-address-maps-remove-a-zone-membershi-3d71ec9d92 Write
Add a zone membership to an Address Map — cloudflare.ip-address-management-address-maps-add-a-zone-membership-t-bd46173fe2 Write
List Leases — cloudflare.ip-address-management-list-leases Read
List LOA Documents — cloudflare.ip-address-management-prefixes-list-loa-documents Read
List Prefixes — cloudflare.ip-address-management-prefixes-list-prefixes Read
Add Prefix — cloudflare.ip-address-management-prefixes-add-prefix Write
Delete Prefix — cloudflare.ip-address-management-prefixes-delete-prefix Write
Prefix Details — cloudflare.ip-address-management-prefixes-prefix-details Read
Update Prefix Description — cloudflare.ip-address-management-prefixes-update-prefix-description Write
List BGP Prefixes — cloudflare.ip-address-management-prefixes-list-bgp-prefixes Read
Create BGP Prefix — cloudflare.ip-address-management-prefixes-create-bgp-prefix Write
Delete BGP Prefix — cloudflare.ip-address-management-prefixes-delete-bgp-prefix Write
Fetch BGP Prefix — cloudflare.ip-address-management-prefixes-fetch-bgp-prefix Read
Update BGP Prefix — cloudflare.ip-address-management-prefixes-update-bgp-prefix Write
List Service Bindings — cloudflare.ip-address-management-service-bindings-list-service-bindings Read
Create Service Binding — cloudflare.ip-address-management-service-bindings-create-service-binding Write
Delete Service Binding — cloudflare.ip-address-management-service-bindings-delete-service-binding Write
Get Service Binding — cloudflare.ip-address-management-service-bindings-get-service-binding Read
List Prefix Delegations — cloudflare.ip-address-management-prefix-delegation-list-prefix-delegations Read
Create Prefix Delegation — cloudflare.ip-address-management-prefix-delegation-create-prefix-delegation Write
Delete Prefix Delegation — cloudflare.ip-address-management-prefix-delegation-delete-prefix-delegation Write
Validate Prefix — cloudflare.ip-address-management-prefixes-validate-prefix Write
List Regions — cloudflare.dls-account-regional-hostnames-list-regions Read
List Services — cloudflare.ip-address-management-service-bindings-list-services Read
Get credit balance — cloudflare.aig-billing-get-credit-balance Read
Get invoice history — cloudflare.aig-billing-get-invoice-history Read
Get invoice preview — cloudflare.aig-billing-get-invoice-preview Read
Delete spending limit (deprecated) — cloudflare.aig-billing-delete-spending-limit Write
Get spending limit (deprecated) — cloudflare.aig-billing-get-spending-limit Read
Create a top-up — cloudflare.aig-billing-create-topup Write
Delete auto top-up configuration — cloudflare.aig-billing-delete-topup-config Write
Get auto top-up configuration — cloudflare.aig-billing-get-topup-config Read
Set auto top-up configuration — cloudflare.aig-billing-set-topup-config Write
Get top-up eligibility — cloudflare.aig-billing-topup-eligibility Write
Get account top-up limits — cloudflare.aig-billing-get-topup-limits Read
Check top-up status — cloudflare.aig-billing-check-topup-status Write
Get usage history — cloudflare.aig-billing-get-usage-history Read
List custom providers — cloudflare.aig-config-list-account-provider Read
Create a custom provider — cloudflare.aig-config-create-account-provider Write
List custom provider pricing rules — cloudflare.aig-config-list-account-provider-cost Read
Create a custom provider pricing rule — cloudflare.aig-config-create-account-provider-cost Write
Delete a custom provider pricing rule — cloudflare.aig-config-delete-account-provider-cost Write
Get a custom provider pricing rule — cloudflare.aig-config-fetch-account-provider-cost Read
Update a custom provider pricing rule — cloudflare.aig-config-update-account-provider-cost Write
Delete a custom provider — cloudflare.aig-config-delete-account-provider Write
Get a custom provider — cloudflare.aig-config-fetch-account-provider Read
Update a custom provider — cloudflare.aig-config-update-account-provider Write
List evaluator types (deprecated) — cloudflare.aig-config-list-evaluators Read
List gateways — cloudflare.aig-config-list-gateway Read
Create a gateway — cloudflare.aig-config-create-gateway Write
List custom domains — cloudflare.aig-config-list-custom-domain Read
Create a custom domain for a gateway — cloudflare.aig-config-create-custom-domain Write
Delete a custom domain — cloudflare.aig-config-delete-custom-domain Write
Get a custom domain — cloudflare.aig-config-fetch-custom-domain Read
List datasets (deprecated) — cloudflare.aig-config-list-dataset Read
Create a dataset (deprecated) — cloudflare.aig-config-create-dataset Write
Delete a dataset (deprecated) — cloudflare.aig-config-delete-dataset Write
Get a dataset (deprecated) — cloudflare.aig-config-fetch-dataset Read
Update a dataset (deprecated) — cloudflare.aig-config-update-dataset Write
List evaluations (deprecated) — cloudflare.aig-config-list-evaluations Read
Create an evaluation (deprecated) — cloudflare.aig-config-create-evaluations Write
Delete an evaluation (deprecated) — cloudflare.aig-config-delete-evaluations Write
Get an evaluation (deprecated) — cloudflare.aig-config-fetch-evaluations Read
Delete Gateway Logs — cloudflare.aig-config-delete-gateway-logs Write
List Gateway Logs — cloudflare.aig-config-list-gateway-logs Read
Get Gateway Log Detail — cloudflare.aig-config-get-gateway-log-detail Read
Patch Gateway Log — cloudflare.aig-config-patch-gateway-log Write
Get Gateway Log Request — cloudflare.aig-config-get-gateway-log-request Read
Get Gateway Log Response — cloudflare.aig-config-get-gateway-log-response Read
List provider keys — cloudflare.aig-config-list-providers Read
Store a provider key — cloudflare.aig-config-create-providers Write
Delete a provider key — cloudflare.aig-config-delete-providers Write
Get a provider key — cloudflare.aig-config-fetch-providers Read
Rotate a provider key — cloudflare.aig-config-update-providers Write
List dynamic routes — cloudflare.aig-config-list-gateway-dynamic-routes Read
Create a dynamic route — cloudflare.aig-config-post-gateway-dynamic-route Write
Delete a dynamic route — cloudflare.aig-config-delete-gateway-dynamic-route Write
Get a dynamic route — cloudflare.aig-config-get-gateway-dynamic-route Read
Rename a dynamic route — cloudflare.aig-config-update-gateway-dynamic-route Write
List dynamic route deployments — cloudflare.aig-config-list-gateway-dynamic-route-deployments Read
Deploy a dynamic route version — cloudflare.aig-config-post-gateway-dynamic-route-deployment Write
List dynamic route versions — cloudflare.aig-config-list-gateway-dynamic-route-versions Read
Create a dynamic route version — cloudflare.aig-config-post-gateway-dynamic-route-version Write
Get a dynamic route version — cloudflare.aig-config-get-gateway-dynamic-route-version Read
Get Gateway URL — cloudflare.aig-config-get-gateway-url Read
Delete a gateway — cloudflare.aig-config-delete-gateway Write
Get a gateway — cloudflare.aig-config-fetch-gateway Read
Update a gateway — cloudflare.aig-config-update-gateway Write
Get AI Gateway logging state — cloudflare.aig-config-get-logging-state Read
Migrate AI Gateway logging to Workers Observability — cloudflare.aig-config-patch-logging-state Write
List namespaces — cloudflare.ai-search-list-namespaces Read
Create a namespace — cloudflare.ai-search-create-namespace Write
List AI Search instances. — cloudflare.ai-search-namespace-list-instances Read
Create an AI Search instance. — cloudflare.ai-search-namespace-create-instance Write
Delete an AI Search instance. — cloudflare.ai-search-namespace-delete-instance Write
Get an AI Search instance. — cloudflare.ai-search-namespace-fetch-instance Read
Move an instance to a different namespace. — cloudflare.ai-search-move-instance Write
Update an AI Search instance. — cloudflare.ai-search-namespace-update-instance Write
Chat Completions — cloudflare.ai-search-namespace-instance-chat-completion Write
Items List. — cloudflare.ai-search-namespace-instance-list-items Read
Create or Update Item. — cloudflare.ai-search-namespace-instance-create-or-update-item Write
Delete Item. — cloudflare.ai-search-namespace-instance-delete-item Write
Get Item. — cloudflare.ai-search-namespace-instance-get-item Read
Sync Item. — cloudflare.ai-search-namespace-instance-sync-item Write
List Item Chunks. — cloudflare.ai-search-namespace-instance-list-item-chunks Read
Item Logs. — cloudflare.ai-search-namespace-instance-logs-item Read
List Jobs — cloudflare.ai-search-namespace-instance-list-jobs Read
Create new job — cloudflare.ai-search-namespace-instance-create-job Write
Get a Job Details — cloudflare.ai-search-namespace-instance-get-job Read
Cancel an indexing job. — cloudflare.ai-search-namespace-instance-change-job-status Write
List Job Logs — cloudflare.ai-search-namespace-instance-list-job-logs Read
Purge search cache. — cloudflare.ai-search-namespace-purge-instance-cache Write
Search — cloudflare.ai-search-namespace-instance-search Write
Get instance statistics. — cloudflare.ai-search-namespace-stats Read
Delete a namespace — cloudflare.ai-search-delete-namespace Write
Get a namespace — cloudflare.ai-search-fetch-namespace Read
Update a namespace — cloudflare.ai-search-update-namespace Write
Multi-Instance Chat Completions — cloudflare.ai-search-namespace-multi-instance-chat-completion Write
Multi-Instance Search — cloudflare.ai-search-namespace-multi-instance-search Write
List tokens — cloudflare.ai-search-list-tokens Read
Create a token — cloudflare.ai-search-create-tokens Write
Delete a token — cloudflare.ai-search-delete-tokens Write
Get a token — cloudflare.ai-search-fetch-tokens Read
Update a token — cloudflare.ai-search-update-tokens Write
Author Search — cloudflare.workers-ai-search-author Read
List Finetunes — cloudflare.workers-ai-list-finetunes Read
Create a new Finetune — cloudflare.workers-ai-create-finetune Write
List Public Finetunes — cloudflare.workers-ai-list-public-finetunes Read
Delete a Finetune — cloudflare.workers-ai-delete-finetune Write
Download a Finetune Asset — cloudflare.workers-ai-download-finetune-asset Read
Get an AI model's input and output schemas — cloudflare.workers-ai-get-model-schema Read
Model Search — cloudflare.workers-ai-search-model Read
Run an AI model with request options — cloudflare.workers-ai-post-run-generic Write
Task Search — cloudflare.workers-ai-search-task Read
List supported Markdown conversion formats — cloudflare.workers-ai-get-to-markdown-supported Read
Search the web through AI Gateway — cloudflare.workers-ai-ai-gateway-web-search Write
Get Alert Types — cloudflare.notification-alert-types-get-alert-types Read
Get delivery mechanism eligibility — cloudflare.notification-mechanism-eligibility-get-delivery-mechanism-eligibility Read
Delete PagerDuty Services — cloudflare.notification-destinations-with-pager-duty-delete-pager-duty-services Write
List PagerDuty services — cloudflare.notification-destinations-with-pager-duty-list-pager-duty-services Read
Create PagerDuty integration token — cloudflare.notification-destinations-with-pager-duty-connect-pager-duty Write
Connect PagerDuty — cloudflare.notification-destinations-with-pager-duty-connect-pager-duty-token Read
List webhooks — cloudflare.notification-webhooks-list-webhooks Read
Create a webhook — cloudflare.notification-webhooks-create-a-webhook Write
Delete a webhook — cloudflare.notification-webhooks-delete-a-webhook Write
Get a webhook — cloudflare.notification-webhooks-get-a-webhook Read
Update a webhook — cloudflare.notification-webhooks-update-a-webhook Write
List History — cloudflare.notification-history-list-history Read
List Notification policies — cloudflare.notification-policies-list-notification-policies Read
Delete a Notification policy — cloudflare.notification-policies-delete-a-notification-policy Write
Get a Notification policy — cloudflare.notification-policies-get-a-notification-policy Read
Update a Notification policy — cloudflare.notification-policies-update-a-notification-policy Write
Show email unsubscribe details — cloudflare.notification-policies-show-email-unsubscribe-details Read
Unsubscribe email from a Notification policy — cloudflare.notification-policies-unsubscribe-email-from-notification-policy Write
Test a Notification policy — cloudflare.notification-policies-test-a-notification-policy Write
List Silences — cloudflare.notification-silences-list-silences Read
Create Silences — cloudflare.notification-silences-create-silences Write
Update Silences — cloudflare.notification-silences-update-silences Write
Delete Silence — cloudflare.notification-silences-delete-silences Write
Get Silence — cloudflare.notification-silences-get-silence Read
Top integrations by content findings — cloudflare.data-security-content-findings-top-n Write
Data security findings summary — cloudflare.data-security-findings-summary Write
Data security findings timeseries — cloudflare.data-security-findings-timeseries Write
Query analytics summary — cloudflare.art-analytics-query-summary Write
Query analytics timeseries — cloudflare.art-analytics-query-timeseries Write
Query analytics top-N — cloudflare.art-analytics-query-top-n Write
Query analytics datasets — cloudflare.sql-api-query-get-account-scoped Read
Query analytics datasets — cloudflare.sql-api-query-post-account-scoped Write
List available analytics datasets — cloudflare.sql-api-introspection-account-scoped Read
Execute an Analytics Engine SQL query via query parameter — cloudflare.analytics-engine-sql-query-get Read
Get count of zones with Argo Smart Routing enabled for account — cloudflare.argo-smart-routing-get-count-zones-enabled-for-account Read
List namespaces — cloudflare.artifacts_namespaces_list Read
Create a namespace — cloudflare.artifacts_namespaces_create Write
Delete a namespace — cloudflare.artifacts_namespaces_delete Write
Get a namespace — cloudflare.artifacts_namespaces_get Read
List repositories — cloudflare.artifacts_repos_list Read
Create a repository — cloudflare.artifacts_repos_create Write
Delete a repository — cloudflare.artifacts_repos_delete Write
Get a repository — cloudflare.artifacts_repos_get Read
Read a Git commit — cloudflare.artifacts_repos_commit_get Read
Fork a repository — cloudflare.artifacts_repos_fork Write
Import a repository — cloudflare.artifacts_repos_import Write
Read commit history — cloudflare.artifacts_repos_log_get Read
Read a raw file with content type — cloudflare.artifacts_repos_raw_get Read
List repository tokens — cloudflare.artifacts_repo_tokens_list Read
Read a Git tree — cloudflare.artifacts_repos_tree_get Read
Create a repository token — cloudflare.artifacts_tokens_create Write
Get account audit logs — cloudflare.audit-logs-get-account-audit-logs Read
AI Search — cloudflare.autorag-config-ai-search Write
Files — cloudflare.autorag-config-files Read
List Jobs — cloudflare.autorag-config-list-jobs Read
Get a Job Details — cloudflare.autorag-config-get-job Read
List Job Logs — cloudflare.autorag-config-list-job-logs Read
Search — cloudflare.autorag-config-search Write
Sync — cloudflare.autorag-config-sync Write
List Basin Catalogs — cloudflare.basin-list-catalogs Read
Get Basin Catalog details — cloudflare.basin-get-catalog-details Read
Store catalog credentials — cloudflare.basin-store-credentials Write
Get Basin Catalog credential status — cloudflare.basin-get-credential-status Read
Delete Basin Catalog metadata — cloudflare.basin-delete-catalog Write
Disable Basin Catalog — cloudflare.basin-disable-catalog Write
Enable R2 bucket as a catalog — cloudflare.basin-enable-catalog Write
Get catalog maintenance configuration — cloudflare.basin-get-maintenance-config Read
Update catalog maintenance configuration — cloudflare.basin-update-maintenance-config Write
List namespaces in catalog — cloudflare.basin-list-namespaces Read
List tables in namespace — cloudflare.basin-list-tables Read
Get table details — cloudflare.basin-get-table Read
Get table maintenance configuration — cloudflare.basin-get-table-maintenance-config Read
Update table maintenance configuration — cloudflare.basin-update-table-maintenance-config Write
Queue table maintenance — cloudflare.basin-queue-table-maintenance Write
List table maintenance runs — cloudflare.basin-list-table-maintenance-runs Read
Get Account Billable Usage (Version 1, Alpha) — cloudflare.billable-usage-get-v1-account-usage Read
Get Account Billable Usage Info (Version 1, Alpha) — cloudflare.billable-usage-get-v1-account-usage-info Read
Get Account Usage (Version 2, Alpha, Restricted) — cloudflare.billable-usage-v2-get-account-usage Read
Query Account Usage (Version 2, Alpha, Restricted) — cloudflare.billable-usage-v2-query-account-usage Write
List Account Billable Metrics (Version 2, Alpha, Restricted) — cloudflare.billable-usage-v2-get-account-billable-metrics Read
Get Account Bad Debt — cloudflare.account-billing-get-bad-debt Read
Get Account Credits — cloudflare.account-billing-get-credits Read
Get Account Billing History — cloudflare.account-billing-history-get-billing-history Read
Delete Billing Profile — cloudflare.account-billing-profile-delete-billing-profile Write
Get Billing Profile — cloudflare.account-billing-profile-get-billing-profile Read
Update Billing Email — cloudflare.account-billing-profile-update-billing-email Write
Create Billing Profile — cloudflare.account-billing-profile-create-billing-profile Write
Update Billing Profile — cloudflare.account-billing-profile-update-billing-profile Write
Create Payment Intent for Billing Profile — cloudflare.account-billing-create-payment-intent Write
List Spend Policies — cloudflare.spend-policies-list Read
Create Spend Policy — cloudflare.spend-policies-create Write
List Spend Policy Activity — cloudflare.spend-policies-activity Read
Delete Spend Policy — cloudflare.spend-policies-delete Write
Get Spend Policy — cloudflare.spend-policies-get Read
Update Spend Policy — cloudflare.spend-policies-update Write
List Spend Policy Audit Entries — cloudflare.spend-policies-list-audit Read
Get Unpaid Invoices — cloudflare.account-billing-get-unpaid-invoices Read
Get account billing usage — cloudflare.usage-analytics-get-account-billing-usage Read
Get daily report — cloudflare.botnet-threat-feed-get-day-report Read
Get full report — cloudflare.botnet-threat-feed-get-full-report Read
Get list of ASNs — cloudflare.botnet-threat-feed-list-asn Read
Delete an ASN — cloudflare.botnet-threat-feed-delete-asn Write
Read matches for logo queries by ID — cloudflare.getaccountsaccountidbrandprotectionlogomatches Read
Download matches for logo queries by ID — cloudflare.getaccountsaccountidbrandprotectionlogomatchesdownload Read
Delete saved logo queries by ID — cloudflare.deleteaccountsaccountidbrandprotectionlogoslogoid Write
Read matches for string queries by ID — cloudflare.getaccountsaccountidbrandprotectionmatches Read
Download matches for string queries by ID — cloudflare.getaccountsaccountidbrandprotectionmatchesdownload Read
Delete saved string queries by ID — cloudflare.deleteaccountsaccountidbrandprotectionqueries Write
Create new saved string queries — cloudflare.postaccountsaccountidbrandprotectionqueries Write
Create new saved string queries in bulk — cloudflare.postaccountsaccountidbrandprotectionqueriesbulk Write
Create new URL submissions — cloudflare.postaccountsaccountidbrandprotectionsubmit Write
Read submitted URLs by ID — cloudflare.getaccountsaccountidbrandprotectionurlinfo Read
Delete browser extension configuration — cloudflare.accounts-browser-extension-config-delete Write
Get browser extension configuration — cloudflare.accounts-browser-extension-config-get Read
Create browser extension configuration — cloudflare.accounts-browser-extension-config-post Write
Update browser extension configuration — cloudflare.accounts-browser-extension-config-put Write
List browser extension inventories — cloudflare.accounts-browser-extension-inventories-list Read
Get a single browser extension inventory — cloudflare.accounts-browser-extension-inventories-get Read
Search browser extension event logs — cloudflare.accounts-browser-extension-config-extension-events-search Write
Query browser extension event timeseries — cloudflare.accounts-browser-extension-config-extension-events-timeseries Write
Get accessibility tree page — cloudflare.brapi-post_accessibilitytree Write
Get HTML content. — cloudflare.brapi-post_content Write
Crawl websites. — cloudflare.brapi-post_crawl Write
Cancel a crawl job. — cloudflare.brapi-delete_cancelcrawl Write
Get crawl result. — cloudflare.brapi-get_crawlresult Read
Get a browser session ID. — cloudflare.brapi-post_devtoolsacquire Write
Close browser session. — cloudflare.brapi-delete_devtoolsbrowserdelete Write
List targets. — cloudflare.brapi-get_devtoolsjson Read
Activate a browser target. — cloudflare.brapi-get_devtoolsjsonactivate Read
Close a browser target. — cloudflare.brapi-get_devtoolsjsonclose Read
List targets. — cloudflare.brapi-get_devtoolsjsonlist Read
Get a target by ID. — cloudflare.brapi-get_devtoolsjsontarget Read
Open a new browser tab. — cloudflare.brapi-put_devtoolsjsonnew Write
Get Chrome DevTools Protocol schema. — cloudflare.brapi-get_devtoolsjsonprotocol Read
Get browser version metadata. — cloudflare.brapi-get_devtoolsjsonversion Read
Mint live view URLs for a browser session — cloudflare.brapi-post_devtoolsliveview Write
List sessions. — cloudflare.brapi-get_devtoolssessionlist Read
Get session details. — cloudflare.brapi-get_devtoolssessiondetails Read
Get json. — cloudflare.brapi-post_json Write
Get Links. — cloudflare.brapi-post_links Write
Get markdown. — cloudflare.brapi-post_markdown Write
Get PDF. — cloudflare.brapi-post_pdf Write
Get recording data. — cloudflare.brapi-get_recording Read
Get network recording data. — cloudflare.brapi-get_recordingnetwork Read
Scrape elements. — cloudflare.brapi-post_scrape Write
Get screenshot. — cloudflare.brapi-post_screenshot Write
Get HTML content and screenshot. — cloudflare.brapi-post_snapshot Write
Get build-minute availability — cloudflare.getaccountlimits Read
Get builds by Worker version — cloudflare.getbuildsbyversionids Read
Get latest builds by script IDs — cloudflare.getlatestbuildsbyscripts Read
Get a Workers build — cloudflare.getbuildbyuuid Read
Cancel a Workers build — cloudflare.cancelbuildbyuuid Write
Get Workers build logs — cloudflare.getbuildlogs Read
Create or update a repository connection — cloudflare.upsertrepoconnection Write
Delete a repository connection — cloudflare.deleterepoconnection Write
Get repository configuration autofill — cloudflare.getworkerconfigautofill Read
List build tokens — cloudflare.listbuildtokens Read
Create build token — cloudflare.createbuildtoken Write
Delete a build token — cloudflare.deletebuildtoken Write
Create a build trigger — cloudflare.createtrigger Write
Delete a build trigger — cloudflare.deletetrigger Write
Update a build trigger — cloudflare.updatetrigger Write
Start a Workers build — cloudflare.createmanualbuild Write
List build variables — cloudflare.listenvironmentvariables Read
Set build variables — cloudflare.upsertenvironmentvariables Write
Delete a build variable — cloudflare.deleteenvironmentvariable Write
Purge a trigger's build cache — cloudflare.purgebuildcache Write
Create Worker build configuration — cloudflare.createworkerbuild Write
List builds for a Worker — cloudflare.listbuildsbyscript Read
List triggers for a Worker — cloudflare.listtriggersbyscript Read
List deploy hooks — cloudflare.listdeployhooks Read
Create a deploy hook — cloudflare.createdeployhook Write
Delete a deploy hook — cloudflare.deletedeployhook Write
Get a deploy hook — cloudflare.getdeployhook Read
Update a deploy hook — cloudflare.updatedeployhook Write
Delete Worker build configuration — cloudflare.deleteworkerbuild Write
Get Worker build configuration — cloudflare.getworkerbuild Read
Migrate worker to previews — cloudflare.migrateworkertopreviews Write
List previews — cloudflare.listworkerpreviews Read
Get preview — cloudflare.getworkerpreview Read
List builds by preview — cloudflare.listbuildsbypreview Read
Create preview build — cloudflare.createpreviewbuild Write
Create Subscriptions — cloudflare.account-subscriptions-bulk-create-subscription Write
List apps — cloudflare.calls-apps-list Read
Create an SFU app — cloudflare.calls-apps-create-a-new-app Write
Delete an SFU app — cloudflare.calls-apps-delete-app Write
Retrieve SFU app details — cloudflare.calls-apps-retrieve-app-details Read
Update SFU app details — cloudflare.calls-apps-update-app-details Write
List TURN keys — cloudflare.calls-turn-key-list Read
Create a TURN key — cloudflare.calls-turn-key-create Write
Delete TURN key — cloudflare.calls-delete-turn-key Write
Retrieve TURN key details — cloudflare.calls-retrieve-turn-key-details Read
Update TURN key details — cloudflare.calls-update-turn-key Write
List Cloudflare Tunnels — cloudflare.cloudflare-tunnel-list-cloudflare-tunnels Read
Create a Cloudflare Tunnel — cloudflare.cloudflare-tunnel-create-a-cloudflare-tunnel Write
Delete a Cloudflare Tunnel — cloudflare.cloudflare-tunnel-delete-a-cloudflare-tunnel Write
Get a Cloudflare Tunnel — cloudflare.cloudflare-tunnel-get-a-cloudflare-tunnel Read
Update a Cloudflare Tunnel — cloudflare.cloudflare-tunnel-update-a-cloudflare-tunnel Write
Get Tunnel configuration — cloudflare.cloudflare-tunnel-configuration-get-configuration Read
Update Tunnel configuration — cloudflare.cloudflare-tunnel-configuration-put-configuration Write
Clean up Cloudflare Tunnel connections — cloudflare.cloudflare-tunnel-clean-up-cloudflare-tunnel-connections Write
List Cloudflare Tunnel connections — cloudflare.cloudflare-tunnel-list-cloudflare-tunnel-connections Read
Get Cloudflare Tunnel connector — cloudflare.cloudflare-tunnel-get-cloudflare-tunnel-connector Read
Get a Cloudflare Tunnel management token — cloudflare.cloudflare-tunnel-get-a-cloudflare-tunnel-management-token Write
Get a Cloudflare Tunnel token — cloudflare.cloudflare-tunnel-get-a-cloudflare-tunnel-token Read
List Turnstile Widgets — cloudflare.accounts-turnstile-widgets-list Read
Create a Turnstile Widget — cloudflare.accounts-turnstile-widget-create Write
Delete a Turnstile Widget — cloudflare.accounts-turnstile-widget-delete Write
Turnstile Widget Details — cloudflare.accounts-turnstile-widget-get Read
Update a Turnstile Widget — cloudflare.accounts-turnstile-widget-update Write
Rotate Secret for a Turnstile Widget — cloudflare.accounts-turnstile-widget-rotate-secret Write
Create Setup Intent — cloudflare.account-billing-create-setup-intent Write
Get the Latest Banner Grab Result — cloudflare.get_getbanners Read
Retrieves a file from Binary Storage — cloudflare.get_bindbgetbinary Read
List events — cloudflare.get_eventlistget Read
Search events — cloudflare.post_eventlist Write
Aggregate events — cloudflare.get_eventaggregate Read
List attackers — cloudflare.get_attackerlist Read
List related events — cloudflare.get_eventrelationships Read
List event categories used in datasets — cloudflare.get_categorylist Read
List all event categories — cloudflare.get_categorylistcomplete Read
Create an event category — cloudflare.post_categorycreate Write
List countries — cloudflare.get_countryread Read
Create an event — cloudflare.post_eventcreate Write
Create events in bulk — cloudflare.post_eventcreatebulk Write
List datasets — cloudflare.get_datasetlist Read
List account groups — cloudflare.get_grouplist Read
Create an account group — cloudflare.post_groupcreate Write
Delete an account group — cloudflare.delete_groupdelete Write
Get an account group — cloudflare.get_groupread Read
Update an account group — cloudflare.put_groupupdate Write
List group members — cloudflare.get_groupmemberlist Read
Add an account to a group — cloudflare.post_groupmembercreate Write
Remove an account from a group — cloudflare.delete_groupmemberdelete Write
Create a dataset — cloudflare.post_datasetcreate Write
Delete a dataset — cloudflare.delete_datasetdelete Write
Get a dataset — cloudflare.get_datasetread Read
Update a dataset — cloudflare.patch_datasetupdate Write
Update a dataset — cloudflare.post_datasetupdate Write
Copy events to another dataset — cloudflare.post_eventcopytonewds Write
Get an event — cloudflare.get_eventread Read
Create an indicator type — cloudflare.post_indicatortypecreate Write
Delete indicators in bulk — cloudflare.delete_indicatordeletebulk Write
Create indicators in bulk — cloudflare.post_indicatorcreatebulk Write
Create an indicator — cloudflare.post_indicatorcreate Write
List tags on a dataset's indicators — cloudflare.get_indicatortagslist Read
Delete an indicator — cloudflare.delete_indicatordelete Write
Get an indicator — cloudflare.get_indicatorread Read
Update an indicator — cloudflare.patch_indicatorupdate Write
List indicator relationships — cloudflare.get_indicatorrelationshipslist Read
Create an indicator relationship — cloudflare.post_indicatorrelationshipcreate Write
Delete an indicator relationship — cloudflare.delete_indicatorrelationshipdelete Write
Update an indicator relationship — cloudflare.patch_indicatorrelationshipupdate Write
Move events to another dataset — cloudflare.post_eventmovetonewds Write
List dataset permissions — cloudflare.get_permissionlist Read
Grant access to a dataset — cloudflare.post_permissioncreate Write
Revoke access to a dataset — cloudflare.delete_permissiondelete Write
Change a dataset permission — cloudflare.put_permissionupdate Write
List target industries in a dataset (legacy) — cloudflare.get_targetindustrylistbydataset Read
Rebuild dataset lookup lists — cloudflare.post_datasetpopulate Write
Delete events — cloudflare.delete_eventdelete Write
Get raw data for an event — cloudflare.get_eventrawreadds Read
Delete an event category — cloudflare.delete_categorydelete Write
Get an event category — cloudflare.get_categoryread Read
Update an event category — cloudflare.patch_categoryupdate Write
Update an event category — cloudflare.post_categoryupdate Write
Remove tags from an event (legacy) — cloudflare.delete_eventtagdelete Write
Add tags to an event (legacy) — cloudflare.post_eventtagcreate Write
Query graph neighborhood from R2 Data Catalog — cloudflare.get_eventgraph Read
Run a GraphQL aggregation over events — cloudflare.post_eventgraphql Write
List indicator types — cloudflare.get_indicatortypeslist Read
List indicators — cloudflare.get_indicatorlist Read
Aggregate indicators by column(s) — cloudflare.get_indicatoraggregate Read
List saved event queries — cloudflare.get_eventquerylist Read
Create a saved event query — cloudflare.post_eventquerycreate Write
Delete a saved event query — cloudflare.delete_eventquerydelete Write
Get a saved event query — cloudflare.get_eventqueryread Read
Update a saved event query — cloudflare.patch_eventqueryupdate Write
Update a saved event query — cloudflare.post_eventqueryupdate Write
Remove event references (legacy) — cloudflare.delete_eventreferencedelete Write
Add event references (legacy) — cloudflare.post_eventreferencecreate Write
Create event relationships — cloudflare.post_createeventrelationship Write
Delete a tag category — cloudflare.delete_tagcategorydelete Write
Get a tag category — cloudflare.get_tagcategorydetail Read
Update a tag category — cloudflare.patch_tagcategoryupdate Write
List tags — cloudflare.get_taglist Read
List tag categories — cloudflare.get_tagcategorylist Read
List threat actors — cloudflare.get_taggedactorlist Read
Create a tag category — cloudflare.post_tagcategorycreate Write
Create a tag — cloudflare.post_tagcreate Write
Delete a tag — cloudflare.delete_tagdelete Write
Get a tag — cloudflare.get_tagdetail Read
Update a tag — cloudflare.patch_tagupdate Write
List a tag's indicators — cloudflare.get_tagindicatorslist Read
List tag relationships — cloudflare.get_tagrelationshipslist Read
Create a tag relationship — cloudflare.post_tagrelationshipcreate Write
Delete a tag relationship — cloudflare.delete_tagrelationshipdelete Write
Update a tag relationship — cloudflare.patch_tagrelationshipupdate Write
List target industries used in datasets — cloudflare.get_targetindustrylist Read
List all target industries — cloudflare.get_targetindustrylistcomplete Read
Update events in bulk — cloudflare.patch_eventupdatebulk Write
Update an event — cloudflare.patch_eventupdate Write
Update an event — cloudflare.post_eventupdate Write
Get raw event data by raw ID (legacy) — cloudflare.get_eventrawread Read
Update raw event data by raw ID (legacy) — cloudflare.patch_eventrawupdate Write
Update raw event data by raw ID (legacy) — cloudflare.post_eventrawupdate Write
List Requests — cloudflare.cloudforce-one-request-list Write
Get Request Priority, Status, and TLP constants — cloudflare.cloudforce-one-request-constants Read
Create a New Request. — cloudflare.cloudforce-one-request-new Write
List Priority Intelligence Requirements — cloudflare.cloudforce-one-priority-list Write
Create a New Priority Intelligence Requirement — cloudflare.cloudforce-one-priority-new Write
Get Priority Intelligence Requirement Quota — cloudflare.cloudforce-one-priority-quota Read
Delete a Priority Intelligence Requirement — cloudflare.cloudforce-one-priority-delete Write
Get a Priority Intelligence Requirement — cloudflare.cloudforce-one-priority-get Read
Update a Priority Intelligence Requirement — cloudflare.cloudforce-one-priority-update Write
Get Request Quota — cloudflare.cloudforce-one-request-quota Read
Get Request Types — cloudflare.cloudforce-one-request-types Read
Delete a Request — cloudflare.cloudforce-one-request-delete Write
Get a Request — cloudflare.cloudforce-one-request-get Read
Update a Request — cloudflare.cloudforce-one-request-update Write
List Request Assets — cloudflare.cloudforce-one-request-asset-list Write
Delete a Request Asset — cloudflare.cloudforce-one-request-asset-delete Write
Get a Request Asset — cloudflare.cloudforce-one-request-asset-get Read
Update a Request Asset — cloudflare.cloudforce-one-request-asset-update Write
List Request Messages — cloudflare.cloudforce-one-request-message-list Write
Create a New Request Message — cloudflare.cloudforce-one-request-message-new Write
Delete a Request Message — cloudflare.cloudforce-one-request-message-delete Write
Update a Request Message — cloudflare.cloudforce-one-request-message-update Write
Delete all rules — cloudflare.cloudforce-one-delete-all-rules Write
List rules — cloudflare.cloudforce-one-list-rules Read
Create a rule — cloudflare.cloudforce-one-create-rule Write
List rule approvals — cloudflare.cloudforce-one-list-rule-approvals Read
Get rule approval details — cloudflare.cloudforce-one-get-rule-approval Read
Cancel a pending approval — cloudflare.cloudforce-one-cancel-rule-approval Write
Revise and resubmit a rejected approval — cloudflare.cloudforce-one-resubmit-rule-approval Write
Remove patterns from exemption rules — cloudflare.cloudforce-one-remove-account-exemptions Write
Get exemption rules for an account — cloudflare.cloudforce-one-get-exemptions Read
Add patterns to exemption rules — cloudflare.cloudforce-one-add-account-exemptions Write
Update exemption rule patterns — cloudflare.cloudforce-one-update-account-exemptions Write
Get managed rules — cloudflare.cloudforce-one-get-managed-rules Read
Search rules — cloudflare.cloudforce-one-search-rules Read
Get dashboard stats — cloudflare.cloudforce-one-get-rule-stats Read
List email rules — cloudflare.cloudforce-one-list-email-rules Read
Create an email rule — cloudflare.cloudforce-one-create-email-rule Write
Update a pending structured email rule approval — cloudflare.cloudforce-one-update-pending-email-rule-approval Write
Revise and resubmit a rejected structured email rule approval — cloudflare.cloudforce-one-resubmit-email-rule-approval Write
Get email rule schema — cloudflare.cloudforce-one-get-email-rule-schema Read
Validate an email rule — cloudflare.cloudforce-one-validate-email-rule Write
Delete an email rule — cloudflare.cloudforce-one-delete-email-rule Write
Get an email rule — cloudflare.cloudforce-one-get-email-rule Read
Update an email rule — cloudflare.cloudforce-one-update-email-rule Write
Test an email rule — cloudflare.cloudforce-one-test-email-rule Write
Get folder tree structure — cloudflare.cloudforce-one-get-rule-tree Read
Validate rule with context — cloudflare.cloudforce-one-validate-rule Write
Delete a rule — cloudflare.cloudforce-one-delete-rule Write
Get a rule — cloudflare.cloudforce-one-get-rule Read
Update a rule — cloudflare.cloudforce-one-update-rule Write
List Scan Configs — cloudflare.get_configfetch Read
Create a new Scan Config — cloudflare.post_configcreate Write
Delete a Scan Config — cloudflare.delete_deletescans Write
Update an existing Scan Config — cloudflare.post_configupdate Write
Get the Latest Scan Result — cloudflare.get_getopenports Read
List saved query matches — cloudflare.get_domainmatchlist Read
Bulk dismiss or undismiss matches — cloudflare.post_bulkdismissmatches Write
Get queries — cloudflare.get_getdomainqueries Read
Insert query — cloudflare.post_insertdomainquery Write
Delete domain query — cloudflare.delete_deletedomainquery Write
Update domain query — cloudflare.patch_updatedomainquery Write
Analyze domains for brand impersonation — cloudflare.post_domaintrial Write
Generate takedown letter — cloudflare.post_lettergenerate Write
List letter templates — cloudflare.get_lettertemplatelist Read
Create letter template — cloudflare.post_lettertemplatecreate Write
List example letter templates — cloudflare.get_lettertemplateexamples Read
Delete letter template — cloudflare.delete_lettertemplatedelete Write
Get letter template — cloudflare.get_lettertemplateget Read
Update letter template — cloudflare.put_lettertemplateupdate Write
List logo matches — cloudflare.get_logomatchlist Read
Get logo queries — cloudflare.get_getlogoqueries Read
Insert logo query — cloudflare.post_insertlogoquery Write
Delete logo query — cloudflare.delete_deletelogoquery Write
Search scanned images — cloudflare.post_searchlogosimilarity Write
Dismiss a match — cloudflare.post_dismissmatch Write
Undismiss a match — cloudflare.post_undismissmatch Write
List takedown notices — cloudflare.get_takedownnoticelist Read
Create takedown notice — cloudflare.post_takedownnoticecreate Write
Lookup takedown notices by domains — cloudflare.post_takedownnoticelookup Write
Delete takedown notice — cloudflare.delete_takedownnoticedelete Write
Get takedown notice — cloudflare.get_takedownnoticeget Read
Update takedown notice — cloudflare.put_takedownnoticeupdate Write
List takedown letters — cloudflare.get_takedownletterlist Read
Create takedown letter — cloudflare.post_takedownlettercreate Write
Delete takedown letter — cloudflare.delete_takedownletterdelete Write
Get takedown letter — cloudflare.get_takedownletterget Read
Get total queries — cloudflare.get_totalqueries Read
List collections — cloudflare.get_collectionlist Read
Create a new collection — cloudflare.post_collectioncreate Write
Delete collection — cloudflare.delete_collectiondelete Write
Get collection — cloudflare.get_collectionget Read
Update collection — cloudflare.patch_collectionupdate Write
Add column to collection — cloudflare.post_columnadd Write
Delete column — cloudflare.delete_columndelete Write
Update column — cloudflare.patch_columnupdate Write
Export collection to CSV, JSONL, or Markdown — cloudflare.get_collectionexportendpoint Read
Query collection items — cloudflare.get_itemquery Read
Create item(s) — cloudflare.post_itemcreate Write
Delete collection item — cloudflare.delete_itemdelete Write
Get collection item — cloudflare.get_itemget Read
Update collection item — cloudflare.patch_itemupdate Write
Search items (advanced filtering) — cloudflare.post_itemsearch Write
List monitored domains — cloudflare.get_domainlist Read
Create monitored domain — cloudflare.post_domaincreate Write
Delete monitored domain — cloudflare.delete_domaindelete Write
List credential matches — cloudflare.get_matchlist Read
Run a GraphQL aggregation over events (legacy) — cloudflare.post_eventgraphqlv2 Write
List priority intelligence requirements for an account — cloudflare.get_pirlist Read
Create a priority intelligence requirement — cloudflare.post_pircreate Write
Get PIR constants (methods, dimensions, and TLP values) — cloudflare.get_pirconstants Read
Generate event filters from a PIR — cloudflare.post_pirfiltergenerate Write
List account interests for PIR Option 2 — cloudflare.get_pirinterestlist Read
Create an account interest for PIR Option 2 — cloudflare.post_pirinterestcreate Write
Backtest account-interest change detection — cloudflare.post_pirinterestbacktestcreate Write
Get a persisted account-interest backtest — cloudflare.get_pirinterestbacktestget Read
Evaluate recent event-dated changes for account interests — cloudflare.post_pirinterestevaluationcreate Write
Get a persisted account-interest evaluation — cloudflare.get_pirinterestevaluationget Read
Delete an account interest for PIR Option 2 — cloudflare.delete_pirinterestdelete Write
Update an account interest for PIR Option 2 — cloudflare.patch_pirinterestupdate Write
Count matched events across the account's priority intelligence requirements — cloudflare.get_pirallmatchaggregates Read
Delete the organization profile — cloudflare.delete_pirprofiledelete Write
Get the organization profile — cloudflare.get_pirprofileget Read
Create or replace the organization profile — cloudflare.put_pirprofileput Write
Get PIR quota for an account — cloudflare.post_pirquota Write
Delete a priority intelligence requirement — cloudflare.delete_pirdelete Write
Get a priority intelligence requirement by ID — cloudflare.get_pirget Read
Update a priority intelligence requirement — cloudflare.put_pirupdate Write
List a priority intelligence requirement's matched events — cloudflare.get_pirmatcheslist Read
Triage a priority intelligence requirement's matched events — cloudflare.patch_pirmatchestriage Write
Count a priority intelligence requirement's matched events — cloudflare.get_pirmatchaggregates Read
Count a priority intelligence requirement's matched events per day — cloudflare.get_pirmatchseries Read
Check if current user is allowlisted for Legal Response — cloudflare.get_legalresponseaccesscheck Read
List RFIs — cloudflare.get_requestlist Read
Creates a new RFI — cloudflare.post_requestcreate Write
Get request constants — cloudflare.get_requestconstants Read
List metadata fields for an RFI type — cloudflare.get_dashboardmetadatafieldlist Read
Get request token quota — cloudflare.get_requestquota Read
List visible request types for a project (dashboard) — cloudflare.get_dashboardrequesttypeslist Read
Get current user profile — cloudflare.get_usergetself Read
Get an RFI by ID — cloudflare.get_requestread Read
Update an RFI — cloudflare.put_requestupdate Write
List assets in request (Customer) — cloudflare.get_dashboardassetlist Read
List messages for an RFI request — cloudflare.get_messagelist Read
Create a customer follow-on message on an RFI request — cloudflare.post_messagecreate Write
Read a single message for an RFI request — cloudflare.get_messageread Read
Update/publish a message for an RFI request — cloudflare.put_messageupdate Write
Search threat intelligence — cloudflare.searchthreatintelligence Write
List Threat Signals articles — cloudflare.rssarticlelist Read
Bulk update Threat Signals article read status — cloudflare.rssarticlebulkmarkread Write
Count Threat Signals articles by relevance band — cloudflare.rssarticlerelevanceaggregate Read
Count Threat Signals articles by severity band — cloudflare.rssarticleseverityaggregate Read
Get Threat Signals article — cloudflare.rssarticleget Read
Update Threat Signals article read status — cloudflare.rssarticlemarkread Write
Get Threat Signals article content — cloudflare.rssarticlecontentget Read
Reprocess a Threat Signals article — cloudflare.rssarticlereprocess Write
List Threat Signals article custom skills — cloudflare.rssarticlecustomskillslist Read
Get Threat Signals article skill output — cloudflare.rssarticleskilloutputget Read
Run and persist skill output for a Threat Signals article — cloudflare.rssarticleskillrun Write
Generate Threat Signals article AI tags — cloudflare.rssarticletaggenerate Write
Add tag to Threat Signals article — cloudflare.rssarticletagadd Write
Remove tag from Threat Signals article — cloudflare.rssarticletagremove Write
List Threat Signals feed categories — cloudflare.rssfeedcategorylist Read
List Threat Signals feeds — cloudflare.rssfeedlist Read
Create Threat Signals feed — cloudflare.rssfeedcreate Write
Trigger Threat Signals feed poll — cloudflare.rssfeedpoll Write
Delete Threat Signals feed — cloudflare.rssfeeddelete Write
Update Threat Signals feed — cloudflare.rssfeedupdate Write
Get Threat Signals feed XML — cloudflare.rssfeedrawget Read
Get Threat Signals feed skills — cloudflare.rssfeedskillsget Read
Set Threat Signals feed skills — cloudflare.rssfeedskillsset Write
List Threat Signals article indicators — cloudflare.rssarticleindicatorlist Read
Search Threat Signals articles using AI Search — cloudflare.searchthreatsignals Read
List Threat Signals skills — cloudflare.rssskilllist Read
Create Threat Signals skill — cloudflare.rssskillcreate Write
Delete Threat Signals skill — cloudflare.rssskilldelete Write
Get Threat Signals skill — cloudflare.rssskillget Read
Update Threat Signals skill — cloudflare.rssskillupdate Write
Get Threat Signals skill tag categories — cloudflare.rssskilltagcategoriesget Read
Replace Threat Signals skill tag categories — cloudflare.rssskilltagcategoriesreplace Write
List existing CNI objects — cloudflare.list_cnis Read
Create a new CNI object — cloudflare.create_cni Write
Delete a specified CNI object — cloudflare.delete_cni Write
Get information about a CNI object — cloudflare.get_cni Read
Modify stored information about a CNI object — cloudflare.update_cni Write
List existing interconnects — cloudflare.list_interconnects Read
Create a new interconnect — cloudflare.create_interconnect Write
Delete an interconnect object — cloudflare.delete_interconnect Write
Get information about an interconnect object — cloudflare.get_interconnect Read
Generate the Letter of Authorization (LOA) for a given interconnect — cloudflare.get_interconnect_loa Read
Get the default customer name for LOA generation — cloudflare.get_interconnect_loa_default_name Read
Get the current status of an interconnect object — cloudflare.get_interconnect_status Read
Get the current settings for the active account — cloudflare.get_settings Read
Update the current settings for the active account — cloudflare.update_settings Write
Retrieve a list of all slots matching the specified parameters — cloudflare.list_slots Read
Get information about the specified slot — cloudflare.get_slot Read
List Workers VPC connectivity services — cloudflare.connectivity-services-list Read
Delete Workers VPC connectivity service — cloudflare.connectivity-services-delete Write
Get Workers VPC connectivity service — cloudflare.connectivity-services-get Read
List Applications associated with your account — cloudflare.listapplications Read
Create a new application — cloudflare.createapplication Write
Delete a single application by id — cloudflare.deleteapplication Write
Get a single application by id — cloudflare.getapplication Read
Modify an application — cloudflare.modifyapplication Write
List container instances — cloudflare.listcontainerinstances_v2 Read
Create a new rollout for an application — cloudflare.createapplicationrollout Write
List all application versions — cloudflare.listapplicationversions Read
Prepare a container image — cloudflare.preparecontainerimage Write
Get the list of configured registries in the account — cloudflare.listimageregistries Read
Configure a private external image registry — cloudflare.createimageregistry Write
Delete a registry from the account — cloudflare.deleteimageregistry Write
Generate a JWT to interact with the specified image registry. — cloudflare.generateimageregistrycredentials Write
List Custom CSRs — cloudflare.custom-csrs-for-an-account-list-custom-csrs Read
Create Custom CSR — cloudflare.custom-csrs-for-an-account-create-custom-csr Write
Delete Custom CSR — cloudflare.custom-csrs-for-an-account-delete-custom-csr Write
Custom CSR Details — cloudflare.custom-csrs-for-an-account-custom-csr-details Read
List Account Custom Nameservers — cloudflare.account-level-custom-nameservers-list-account-custom-nameservers Read
Add Account Custom Nameserver — cloudflare.account-level-custom-nameservers-add-account-custom-nameserver Write
Delete Account Custom Nameserver — cloudflare.account-level-custom-nameservers-delete-account-custom-nameserver Write
List custom pages — cloudflare.custom-pages-for-an-account-list-custom-pages Read
List custom assets — cloudflare.custom-assets-for-an-account-list-custom-assets Read
Create a custom asset — cloudflare.custom-assets-for-an-account-create-a-custom-asset Write
Delete a custom asset — cloudflare.custom-assets-for-an-account-delete-a-custom-asset Write
Get a custom asset — cloudflare.custom-assets-for-an-account-get-a-custom-asset Read
Update a custom asset — cloudflare.custom-assets-for-an-account-update-a-custom-asset Write
Create a preview token — cloudflare.custom-pages-for-an-account-create-preview-token Write
Get a custom page — cloudflare.custom-pages-for-an-account-get-a-custom-page Read
Update a custom page — cloudflare.custom-pages-for-an-account-update-a-custom-page Write
List D1 Databases — cloudflare.d1-list-databases Read
Create D1 Database — cloudflare.d1-create-database Write
Delete D1 Database — cloudflare.d1-delete-database Write
Update D1 Database partially — cloudflare.d1-update-partial-database Write
Update D1 Database — cloudflare.d1-update-database Write
Export D1 Database as SQL — cloudflare.d1-export-database Write
Import SQL into your D1 Database — cloudflare.d1-import-database Write
Query D1 Database — cloudflare.d1-query-database Write
Raw D1 Database query — cloudflare.d1-raw-database-query Write
Get D1 database bookmark — cloudflare.d1-time-travel-get-bookmark Read
Restore D1 Database to a bookmark or point in time — cloudflare.d1-time-travel-restore Write
Undelete D1 Database — cloudflare.d1-undelete-database Write
List asset schemas — cloudflare.listassetschemas Read
Get asset schema by asset class — cloudflare.getassetschema Read
List DLP content findings — cloudflare.listcontentassets Read
Create a content export — cloudflare.createcontentexport Write
List all export jobs — cloudflare.listexportjobs Read
List all finding types — cloudflare.listfindingtypes Read
Create a custom finding type — cloudflare.createfindingtype Write
Validate a custom finding type — cloudflare.validatefindingtype Write
Delete a custom finding type — cloudflare.deletefindingtype Write
Get finding by ID — cloudflare.getfindingtype Read
Update a custom finding type — cloudflare.updatefindingtype Write
List remediation types for a finding type — cloudflare.getremediationtypesforfindingtype Read
List posture findings — cloudflare.listfindings Read
Create new findings export request — cloudflare.createfindingexportcsv Write
Mark a finding as ignored — cloudflare.ignorefinding Write
Remove ignore marker from a finding — cloudflare.unignorefinding Write
Get a posture finding — cloudflare.getfinding Read
List instances of a finding — cloudflare.listfindinginstances Read
Archive a finding — cloudflare.archivefindinginstance Write
Remove the archive marking from a finding instance — cloudflare.unarchivefindinginstance Write
Get a finding instance using an instance ID — cloudflare.getfindinginstance Read
Reset severity for a finding back to the default — cloudflare.resetfindingseverity Write
Update the severity for a finding — cloudflare.changefindingseverity Write
Create a finding instances export — cloudflare.createfindinginstancesexportcsv Write
List policy configurations — cloudflare.listpolicies Read
Delete a policy configuration — cloudflare.deletepolicy Write
Get a policy configuration by ID — cloudflare.getpolicybyid Read
List policy invocation logs — cloudflare.listpolicylogentries Read
List remediation jobs — cloudflare.listremediationjobs Read
Creates remediation jobs — cloudflare.createremediationjobs Write
Create a remediation jobs export — cloudflare.createremediationjobsexportcsv Write
List webhook configurations — cloudflare.listwebhooks Read
Create a new webhook configuration — cloudflare.createwebhook Write
Test a webhook configuration before creating it — cloudflare.evaluatenewwebhook Write
Create webhook jobs — cloudflare.createwebhookjobs Write
Delete a webhook configuration — cloudflare.deletewebhook Write
Get webhook configuration by ID — cloudflare.getwebhookconfigbyid Read
Update an existing webhook configuration — cloudflare.updatewebhook Write
Test an existing webhook configuration — cloudflare.evaluateexistingwebhook Write
List client versions — cloudflare.list-client-versions Read
List available target environments — cloudflare.list-client-target-environments Read
List deployment groups — cloudflare.list-deployment-groups Read
Create deployment group — cloudflare.create-deployment-group Write
Delete deployment group — cloudflare.delete-deployment-group Write
Get deployment group — cloudflare.get-deployment-group Read
Update deployment group — cloudflare.update-deployment-group Write
List IP profiles — cloudflare.list-ip-profiles Read
Create IP profile — cloudflare.create-ip-profile Write
Delete IP profile — cloudflare.delete-ip-profile Write
Get IP profile — cloudflare.get-ip-profile Read
Update IP profile — cloudflare.update-ip-profile Write
List your device managed networks — cloudflare.device-managed-networks-list-device-managed-networks Read
Create a device managed network — cloudflare.device-managed-networks-create-device-managed-network Write
Delete a device managed network — cloudflare.device-managed-networks-delete-device-managed-network Write
Get device managed network details — cloudflare.device-managed-networks-device-managed-network-details Read
Update a device managed network — cloudflare.device-managed-networks-update-device-managed-network Write
Generate an uninstall protection override code — cloudflare.create-override-code Write
List devices — cloudflare.list-devices Read
Delete device — cloudflare.delete-device Write
Get device — cloudflare.get-device Read
Update device — cloudflare.patch-device Write
List device settings profiles — cloudflare.devices-list-device-settings-policies Read
Get the default device settings profile — cloudflare.devices-get-default-device-settings-policy Read
Update the default device settings profile — cloudflare.devices-update-default-device-settings-policy Write
Create a device settings profile — cloudflare.devices-create-device-settings-policy Write
Reset Split Tunnel exclude list — cloudflare.devices-delete-split-tunnel-exclude-list Write
Get the Split Tunnel exclude list — cloudflare.devices-get-split-tunnel-exclude-list Read
Set the Split Tunnel exclude list — cloudflare.devices-set-split-tunnel-exclude-list Write
Reset Local Domain Fallback — cloudflare.devices-delete-local-domain-fallback-list Write
Get your Local Domain Fallback list — cloudflare.devices-get-local-domain-fallback-list Read
Set your Local Domain Fallback list — cloudflare.devices-set-local-domain-fallback-list Write
Get the Split Tunnel include list — cloudflare.devices-get-split-tunnel-include-list Read
Set the Split Tunnel include list — cloudflare.devices-set-split-tunnel-include-list Write
Delete a device settings profile — cloudflare.devices-delete-device-settings-policy Write
Get device settings profile by ID — cloudflare.devices-get-device-settings-policy-by-id Read
Update a device settings profile — cloudflare.devices-update-device-settings-policy Write
Reset Split Tunnel exclude list — cloudflare.devices-delete-split-tunnel-exclude-list-for-a-device-settings-policy Write
Get the Split Tunnel exclude list for a device settings profile — cloudflare.devices-get-split-tunnel-exclude-list-for-a-device-settings-policy Read
Set the Split Tunnel exclude list for a device settings profile — cloudflare.devices-set-split-tunnel-exclude-list-for-a-device-settings-policy Write
Reset Local Domain Fallback — cloudflare.devices-delete-local-domain-fallback-list-for-a-device-set-d98d3493e3 Write
Get the Local Domain Fallback list for a device settings profile — cloudflare.devices-get-local-domain-fallback-list-for-a-device-settings-policy Read
Set the Local Domain Fallback list for a device settings profile — cloudflare.devices-set-local-domain-fallback-list-for-a-device-settings-policy Write
Get the Split Tunnel include list for a device settings profile — cloudflare.devices-get-split-tunnel-include-list-for-a-device-settings-policy Read
Set the Split Tunnel include list for a device settings profile — cloudflare.devices-set-split-tunnel-include-list-for-a-device-settings-policy Write
List posture rules — cloudflare.device-posture-rules-list-device-posture-rules Read
Create posture rule — cloudflare.device-posture-rules-create-device-posture-rule Write
List posture integrations — cloudflare.device-posture-integrations-list-device-posture-integrations Read
Delete posture integration — cloudflare.device-posture-integrations-delete-device-posture-integration Write
Get posture integration — cloudflare.device-posture-integrations-device-posture-integration-details Read
Update posture integration — cloudflare.device-posture-integrations-update-device-posture-integration Write
Delete posture rule — cloudflare.device-posture-rules-delete-device-posture-rule Write
Get posture rule — cloudflare.device-posture-rules-device-posture-rules-details Read
Update posture rule — cloudflare.device-posture-rules-update-device-posture-rule Write
Delete registrations — cloudflare.delete-registrations Write
List registrations — cloudflare.list-registrations Read
Delete registration — cloudflare.delete-registration Write
Get registration — cloudflare.get-registration Read
Get override codes — cloudflare.get-registration-override-codes Read
Get Global Disconnect — cloudflare.devices-resilience-retrieve-global-warp-override Read
Set Global Disconnect — cloudflare.devices-resilience-set-global-warp-override Write
Reset device settings — cloudflare.zero-trust-accounts-delete-device-settings-for-zero-trust-account Write
Get device settings — cloudflare.zero-trust-accounts-get-device-settings-for-zero-trust-account Read
Update device settings — cloudflare.zero-trust-accounts-patch-device-settings-for-the-zero-trust-account Write
List Cloudflare colos — cloudflare.dex-endpoints-list-colos Read
List account commands — cloudflare.get-commands Read
Create account commands — cloudflare.post-commands Write
List devices eligible for remote captures — cloudflare.get-commands-eligible-devices Read
Returns account commands usage, quota, and reset time — cloudflare.get-commands-quota Read
List Device DEX tests — cloudflare.device-dex-test-details Read
Create Device DEX test — cloudflare.device-dex-test-create-device-dex-test Write
Delete Device DEX test — cloudflare.device-dex-test-delete-device-dex-test Write
Get Device DEX test — cloudflare.device-dex-test-get-device-dex-test Read
Update Device DEX test — cloudflare.device-dex-test-update-device-dex-test Write
Get the latest status of a device. — cloudflare.devices-live-status Read
Get the status over time for a device — cloudflare.dex-device-status-over-time Read
List device ISPs — cloudflare.dex-endpoints-list-device-isps Read
List details of devices using WARP. — cloudflare.dex-fleet-status-devices Read
Get live aggregate device details by dimension — cloudflare.dex-fleet-status-live Read
Get over time aggregate details for devices by dimension — cloudflare.dex-fleet-status-over-time Read
Get percentiles for an http test — cloudflare.dex-endpoints-http-test-percentiles Read
List DEX Rules — cloudflare.list-dex-rules Read
Create a DEX Rule — cloudflare.create-dex-rule Write
Delete a DEX Rule — cloudflare.delete-dex-rule Write
Get DEX Rule — cloudflare.get-dex-rule Read
Update a DEX Rule — cloudflare.update-dex-rule Write
List DEX test analytics — cloudflare.dex-endpoints-list-tests-overview Read
Get count of devices targeted — cloudflare.dex-endpoints-tests-unique-devices Read
Get details for a specific traceroute test run — cloudflare.dex-endpoints-traceroute-test-result-network-path Read
Get percentiles for a traceroute test — cloudflare.dex-endpoints-traceroute-test-percentiles Read
List WARP change events. — cloudflare.list-warp-change-events Read
List Endpoint Health Checks — cloudflare.diagnostics-endpoint-healthcheck-list Read
Endpoint Health Check — cloudflare.diagnostics-endpoint-healthcheck-create Write
Delete Endpoint Health Check — cloudflare.diagnostics-endpoint-healthcheck-delete Write
Get Endpoint Health Check — cloudflare.diagnostics-endpoint-healthcheck-get Read
Update Endpoint Health Check — cloudflare.diagnostics-endpoint-healthcheck-update Write
Traceroute — cloudflare.diagnostics-traceroute Write
List custom prompt topics — cloudflare.dlp-custom-prompt-topics-list Read
Create custom prompt topic — cloudflare.dlp-custom-prompt-topics-create Write
Delete custom prompt topic — cloudflare.dlp-custom-prompt-topics-delete Write
Get custom prompt topic — cloudflare.dlp-custom-prompt-topics-get Read
Update custom prompt topic — cloudflare.dlp-custom-prompt-topics-update Write
Retrieve all data classes in an account — cloudflare.dlp-data-classes-list Read
Creates a new data class — cloudflare.dlp-data-classes-create Write
Delete a single data class — cloudflare.dlp-data-classes-delete Write
Retrieve a specific data class — cloudflare.dlp-data-classes-read Read
Update the attributes of a single data class — cloudflare.dlp-data-classes-update Write
Retrieve all data tag categories in an account — cloudflare.dlp-data-tag-categories-list Read
Creates a new data tag category. — cloudflare.dlp-data-tag-categories-create Write
Delete a single data tag category. — cloudflare.dlp-data-tag-categories-delete Write
Retrieve a specific data tag category. — cloudflare.dlp-data-tag-categories-read Read
Update the attributes of a single data tag category. — cloudflare.dlp-data-tag-categories-update Write
Retrieve all data tags in a data tag category — cloudflare.dlp-data-tags-list Read
Creates a new data tag. — cloudflare.dlp-data-tags-create Write
Delete a single data tag. — cloudflare.dlp-data-tags-delete Write
Retrieve a specific data tag. — cloudflare.dlp-data-tags-read Read
Update the attributes of a single data tag. — cloudflare.dlp-data-tags-update Write
Retrieve all data tag category templates in an account — cloudflare.dlp-data-tag-category-templates-list Read
Retrieve a specific data tag category template. — cloudflare.dlp-data-tag-category-template-read Read
Fetch all datasets — cloudflare.dlp-datasets-read-all Read
Create a new dataset — cloudflare.dlp-datasets-create Write
Delete a dataset — cloudflare.dlp-datasets-delete Write
Fetch a specific dataset — cloudflare.dlp-datasets-read Read
Update details about a dataset — cloudflare.dlp-datasets-update Write
Prepare to upload a new version of a dataset — cloudflare.dlp-datasets-create-version Write
Sets the column information for a multi-column upload — cloudflare.dlp-datasets-define-columns Write
Retrieve data about all document fingerprints. — cloudflare.dlp-document-fingerprints-read-all Read
Creates a new document fingerprint. — cloudflare.dlp-document-fingerprints-create Write
Delete a single document fingerprint. — cloudflare.dlp-document-fingerprints-delete Write
Retrieve data about a specific document fingerprint. — cloudflare.dlp-document-fingerprints-read Read
Update the attributes of a single document fingerprint. — cloudflare.dlp-document-fingerprints-update Write
Get mapping — cloudflare.dlp-email-scanner-get-account-mapping Read
Create mapping — cloudflare.dlp-email-scanner-create-account-mapping Write
List all email scanner rules — cloudflare.dlp-email-scanner-list-all-rules Read
Update email scanner rule priorities — cloudflare.dlp-email-scanner-update-rule-priorities Write
Create email scanner rule — cloudflare.dlp-email-scanner-create-rule Write
Delete email scanner rule — cloudflare.dlp-email-scanner-delete-rule Write
Get an email scanner rule — cloudflare.dlp-email-scanner-get-rule Read
Update email scanner rule — cloudflare.dlp-email-scanner-update-rule Write
List all entries — cloudflare.dlp-entries-list-all-entries Read
Create custom entry — cloudflare.dlp-entries-create-entry Write
Update custom entry — cloudflare.dlp-entries-update-custom-entry Write
Create integration entry — cloudflare.dlp-entries-create-integration-entry Write
Delete integration entry — cloudflare.dlp-entries-delete-integration-entry Write
Update integration entry — cloudflare.dlp-entries-update-integration-entry Write
Create predefined entry — cloudflare.dlp-entries-create-predefined-entry Write
Delete predefined entry — cloudflare.dlp-entries-delete-predefined-entry Write
Update predefined entry — cloudflare.dlp-entries-update-predefined-entry Write
Delete custom entry — cloudflare.dlp-entries-delete-entry Write
Get DLP Entry — cloudflare.dlp-entries-get-dlp-entry Read
Update entry — cloudflare.dlp-entries-update-entry Write
Fetch limits associated with DLP for account — cloudflare.dlp-limits-get Read
Validate a DLP regex pattern — cloudflare.dlp-pattern-validate Write
List all profiles — cloudflare.dlp-profiles-list-all-profiles Read
List all custom profiles — cloudflare.dlp-profiles-list-all-custom-profiles Read
Create custom profile — cloudflare.dlp-profiles-create-custom-profiles Write
Delete custom profile — cloudflare.dlp-profiles-delete-custom-profile Write
Get custom profile — cloudflare.dlp-profiles-get-custom-profile Read
Update custom profile — cloudflare.dlp-profiles-update-custom-profile Write
Delete integration profile — cloudflare.dlp-profiles-delete-integration-profile Write
List integration profile references — cloudflare.dlp-profiles-list-integration-profile-references Read
Create predefined profile — cloudflare.dlp-profiles-create-predefined-profile Write
Delete predefined profile — cloudflare.dlp-profiles-delete-predefined-profile Write
Get predefined profile — cloudflare.dlp-profiles-get-predefined-profile Read
Update predefined profile — cloudflare.dlp-profiles-update-predefined-profile Write
Get predefined profile config — cloudflare.dlp-profiles-get-predefined-profile-config Read
Create predefined profile — cloudflare.dlp-profiles-create-predefined-profile-config Write
Update predefined profile config — cloudflare.dlp-profiles-update-predefined-profile-config Write
Get DLP Profile — cloudflare.dlp-profiles-get-dlp-profile Read
Retrieve all sensitivity groups in an account — cloudflare.dlp-sensitivity-groups-list Read
Creates a new sensitivity group. — cloudflare.dlp-sensitivity-groups-create Write
Retrieve all sensitivity group templates in an account — cloudflare.dlp-sensitivity-group-templates-list Read
Retrieve a specific sensitivity group template. — cloudflare.dlp-sensitivity-group-template-read Read
Delete a single sensitivity group. — cloudflare.dlp-sensitivity-groups-delete Write
Retrieve a specific sensitivity group. — cloudflare.dlp-sensitivity-groups-read Read
Update the attributes of a single sensitivity group. — cloudflare.dlp-sensitivity-groups-update Write
Retrieve the ordered list of level IDs for a sensitivity group. — cloudflare.dlp-sensitivity-groups-get-level-order Read
Set the ordering of levels within a sensitivity group. — cloudflare.dlp-sensitivity-groups-put-level-order Write
Retrieve all sensitivity levels in a sensitivity group — cloudflare.dlp-sensitivity-levels-list Read
Creates a new sensitivity level. — cloudflare.dlp-sensitivity-levels-create Write
Delete a single sensitivity level. — cloudflare.dlp-sensitivity-levels-delete Write
Retrieve a specific sensitivity level. — cloudflare.dlp-sensitivity-levels-read Read
Update the attributes of a single sensitivity level. — cloudflare.dlp-sensitivity-levels-update Write
Delete (reset) DLP account-level settings to initial values. — cloudflare.dlp-settings-delete Write
Get DLP account-level settings. — cloudflare.dlp-settings-get Read
Partially update DLP account-level settings. — cloudflare.dlp-settings-edit Write
Update DLP account-level settings (full replacement). — cloudflare.dlp-settings-update Write
List validators — cloudflare.dlp-validators-list-validators Read
List proximity word validators — cloudflare.dlp-validators-list-proximity-words-validators Read
Create a proximity word validator — cloudflare.dlp-validators-create-proximity-words-validator Write
Delete a proximity word validator — cloudflare.dlp-validators-delete-proximity-words-validator Write
Get a proximity word validator — cloudflare.dlp-validators-get-proximity-words-validator Read
Update a proximity word validator — cloudflare.dlp-validators-update-proximity-words-validator Write
List worker validators — cloudflare.dlp-validators-list-worker-validators Read
Create a worker validator — cloudflare.dlp-validators-create-worker-validator Write
Delete a worker validator — cloudflare.dlp-validators-delete-worker-validator Write
Get a worker validator — cloudflare.dlp-validators-get-worker-validator Read
Update a worker validator — cloudflare.dlp-validators-update-worker-validator Write
Get a worker validator status — cloudflare.dlp-validators-get-worker-validator-status Read
Get a validator — cloudflare.dlp-validators-get-validator Read
List DLS prefix bindings for an account — cloudflare.publiclistprefixbindings Read
Create a DLS prefix binding — cloudflare.publiccreateprefixbinding Write
Delete a DLS prefix binding — cloudflare.publicdeleteprefixbinding Write
Get a DLS prefix binding — cloudflare.publicgetprefixbinding Read
Update a DLS prefix binding — cloudflare.publicpatchprefixbinding Write
List DLS regions for an account — cloudflare.publiclistregions Read
Get a DLS region — cloudflare.publicgetregion Read
List DNS Firewall Clusters — cloudflare.dns-firewall-list-dns-firewall-clusters Read
Delete DNS Firewall Cluster — cloudflare.dns-firewall-delete-dns-firewall-cluster Write
DNS Firewall Cluster Details — cloudflare.dns-firewall-dns-firewall-cluster-details Read
Update DNS Firewall Cluster — cloudflare.dns-firewall-update-dns-firewall-cluster Write
Show DNS Firewall Cluster Reverse DNS — cloudflare.dns-firewall-show-dns-firewall-cluster-reverse-dns Read
Update DNS Firewall Cluster Reverse DNS — cloudflare.dns-firewall-update-dns-firewall-cluster-reverse-dns Write
Get DNS Record Usage for Account — cloudflare.dns-records-for-an-account-get-usage Read
Show DNS Settings — cloudflare.dns-settings-for-an-account-list-dns-settings Read
Update DNS Settings — cloudflare.dns-settings-for-an-account-update-dns-settings Write
List Custom Nameserver Sets — cloudflare.dns-settings-for-an-account-list-custom-nameserver-sets Read
Create Custom Nameserver Set — cloudflare.dns-settings-for-an-account-create-custom-nameserver-set Write
Delete Custom Nameserver Set — cloudflare.dns-settings-for-an-account-delete-custom-nameserver-set Write
Get Custom Nameserver Set — cloudflare.dns-settings-for-an-account-get-custom-nameserver-set Read
Update Custom Nameserver Set — cloudflare.dns-settings-for-an-account-update-custom-nameserver-set Write
List Internal DNS Views — cloudflare.dns-views-for-an-account-list-internal-dns-views Read
Create Internal DNS View — cloudflare.dns-views-for-an-account-create-internal-dns-views Write
Delete Internal DNS View — cloudflare.dns-views-for-an-account-delete-internal-dns-view Write
DNS Internal View Details — cloudflare.dns-views-for-an-account-get-internal-dns-view Read
Update Internal DNS View — cloudflare.dns-views-for-an-account-update-internal-dns-view Write
Get monthly report — cloudflare.email_security_get_monthly_report Read
Search email messages — cloudflare.email_security_investigate Read
List bulk action jobs — cloudflare.email_security_get_bulk_jobs Read
Create a bulk action job — cloudflare.email_security_create_bulk_job Write
Delete a bulk action job — cloudflare.email_security_delete_bulk_job Write
Get bulk action job details — cloudflare.email_security_get_bulk_job Read
Cancel a bulk action job — cloudflare.email_security_cancel_bulk_job Write
List messages for a bulk action job — cloudflare.email_security_get_bulk_job_messages Read
Move messages — cloudflare.email_security_post_bulk_move Write
Generate preview for a non-detection message — cloudflare.email_security_post_preview Write
Release messages from quarantine — cloudflare.email_security_post_release Write
Get message details — cloudflare.email_security_get_message Read
List post-delivery actions for a message — cloudflare.email_security_get_message_action_log Read
Get message detection details — cloudflare.email_security_get_message_detections Read
Move a message — cloudflare.email_security_post_message_move Write
Get preview for a detection — cloudflare.email_security_get_message_preview Read
Get raw email content — cloudflare.email_security_get_message_raw Read
Get email trace — cloudflare.email_security_get_message_trace Read
List PhishGuard reports — cloudflare.email_security_get_phishguard_reports Read
List email allow policies — cloudflare.email_security_list_allow_policies Read
Create email allow policy — cloudflare.email_security_create_allow_policy Write
Batch allow policy operations — cloudflare.email_security_batch_allow_policies Write
Delete an email allow policy — cloudflare.email_security_delete_allow_policy Write
Get an email allow policy — cloudflare.email_security_get_allow_policy Read
Replace an email allow policy — cloudflare.email_security_replace_allow_policy Write
List blocked email senders — cloudflare.email_security_list_blocked_senders Read
Create blocked email sender — cloudflare.email_security_create_blocked_sender Write
Batch blocked sender operations — cloudflare.email_security_batch_blocked_senders Write
Delete a blocked email sender — cloudflare.email_security_delete_blocked_sender Write
Get a blocked email sender — cloudflare.email_security_get_blocked_sender Read
Replace a blocked email sender — cloudflare.email_security_replace_blocked_sender Write
List content policies — cloudflare.email_security_list_content_policies Read
Create a content policy — cloudflare.email_security_create_content_policy Write
Batch content policy operations — cloudflare.email_security_batch_content_policies Write
Delete a content policy — cloudflare.email_security_delete_content_policy Write
Get a content policy — cloudflare.email_security_get_content_policy Read
List protected email domains — cloudflare.email_security_list_domains Read
Add a new email domain — cloudflare.email_security_create_domains Write
Batch domain operations — cloudflare.email_security_batch_domains Write
Unprotect an email domain — cloudflare.email_security_delete_domain Write
Get an email domain — cloudflare.email_security_get_domain Read
Update an email domain — cloudflare.email_security_update_domain Write
Replace an email domain — cloudflare.email_security_replace_domain Write
Get domain verification details — cloudflare.email_security_get_domain_verification Read
List impersonation registry entries — cloudflare.email_security_list_impersonation_registry Read
Create impersonation registry entry — cloudflare.email_security_create_impersonation_registry Write
Delete an impersonation registry entry — cloudflare.email_security_delete_impersonation_registry Write
Get an impersonation registry entry — cloudflare.email_security_get_impersonation_registry Read
List sending domain restrictions — cloudflare.email_security_list_sending_domain_restrictions Read
Create a sending domain restriction — cloudflare.email_security_create_sending_domain_restriction Write
Batch sending domain restriction operations — cloudflare.email_security_batch_sending_domain_restrictions Write
Delete a sending domain restriction — cloudflare.email_security_delete_sending_domain_restriction Write
Get a sending domain restriction — cloudflare.email_security_get_sending_domain_restriction Read
List trusted email domains — cloudflare.email_security_list_trusted_domains Read
Create trusted email domain — cloudflare.email_security_create_trusted_domain Write
Batch trusted domain operations — cloudflare.email_security_batch_trusted_domains Write
Delete a trusted email domain — cloudflare.email_security_delete_trusted_domain Write
Get a trusted email domain — cloudflare.email_security_get_trusted_domain Read
Replace a trusted email domain — cloudflare.email_security_replace_trusted_domain Write
List URL ignore patterns — cloudflare.email_security_list_url_ignore_patterns Read
Create a URL ignore pattern — cloudflare.email_security_create_url_ignore_pattern Write
Batch URL ignore pattern operations — cloudflare.email_security_batch_url_ignore_patterns Write
Delete a URL ignore pattern — cloudflare.email_security_delete_url_ignore_pattern Write
Get a URL ignore pattern — cloudflare.email_security_get_url_ignore_pattern Read
List reclassify submissions — cloudflare.email_security_submissions Read
Create new submissions — cloudflare.email_security_create_submissions Write
List Email Domain changes — cloudflare.email-domains-changes Read
List Email Domains — cloudflare.email-domains-list Read
Create an Email Domain — cloudflare.email-domains-create Write
Delete an Email Domain — cloudflare.email-domains-delete Write
Get an Email Domain — cloudflare.email-domains-get Read
Verify an Email Domain — cloudflare.email-domains-verify Write
List destination addresses — cloudflare.email-routing-destination-addresses-list-destination-addresses Read
Create a destination address — cloudflare.email-routing-destination-addresses-create-a-destination-address Write
Delete destination address — cloudflare.email-routing-destination-addresses-delete-destination-address Write
Get a destination address — cloudflare.email-routing-destination-addresses-get-a-destination-address Read
Update destination address — cloudflare.email-routing-destination-addresses-update-destination-address Write
List account routing rules — cloudflare.email-routing-routing-rules-list-account-routing-rules Read
Plan account routing rule changes — cloudflare.email-routing-routing-rules-plan-account-routing-rules Write
Get sending limits — cloudflare.email-sending-get-sending-limits Read
Get account reputation — cloudflare.email-sending-get-reputation Read
Send an email — cloudflare.email-sending-account-send-builder Write
Send a raw MIME email — cloudflare.email-sending-account-send-raw-message Write
List account Email Sending suppressions — cloudflare.get_publiclistsendingsuppressions Read
Create account Email Sending suppression — cloudflare.post_publiccreatesendingsuppression Write
Bulk import account Email Sending suppressions — cloudflare.post_publicbulkcreatesendingsuppressions Write
Delete account Email Sending suppression — cloudflare.delete_publicdeletesendingsuppression Write
Get account Email Sending suppression — cloudflare.get_publicgetsendingsuppression Read
Update account Email Sending suppression — cloudflare.patch_publicupdatesendingsuppression Write
Get Account Entitlements — cloudflare.entitlements-get-account-entitlements Read
List Event Notification Rules — cloudflare.r2-get-event-notification-configs Read
List Event Subscriptions — cloudflare.subscriptions-list Read
Create Event Subscription — cloudflare.subscriptions-create Write
Delete Event Subscription — cloudflare.subscriptions-delete Write
Get Event Subscription — cloudflare.subscriptions-get Read
Update Event Subscription — cloudflare.subscriptions-patch Write
Delete Field Extractor — cloudflare.deletefieldextractor Write
Get Field Extractor — cloudflare.getfieldextractor Read
Update Field Extractor — cloudflare.updatefieldextractor Write
List IP Access rules — cloudflare.ip-access-rules-for-an-account-list-ip-access-rules Read
Delete an IP Access rule — cloudflare.ip-access-rules-for-an-account-delete-an-ip-access-rule Write
Get an IP Access rule — cloudflare.ip-access-rules-for-an-account-get-an-ip-access-rule Read
Delete the payload logging key — cloudflare.payload-logging-keys-for-an-account-delete-the-payload-logging-key Write
Get the payload logging key — cloudflare.payload-logging-keys-for-an-account-get-the-payload-logging-key Read
Set the payload logging key — cloudflare.payload-logging-keys-for-an-account-set-the-payload-logging-key Write
List apps — cloudflare.flagship_list_apps Read
Create app — cloudflare.flagship_create_app Write
Delete app — cloudflare.flagship_delete_app Write
Get app — cloudflare.flagship_get_app Read
Update app — cloudflare.flagship_update_app Write
Get flag definitions — cloudflare.flagship_get_definitions Read
Evaluate flag from query context — cloudflare.flagship_evaluate_flag Read
Evaluate flag with JSON context — cloudflare.flagship_evaluate_flag_post Write
List flags — cloudflare.flagship_list_flags Read
Create flag — cloudflare.flagship_create_flag Write
Delete flag — cloudflare.flagship_delete_flag Write
Get flag — cloudflare.flagship_get_flag Read
Partially update flag — cloudflare.flagship_patch_flag Write
Update flag — cloudflare.flagship_update_flag Write
List flag changelog entries — cloudflare.flagship_get_flag_changelog Read
Get Zero Trust account information — cloudflare.zero-trust-accounts-get-zero-trust-account-information Read
Create Zero Trust account — cloudflare.zero-trust-accounts-create-zero-trust-account Write
List application and application type mappings — cloudflare.zero-trust-gateway-application-and-application-type-mappin-ae71b8b2fb Read
List applications review statuses — cloudflare.zero-trust-applications-review-status-list Read
Update applications review statuses — cloudflare.zero-trust-applications-review-status-update Write
Get Zero Trust SSH settings — cloudflare.zero-trust-get-audit-ssh-settings Read
Update Zero Trust SSH settings — cloudflare.zero-trust-update-audit-ssh-settings Write
Rotate Zero Trust SSH account seed — cloudflare.zero-trust-rotate-ssh-account-seed Write
List categories — cloudflare.zero-trust-gateway-categories-list-categories Read
List Zero Trust certificates — cloudflare.zero-trust-certificates-list-zero-trust-certificates Read
Create Zero Trust certificate — cloudflare.zero-trust-certificates-create-zero-trust-certificate Write
Delete Zero Trust certificate — cloudflare.zero-trust-certificates-delete-zero-trust-certificate Write
Get Zero Trust certificate details — cloudflare.zero-trust-certificates-zero-trust-certificate-details Read
Activate a Zero Trust certificate — cloudflare.zero-trust-certificates-activate-zero-trust-certificate Write
Deactivate a Zero Trust certificate — cloudflare.zero-trust-certificates-deactivate-zero-trust-certificate Write
Get Zero Trust account configuration — cloudflare.zero-trust-accounts-get-zero-trust-account-configuration Read
Patch Zero Trust account configuration — cloudflare.zero-trust-accounts-patch-zero-trust-account-configuration Write
Update Zero Trust account configuration — cloudflare.zero-trust-accounts-update-zero-trust-account-configuration. Write
List Zero Trust Gateway DNS destination IPv4 address pairs — cloudflare.zero-trust-dns-destination-ips-list-dns-destination-ips Read
Get gateway egress CIDRs pairs assigned to this account — cloudflare.zero-trust-accounts-get-egress-cidr-pairs Read
List Zero Trust lists — cloudflare.zero-trust-lists-list-zero-trust-lists Read
Create Zero Trust list — cloudflare.zero-trust-lists-create-zero-trust-list Write
Delete Zero Trust list — cloudflare.zero-trust-lists-delete-zero-trust-list Write
Get Zero Trust list details — cloudflare.zero-trust-lists-zero-trust-list-details Read
Patch Zero Trust list. — cloudflare.zero-trust-lists-patch-zero-trust-list Write
Update Zero Trust list — cloudflare.zero-trust-lists-update-zero-trust-list Write
Get Zero Trust list items — cloudflare.zero-trust-lists-zero-trust-list-items Read
List Zero Trust Gateway locations — cloudflare.zero-trust-gateway-locations-list-zero-trust-gateway-locations Read
Create a Zero Trust Gateway location — cloudflare.zero-trust-gateway-locations-create-zero-trust-gateway-location Write
Delete a Zero Trust Gateway location — cloudflare.zero-trust-gateway-locations-delete-zero-trust-gateway-location Write
Get Zero Trust Gateway location details — cloudflare.zero-trust-gateway-locations-zero-trust-gateway-location-details Read
Update a Zero Trust Gateway location — cloudflare.zero-trust-gateway-locations-update-zero-trust-gateway-location Write
Get logging settings for the Zero Trust account — cloudflare.zero-trust-accounts-get-logging-settings-for-the-zero-trust-account Read
Update Zero Trust account logging settings — cloudflare.zero-trust-accounts-update-logging-settings-for-the-zero-t-bc8951dcc5 Write
List Zero Trust Gateway operations — cloudflare.zero-trust-gateway-operations-list-zero-trust-gateway-operations Read
Zero Trust Gateway operation details — cloudflare.zero-trust-gateway-operations-zero-trust-gateway-operation-details Read
List PAC files — cloudflare.zero-trust-gateway-pacfiles-list Read
Create a PAC file — cloudflare.zero-trust-gateway-pacfiles-create-pacfile Write
Delete a PAC file — cloudflare.zero-trust-gateway-pacfiles-delete Write
Get a PAC file — cloudflare.zero-trust-gateway-pacfiles-details Read
Update a Zero Trust Gateway PAC file — cloudflare.zero-trust-gateway-pacfiles-update Write
List proxy endpoints — cloudflare.zero-trust-gateway-proxy-endpoints-list-proxy-endpoints Read
Create a proxy endpoint — cloudflare.zero-trust-gateway-proxy-endpoints-create-proxy-endpoint Write
Delete a proxy endpoint — cloudflare.zero-trust-gateway-proxy-endpoints-delete-proxy-endpoint Write
Get a proxy endpoint — cloudflare.zero-trust-gateway-proxy-endpoints-proxy-endpoint-details Read
Update a proxy endpoint — cloudflare.zero-trust-gateway-proxy-endpoints-update-proxy-endpoint Write
List Zero Trust Gateway rules — cloudflare.zero-trust-gateway-rules-list-zero-trust-gateway-rules Read
Patch multiple Zero Trust Gateway rules — cloudflare.zero-trust-gateway-rules-patch-multiple-zero-trust-gateway-rules Write
Create a Zero Trust Gateway rule — cloudflare.zero-trust-gateway-rules-create-zero-trust-gateway-rule Write
List Zero Trust Gateway rules inherited from the parent account — cloudflare.zero-trust-gateway-rules-list-zero-trust-gateway-rules-tenant Read
Delete a Zero Trust Gateway rule — cloudflare.zero-trust-gateway-rules-delete-zero-trust-gateway-rule Write
Get Zero Trust Gateway rule details. — cloudflare.zero-trust-gateway-rules-zero-trust-gateway-rule-details Read
Patch a Zero Trust Gateway rule — cloudflare.zero-trust-gateway-rules-patch-zero-trust-gateway-rule Write
Update a Zero Trust Gateway rule — cloudflare.zero-trust-gateway-rules-update-zero-trust-gateway-rule Write
Reset the expiration of a Zero Trust Gateway Rule — cloudflare.zero-trust-gateway-rules-reset-expiration-zero-trust-gateway-rule Write
List Hyperdrives — cloudflare.list-hyperdrive Read
Create Hyperdrive — cloudflare.create-hyperdrive Write
Delete Hyperdrive — cloudflare.delete-hyperdrive Write
Get Hyperdrive — cloudflare.get-hyperdrive Read
Update Hyperdrive — cloudflare.patch-hyperdrive Write
Replace Hyperdrive — cloudflare.update-hyperdrive Write
Restart Hyperdrive — cloudflare.restart-hyperdrive Write
Create Database Signature — cloudflare.create-hyperdrive-database-signature Write
List Account Permission Groups — cloudflare.account-permission-group-list Read
Permission Group Details — cloudflare.account-permission-group-details Read
List Resource Groups — cloudflare.account-resource-group-list Read
Create Resource Group — cloudflare.account-resource-group-create Write
Remove Resource Group — cloudflare.account-resource-group-delete Write
Resource Group Details — cloudflare.account-resource-group-details Read
Update Resource Group — cloudflare.account-resource-group-update Write
List User Groups — cloudflare.account-user-group-list Read
Create User Group — cloudflare.account-user-group-create Write
Remove User Group — cloudflare.account-user-group-delete Write
User Group Details — cloudflare.account-user-group-details Read
Update User Group — cloudflare.account-user-group-update Write
List User Group Members — cloudflare.account-user-group-member-list Read
Add User Group Members — cloudflare.account-user-group-member-create Write
Update User Group Members — cloudflare.account-user-group-members-update Write
Remove User Group Member — cloudflare.account-user-group-member-delete Write
Get User Group Member — cloudflare.account-user-group-member-get Read
List Signing Keys — cloudflare.cloudflare-images-keys-list-signing-keys Read
Delete Signing Key — cloudflare.cloudflare-images-keys-delete-signing-key Write
Create a new Signing Key — cloudflare.cloudflare-images-keys-add-signing-key Write
Images usage statistics — cloudflare.cloudflare-images-images-usage-statistics Read
List variants — cloudflare.cloudflare-images-variants-list-variants Read
Create a variant — cloudflare.cloudflare-images-variants-create-a-variant Write
Delete a variant — cloudflare.cloudflare-images-variants-delete-a-variant Write
Variant details — cloudflare.cloudflare-images-variants-variant-details Read
Update a variant — cloudflare.cloudflare-images-variants-update-a-variant Write
List images V2 — cloudflare.cloudflare-images-list-images-v2 Read
List image metadata keys — cloudflare.cloudflare-images-list-metadata-keys Read
List sourcing kit migrations — cloudflare.cloudflare-images-sourcingkit-list-migrations Read
Create a sourcing kit migration — cloudflare.cloudflare-images-sourcingkit-create-migration Write
Delete a sourcing kit migration — cloudflare.cloudflare-images-sourcingkit-delete-migration Write
Get sourcing kit migration — cloudflare.cloudflare-images-sourcingkit-get-migration Read
Get migration progress — cloudflare.cloudflare-images-sourcingkit-get-migration-progress Read
Abort a migration — cloudflare.cloudflare-images-sourcingkit-abort-migration Write
Start a migration — cloudflare.cloudflare-images-sourcingkit-start-migration Write
List migration logs — cloudflare.cloudflare-images-sourcingkit-list-migration-logs Read
List sourcing kit sources — cloudflare.cloudflare-images-sourcingkit-list-sources Read
Create a sourcing kit source — cloudflare.cloudflare-images-sourcingkit-create-source Write
Precheck source connectivity — cloudflare.cloudflare-images-sourcingkit-precheck-source-connectivity Write
Delete a sourcing kit source — cloudflare.cloudflare-images-sourcingkit-delete-source Write
Get sourcing kit source — cloudflare.cloudflare-images-sourcingkit-get-source Read
Update a sourcing kit source — cloudflare.cloudflare-images-sourcingkit-update-source Write
Get source connectivity status — cloudflare.cloudflare-images-sourcingkit-get-source-connectivity Read
List all targets — cloudflare.infra-targets-list Read
Create new target — cloudflare.infra-targets-post Write
Create new targets — cloudflare.infra-targets-put-batch Write
Delete targets — cloudflare.infra-targets-delete-batch-post Write
Replace tags on existing targets — cloudflare.infra-targets-post-batch-tags Write
Delete target — cloudflare.infra-targets-delete Write
Get target — cloudflare.infra-targets-get Read
Update target — cloudflare.infra-targets-put Write
Get ASN Overview. — cloudflare.asn-intelligence-get-asn-overview Read
Get ASN Subnets — cloudflare.asn-intelligence-get-asn-subnets Read
Retrieves Security Center Issues Types — cloudflare.get-security-center-issue-types Read
Get Passive DNS by IP — cloudflare.passive-dns-by-ip-get-passive-dns-by-ip Read
Get Domain Details — cloudflare.domain-intelligence-get-domain-details Read
Get Domain History — cloudflare.domain-history-get-domain-history Read
Get Multiple Domain Details — cloudflare.domain-intelligence-get-multiple-domain-details Read
Get indicator feeds owned by this account — cloudflare.custom-indicator-feeds-get-indicator-feeds Read
Create new indicator feed — cloudflare.custom-indicator-feeds-create-indicator-feeds Write
Grant permission to indicator feed — cloudflare.custom-indicator-feeds-add-permission Write
Create indicator feed provider — cloudflare.custom-indicator-feeds-create-provider Write
Revoke permission to indicator feed — cloudflare.custom-indicator-feeds-remove-permission Write
List indicator feed permissions — cloudflare.custom-indicator-feeds-view-permissions Read
Get indicator feed metadata — cloudflare.custom-indicator-feeds-get-indicator-feed-metadata Read
Update indicator feed metadata — cloudflare.custom-indicator-feeds-update-indicator-feed-metadata Write
Get indicator feed data — cloudflare.custom-indicator-feeds-get-indicator-feed-data Read
Download indicator feed data — cloudflare.custom-indicator-feeds-download-indicator-feed-data Read
Get indicator feed upload status — cloudflare.custom-indicator-feeds-get-upload-status Read
Get IP Overview — cloudflare.ip-intelligence-get-ip-overview Read
Get Available IP Lists — cloudflare.ip-list-get-ip-lists Read
Create Miscategorization — cloudflare.miscategorization-create-miscategorization Write
List sinkholes owned by this account — cloudflare.sinkhole-config-list-sinkholes Read
Create a new sinkhole for your account — cloudflare.sinkhole-config-create-sinkhole Write
Delete a sinkhole — cloudflare.sinkhole-config-delete-sinkhole Write
Get a sinkhole — cloudflare.sinkhole-config-get-sinkhole Read
Update a sinkhole — cloudflare.sinkhole-config-update-sinkhole Write
List ingresses for a sinkhole — cloudflare.sinkhole-config-list-sinkhole-ingresses Read
Get URL Intelligence — cloudflare.url-intelligence-get-url-intelligence Read
Get WHOIS Record — cloudflare.whois-record-get-whois-record Read
Toggle PDF Invoices — cloudflare.account-billing-toggle-pdf-invoices Write
List K2 streams — cloudflare.getv4accountsbyaccount_idk2streams Read
Create K2 stream — cloudflare.postv4accountsbyaccount_idk2streams Write
Delete K2 stream — cloudflare.deletev4accountsbyaccount_idk2streamsbystream_id Write
Get K2 stream — cloudflare.getv4accountsbyaccount_idk2streamsbystream_id Read
List subscriptions with consumer lag — cloudflare.getv4accountsbyaccount_idk2streamsbystream_idsubscriptions Read
List Account Load Balancers — cloudflare.account-load-balancers-list-account-load-balancers Read
List Monitor Groups — cloudflare.account-load-balancer-monitor-groups-list-monitor-groups Read
Create Monitor Group — cloudflare.account-load-balancer-monitor-groups-create-monitor-group Write
Delete Monitor Group — cloudflare.account-load-balancer-monitor-groups-delete-monitor-group Write
Monitor Group Details — cloudflare.account-load-balancer-monitor-groups-monitor-group-details Read
Patch Monitor Group — cloudflare.account-load-balancer-monitor-groups-patch-monitor-group Write
Update Monitor Group — cloudflare.account-load-balancer-monitor-groups-update-monitor-group Write
List Monitor Group References — cloudflare.account-load-balancer-monitor-groups-list-monitor-group-references Read
List Monitors — cloudflare.account-load-balancer-monitors-list-monitors Read
Create Monitor — cloudflare.account-load-balancer-monitors-create-monitor Write
Delete Monitor — cloudflare.account-load-balancer-monitors-delete-monitor Write
Monitor Details — cloudflare.account-load-balancer-monitors-monitor-details Read
Patch Monitor — cloudflare.account-load-balancer-monitors-patch-monitor Write
Update Monitor — cloudflare.account-load-balancer-monitors-update-monitor Write
Preview Monitor — cloudflare.account-load-balancer-monitors-preview-monitor Write
List Monitor References — cloudflare.account-load-balancer-monitors-list-monitor-references Read
List Pools — cloudflare.account-load-balancer-pools-list-pools Read
Patch Pools — cloudflare.account-load-balancer-pools-patch-pools Write
Create Pool — cloudflare.account-load-balancer-pools-create-pool Write
Delete Pool — cloudflare.account-load-balancer-pools-delete-pool Write
Pool Details — cloudflare.account-load-balancer-pools-pool-details Read
Patch Pool — cloudflare.account-load-balancer-pools-patch-pool Write
Update Pool — cloudflare.account-load-balancer-pools-update-pool Write
Pool Health Details — cloudflare.account-load-balancer-pools-pool-health-details Read
Preview Pool — cloudflare.account-load-balancer-pools-preview-pool Write
List Pool References — cloudflare.account-load-balancer-pools-list-pool-references Read
Preview Result — cloudflare.account-load-balancer-monitors-preview-result Read
List Regions — cloudflare.load-balancer-regions-list-regions Read
Get Region — cloudflare.load-balancer-regions-get-region Read
Search Resources — cloudflare.account-load-balancer-search-search-resources Read
List Load Balancer Usage — cloudflare.account-load-balancers-list-load-balancer-usage Read
Delete Account Load Balancer — cloudflare.account-load-balancers-delete-account-load-balancer Write
Account Load Balancer Details — cloudflare.account-load-balancers-account-load-balancer-details Read
Patch Account Load Balancer — cloudflare.account-load-balancers-patch-account-load-balancer Write
List fields — cloudflare.get-accounts-account_id-logpush-datasets-dataset_id-fields Read
List Logpush jobs for a dataset — cloudflare.get-accounts-account_id-logpush-datasets-dataset_id-jobs Read
List Logpush jobs — cloudflare.get-accounts-account_id-logpush-jobs Read
Create Logpush job — cloudflare.post-accounts-account_id-logpush-jobs Write
Delete Logpush job — cloudflare.delete-accounts-account_id-logpush-jobs-job_id Write
Get Logpush job details — cloudflare.get-accounts-account_id-logpush-jobs-job_id Read
Update Logpush job — cloudflare.put-accounts-account_id-logpush-jobs-job_id Write
Get ownership challenge — cloudflare.post-accounts-account_id-logpush-ownership Write
Validate ownership challenge — cloudflare.post-accounts-account_id-logpush-ownership-validate Write
List transformers — cloudflare.get-accounts-account_id-logpush-transformers Read
Create transformer — cloudflare.post-accounts-account_id-logpush-transformers Write
Preview transformer — cloudflare.post-accounts-account_id-logpush-transformers-preview Write
Delete transformer — cloudflare.delete-accounts-account_id-logpush-transformers-transformer_id Write
Get transformer — cloudflare.get-accounts-account_id-logpush-transformers-transformer_id Read
Update transformer — cloudflare.put-accounts-account_id-logpush-transformers-transformer_id Write
Get transformer content — cloudflare.get-accounts-account_id-logpush-transformers-transformer_id-content Read
List transformer versions — cloudflare.get-accounts-account_id-logpush-transformers-transformer_id-versions Read
Validate destination — cloudflare.delete-accounts-account_id-logpush-validate-destination Write
Check destination exists — cloudflare.delete-accounts-account_id-logpush-validate-destination-exists Write
Validate origin — cloudflare.post-accounts-account_id-logpush-validate-origin Write
Get account audit logs (Version 2) — cloudflare.audit-logs-v2-get-account-audit-logs Read
List account audit log product categories (Version 2) — cloudflare.audit-logs-v2-list-account-product-categories Read
Get resource change history from an account audit log entry (Version 2) — cloudflare.audit-logs-v2-get-account-audit-log-history Read
Delete CMB config — cloudflare.delete-accounts-account_id-logs-control-cmb-config Write
Get CMB config — cloudflare.get-accounts-account_id-logs-control-cmb-config Read
Update CMB config — cloudflare.post-accounts-account_id-logs-control-cmb-config Write
Delete all DNS Protection rules. — cloudflare.deletednsprotectionrulesforaccount Write
List all DNS Protection rules. — cloudflare.listdnsprotectionrulesforaccount Read
Create DNS Protection rule. — cloudflare.creatednsprotectionrule Write
Delete DNS Protection rule. — cloudflare.deletednsprotectionrule Write
Get DNS Protection rule. — cloudflare.getdnsprotectionrule Read
Update DNS Protection rule. — cloudflare.updatednsprotectionrule Write
Delete all allowlist prefixes. — cloudflare.deleteallowlistprefixesforaccount Write
List all allowlist prefixes. — cloudflare.listallowlistprefixesforaccount Read
Create allowlist prefix. — cloudflare.createallowlistedprefix Write
Delete allowlist prefix. — cloudflare.deleteallowlistprefix Write
Get allowlist prefix. — cloudflare.getallowlistprefix Read
Update allowlist prefix. — cloudflare.updateallowlistprefix Write
Delete all prefixes. — cloudflare.deleteprefixesforaccount Write
List all prefixes. — cloudflare.listprefixesforaccount Read
Create prefix. — cloudflare.createprefix Write
Create multiple prefixes. — cloudflare.bulkcreateprefixes Write
Delete prefix. — cloudflare.deleteprefix Write
Get prefix. — cloudflare.getprefix Read
Update prefix. — cloudflare.updateprefix Write
Delete all SYN Protection filters. — cloudflare.deletesynprotectionfiltersforaccount Write
List all SYN Protection filters. — cloudflare.listsynprotectionfiltersforaccount Read
Create a SYN Protection filter. — cloudflare.createsynprotectionfilter Write
Delete SYN Protection filter. — cloudflare.deletesynprotectionfilter Write
Get SYN Protection filter. — cloudflare.getsynprotectionfilter Read
Update SYN Protection filter. — cloudflare.updatesynprotectionfilter Write
Delete all SYN Protection rules. — cloudflare.deletesynprotectionrulesforaccount Write
List all SYN Protection rules. — cloudflare.listsynprotectionrulesforaccount Read
Create SYN Protection rule. — cloudflare.createsynprotectionrule Write
Delete SYN Protection rule. — cloudflare.deletesynprotectionrule Write
Get SYN Protection rule. — cloudflare.getsynprotectionrule Read
Update SYN Protection rule. — cloudflare.updatesynprotectionrule Write
Delete all TCP Flow Protection filters. — cloudflare.deletetcpflowprotectionfiltersforaccount Write
List all TCP Flow Protection filters. — cloudflare.listtcpflowprotectionfiltersforaccount Read
Create a TCP Flow Protection filter. — cloudflare.createtcpflowprotectionfilter Write
Delete TCP Flow Protection filter. — cloudflare.deletetcpflowprotectionfilter Write
Get TCP Flow Protection filter. — cloudflare.gettcpflowprotectionfilter Read
Update TCP Flow Protection filter. — cloudflare.updatetcpflowprotectionfilter Write
Delete all TCP Flow Protection rules. — cloudflare.deletetcpflowprotectionrulesforaccount Write
List all TCP Flow Protection rules. — cloudflare.listtcpflowprotectionrulesforaccount Read
Create TCP Flow Protection rule. — cloudflare.createtcpflowprotectionrule Write
Delete TCP Flow Protection rule. — cloudflare.deletetcpflowprotectionrule Write
Get TCP Flow Protection rule. — cloudflare.gettcpflowprotectionrule Read
Update TCP Flow Protection rule. — cloudflare.updatetcpflowprotectionrule Write
Get protection status. — cloudflare.getprotectionstatus Read
Update protection status. — cloudflare.updateprotectionstatus Write
List Apps — cloudflare.magic-account-apps-list-apps Read
Create a new App — cloudflare.magic-account-apps-add-app Write
Delete Account App — cloudflare.magic-account-apps-delete-app Write
Update an App — cloudflare.magic-account-apps-patch-app Write
Update an App — cloudflare.magic-account-apps-update-app Write
List BGP Filter Profiles — cloudflare.magic-bgp-list-filter-profiles Read
Create BGP Filter Profile — cloudflare.magic-bgp-create-filter-profile Write
Delete BGP Filter Profile — cloudflare.magic-bgp-delete-filter-profile Write
Get BGP Filter Profile — cloudflare.magic-bgp-get-filter-profile Read
Get BGP Settings — cloudflare.magic-bgp-get-settings Read
Update BGP Settings — cloudflare.magic-bgp-update-settings Write
List CF1 Sites — cloudflare.magic-cf1-sites-list-cf1-sites Read
Create CF1 Sites — cloudflare.magic-cf1-sites-create-cf1-sites Write
Delete CF1 Site — cloudflare.magic-cf1-sites-delete-cf1-site Write
Get CF1 Site — cloudflare.magic-cf1-sites-get-cf1-site Read
Update CF1 Site — cloudflare.magic-cf1-sites-update-cf1-site Write
List CF1 Site Ramps — cloudflare.magic-cf1-sites-list-cf1-site-ramps Read
Create CF1 Site Ramps — cloudflare.magic-cf1-sites-create-cf1-site-ramps Write
Delete CF1 Site Ramp — cloudflare.magic-cf1-sites-delete-cf1-site-ramp Write
Get CF1 Site Ramp — cloudflare.magic-cf1-sites-get-cf1-site-ramp Read
List interconnects — cloudflare.magic-interconnects-list-interconnects Read
Update multiple interconnects — cloudflare.magic-interconnects-update-multiple-interconnects Write
List interconnect Details — cloudflare.magic-interconnects-list-interconnect-details Read
Update interconnect — cloudflare.magic-interconnects-update-interconnect Write
List Connectors — cloudflare.mconn-connectors-list Read
Delete Connector — cloudflare.mconn-connectors-delete Write
Get Connector — cloudflare.mconn-connectors-get Read
Edit Connector — cloudflare.mconn-connectors-edit Write
Update Connector — cloudflare.mconn-connectors-update Write
List Interrupts — cloudflare.mconn-connector-interrupts-list Read
List Events — cloudflare.mconn-connector-telemetry-events-list Read
Get latest Events — cloudflare.mconn-connector-telemetry-events-latest-get Read
Get Event — cloudflare.mconn-connector-telemetry-events-get Read
List Snapshots — cloudflare.mconn-connector-telemetry-snapshots-list Read
Get latest Snapshots — cloudflare.mconn-connector-telemetry-snapshots-latest-get Read
Get Snapshot — cloudflare.mconn-connector-telemetry-snapshots-get Read
List GRE tunnels — cloudflare.magic-gre-tunnels-list-gre-tunnels Read
Create a GRE tunnel — cloudflare.magic-gre-tunnels-create-gre-tunnels Write
Update multiple GRE tunnels — cloudflare.magic-gre-tunnels-update-multiple-gre-tunnels Write
Delete GRE Tunnel — cloudflare.magic-gre-tunnels-delete-gre-tunnel Write
List GRE Tunnel Details — cloudflare.magic-gre-tunnels-list-gre-tunnel-details Read
Update GRE Tunnel — cloudflare.magic-gre-tunnels-update-gre-tunnel Write
List IPsec tunnels — cloudflare.magic-ipsec-tunnels-list-ipsec-tunnels Read
Create an IPsec tunnel — cloudflare.magic-ipsec-tunnels-create-ipsec-tunnels Write
Update multiple IPsec tunnels — cloudflare.magic-ipsec-tunnels-update-multiple-ipsec-tunnels Write
Set Pre-Shared Keys (PSK) for IPsec tunnels — cloudflare.magic-ipsec-tunnels-set-pre-shared-keys-for-ipsec-tunnels Write
Delete IPsec Tunnel — cloudflare.magic-ipsec-tunnels-delete-ipsec-tunnel Write
List IPsec tunnel details — cloudflare.magic-ipsec-tunnels-list-ipsec-tunnel-details Read
Update IPsec Tunnel — cloudflare.magic-ipsec-tunnels-update-ipsec-tunnel Write
Generate Pre-Shared Key (PSK) for IPsec tunnels — cloudflare.magic-ipsec-tunnels-generate-pre-shared-key---psk--for-ipsec-tunnels Write
List Redundancy Groups — cloudflare.magic-redundancy-groups-list-redundancy-groups Read
Create a Redundancy Group — cloudflare.magic-redundancy-groups-create-redundancy-group Write
Delete a Redundancy Group — cloudflare.magic-redundancy-groups-delete-redundancy-group Write
Get Redundancy Group Details — cloudflare.magic-redundancy-groups-get-redundancy-group Read
Update a Redundancy Group — cloudflare.magic-redundancy-groups-update-redundancy-group Write
Delete Many Routes — cloudflare.magic-static-routes-delete-many-routes Write
List Routes — cloudflare.magic-static-routes-list-routes Read
Create a Route — cloudflare.magic-static-routes-create-routes Write
Update Many Routes — cloudflare.magic-static-routes-update-many-routes Write
Delete Route — cloudflare.magic-static-routes-delete-route Write
Route Details — cloudflare.magic-static-routes-route-details Read
Update Route — cloudflare.magic-static-routes-update-route Write
List Sites — cloudflare.magic-sites-list-sites Read
Create a new Site — cloudflare.magic-sites-create-site Write
Delete Site — cloudflare.magic-sites-delete-site Write
Site Details — cloudflare.magic-sites-site-details Read
Patch Site — cloudflare.magic-sites-patch-site Write
Update Site — cloudflare.magic-sites-update-site Write
List Site ACLs — cloudflare.magic-site-acls-list-acls Read
Create a new Site ACL — cloudflare.magic-site-acls-create-acl Write
Delete Site ACL — cloudflare.magic-site-acls-delete-acl Write
Site ACL Details — cloudflare.magic-site-acls-acl-details Read
Patch Site ACL — cloudflare.magic-site-acls-patch-acl Write
Update Site ACL — cloudflare.magic-site-acls-update-acl Write
List App Configs — cloudflare.magic-site-app-configs-list-app-configs Read
Delete App Config — cloudflare.magic-site-app-configs-delete-app-config Write
Update an App Config — cloudflare.magic-site-app-configs-patch-app-config Write
Update an App Config — cloudflare.magic-site-app-configs-update-app-config Write
List Site LANs — cloudflare.magic-site-lans-list-lans Read
Create a new Site LAN — cloudflare.magic-site-lans-create-lan Write
Delete Site LAN — cloudflare.magic-site-lans-delete-lan Write
Site LAN Details — cloudflare.magic-site-lans-lan-details Read
Patch Site LAN — cloudflare.magic-site-lans-patch-lan Write
Update Site LAN — cloudflare.magic-site-lans-update-lan Write
Delete NetFlow Configuration — cloudflare.magic-site-netflow-config-delete-netflow-config Write
NetFlow Configuration Details — cloudflare.magic-site-netflow-config-details Read
Update NetFlow Configuration — cloudflare.magic-site-netflow-config-patch-netflow-config Write
Create NetFlow Configuration — cloudflare.magic-site-netflow-config-create-netflow-config Write
Update NetFlow Configuration — cloudflare.magic-site-netflow-config-update-netflow-config Write
List Site WANs — cloudflare.magic-site-wans-list-wans Read
Create a new Site WAN — cloudflare.magic-site-wans-create-wan Write
Delete Site WAN — cloudflare.magic-site-wans-delete-wan Write
Site WAN Details — cloudflare.magic-site-wans-wan-details Read
Patch Site WAN — cloudflare.magic-site-wans-patch-wan Write
Update Site WAN — cloudflare.magic-site-wans-update-wan Write
List repositories — cloudflare.listaccountvulnerabilitydiscoveryrepositories Read
Create repository — cloudflare.createaccountvulnerabilitydiscoveryrepository Write
Get repository — cloudflare.getaccountvulnerabilitydiscoveryrepository Read
Get reviewed vulnerability report — cloudflare.getaccountrepositoryvulnerabilitydiscoveryreport Read
Create upload token — cloudflare.createaccountvulnerabilitydiscoveryrepositorytoken Write
List scans — cloudflare.listaccountvulnerabilitydiscoveryscans Read
Create scan — cloudflare.createaccountvulnerabilitydiscoveryscan Write
Get scan — cloudflare.getaccountvulnerabilitydiscoveryscan Read
Get reviewed vulnerability report — cloudflare.getaccountvulnerabilitydiscoveryconsolidatedreport Read
Get account Media usage — cloudflare.usage-analytics-get-account-media-usage Read
List Members — cloudflare.account-members-list-members Read
Add Member — cloudflare.account-members-add-member Write
Remove Member — cloudflare.account-members-remove-member Write
Member Details — cloudflare.account-members-member-details Read
Update Member — cloudflare.account-members-update-member Write
Delete account configuration — cloudflare.magic-network-monitoring-configuration-delete-account-configuration Write
List account configuration — cloudflare.magic-network-monitoring-configuration-list-account-configuration Read
Update account configuration fields — cloudflare.magic-network-monitoring-configuration-update-account-conf-75bc5c098c Write
Create account configuration — cloudflare.magic-network-monitoring-configuration-create-account-configuration Write
Update an entire account configuration — cloudflare.magic-network-monitoring-configuration-update-an-entire-ac-313c46ca16 Write
List rules and account configuration — cloudflare.magic-network-monitoring-configuration-list-rules-and-acco-ed4cfee0df Read
List rules — cloudflare.magic-network-monitoring-rules-list-rules Read
Delete rule — cloudflare.magic-network-monitoring-rules-delete-rule Write
Get rule — cloudflare.magic-network-monitoring-rules-get-rule Read
Update advertisement for rule — cloudflare.magic-network-monitoring-rules-update-advertisement-for-rule Write
Generate authentication token for VPC flow logs export. — cloudflare.magic-network-monitoring-vpc-flows-generate-authentication-token Write
Get account monetization eligibility — cloudflare.monetization-get-account-eligibility Read
Check account monetization eligibility — cloudflare.monetization-check-account-eligibility Write
List relays — cloudflare.moq-relays-list Read
Create a relay — cloudflare.moq-relays-create Write
Delete a relay — cloudflare.moq-relays-delete Write
Get a relay — cloudflare.moq-relays-get Read
Update a relay — cloudflare.moq-relays-update Write
List tokens — cloudflare.moq-relays-tokens-list Read
Create a token — cloudflare.moq-relays-tokens-create Write
Revoke a token — cloudflare.moq-relays-tokens-delete Write
Move account to organization — cloudflare.accounts_moveaccounts Write
List mTLS certificates — cloudflare.m-tls-certificate-management-list-m-tls-certificates Read
Upload mTLS certificate — cloudflare.m-tls-certificate-management-upload-m-tls-certificate Write
Delete mTLS certificate — cloudflare.m-tls-certificate-management-delete-m-tls-certificate Write
Get mTLS certificate — cloudflare.m-tls-certificate-management-get-m-tls-certificate Read
List mTLS certificate associations — cloudflare.m-tls-certificate-management-list-m-tls-certificate-associations Read
List OAuth Clients — cloudflare.oauth-clients-list Read
Delete OAuth Client — cloudflare.oauth-clients-delete Write
OAuth Client Details — cloudflare.oauth-clients-get Read
Update OAuth Client — cloudflare.oauth-clients-update Write
Delete Rotated OAuth Client Secret — cloudflare.oauth-clients-delete-rotated-secret Write
Rotate OAuth Client Secret — cloudflare.oauth-clients-rotate-secret Write
Get usage limit status — cloudflare.observability.usage_limit.get Read
List applications — cloudflare.list_applications_v2 Read
Get application details — cloudflare.get_application_v2 Read
Get auth methods — cloudflare.get_application_auth_methods_v2 Read
Get application setup flows — cloudflare.get_application_setup_flows_v2 Read
List integrations — cloudflare.list_integrations_v2 Read
Create integration — cloudflare.create_integration_v2 Write
Delete integration — cloudflare.delete_integration_v2 Write
Get integration details — cloudflare.get_integration_v2 Read
Update integration — cloudflare.update_integration_v2 Write
Pause integration — cloudflare.pause_integration_v2 Write
Resume integration — cloudflare.resume_integration_v2 Write
List account organizations — cloudflare.accounts_listaccountorganizations Read
List Cloudflare Pages projects — cloudflare.pages-project-get-projects Read
Create a Cloudflare Pages project — cloudflare.pages-project-create-project Write
Delete a Cloudflare Pages project — cloudflare.pages-project-delete-project Write
Get a Cloudflare Pages project — cloudflare.pages-project-get-project Read
List Pages deployments — cloudflare.pages-deployment-get-deployments Read
Delete a Pages deployment — cloudflare.pages-deployment-delete-deployment Write
Get a Pages deployment — cloudflare.pages-deployment-get-deployment-info Read
Get Pages deployment logs — cloudflare.pages-deployment-get-deployment-logs Read
Retry a Pages deployment — cloudflare.pages-deployment-retry-deployment Write
Roll back a Pages deployment — cloudflare.pages-deployment-rollback-deployment Write
Create deployment tail — cloudflare.pages-deployment-create-tail Write
Delete deployment tail — cloudflare.pages-deployment-delete-tail Write
List Pages custom domains — cloudflare.pages-domains-get-domains Read
Add a Pages custom domain — cloudflare.pages-domains-add-domain Write
Delete a Pages custom domain — cloudflare.pages-domains-delete-domain Write
Get a Pages custom domain — cloudflare.pages-domains-get-domain Read
Retry custom domain validation — cloudflare.pages-domains-patch-domain Write
Purge the Pages build cache — cloudflare.pages-purge-build-cache Write
Disconnect a Git repository — cloudflare.pages-project-disconnect-project-source Write
Connect a Git repository — cloudflare.pages-project-connect-project-source Write
Get upload token — cloudflare.pages-project-get-upload-token Read
Pay Invoice — cloudflare.account-billing-pay-invoice Write
Deletes the stripe config for a crawler — cloudflare.pay-per-crawl.crawlerdeletestripeconfig Write
Gets the stripe config for a crawler — cloudflare.pay-per-crawl.crawlergetstripeconfig Read
Creates the stripe config for a crawler — cloudflare.pay-per-crawl.crawlercreatestripeconfig Write
List pay-per-crawl crawlers — cloudflare.pay-per-crawl.listcrawlers Read
Deletes the stripe config for a publisher — cloudflare.pay-per-crawl.publisherdeletestripeconfig Write
Gets the stripe config for a publisher — cloudflare.pay-per-crawl.publishergetstripeconfig Read
Creates the stripe config for a publisher — cloudflare.pay-per-crawl.publishercreatestripeconfig Write
Get signed pay-per-crawl terms link — cloudflare.pay-per-crawl.gettermssignaturelink Read
Get pay-per-crawl terms — cloudflare.pay-per-crawl.getterms Read
Get pay-per-crawl terms signature status — cloudflare.pay-per-crawl.gettermssignature Read
Record pay-per-crawl terms activity — cloudflare.pay-per-crawl.sendtermssignatureevent Write
Set can_be_enabled setting on zones — cloudflare.pay-per-crawl.setzonescanbeenabled Write
Gets the can_be_enabled zone setting — cloudflare.pay-per-crawl.queryzonescanbeenabled Write
List enabled Pay Per Use domains — cloudflare.pay-per-use.listenableddomains Read
Get pay-per-use operator configuration — cloudflare.pay-per-crawl.getppuoperatorconfiguration Read
Set pay-per-use operator configuration — cloudflare.pay-per-crawl.putppuoperatorconfiguration Write
List pay-per-use price proposals — cloudflare.pay-per-crawl.listppuproposals Read
Decide a pay-per-use price proposal — cloudflare.pay-per-crawl.postppuproposaldecision Write
Get pay-per-use usage statistics — cloudflare.pay-per-crawl.getppuusagestats Read
Set pay-per-use zone eligibility — cloudflare.pay-per-crawl.setppuzonescanbeenabled Write
List Payment Methods — cloudflare.account-billing-list-payment-methods Read
Create Payment Method — cloudflare.account-billing-create-payment-method Write
Delete Payment Method — cloudflare.account-billing-delete-payment-method Write
Get Payment Method — cloudflare.account-billing-get-payment-method Read
Update Payment Method — cloudflare.account-billing-update-payment-method Write
Set Default Payment Method — cloudflare.account-billing-set-default-payment-method Write
List packet capture requests — cloudflare.magic-pcap-collection-list-packet-capture-requests Read
Create PCAP request — cloudflare.magic-pcap-collection-create-pcap-request Write
List PCAPs Bucket Ownership — cloudflare.magic-pcap-collection-list-pca-ps-bucket-ownership Read
Add buckets for full packet captures — cloudflare.magic-pcap-collection-add-buckets-for-full-packet-captures Write
Validate buckets for full packet captures — cloudflare.magic-pcap-collection-validate-buckets-for-full-packet-captures Write
Delete buckets for full packet captures — cloudflare.magic-pcap-collection-delete-buckets-for-full-packet-captures Write
Get PCAP request — cloudflare.magic-pcap-collection-get-pcap-request Read
Stop full PCAP — cloudflare.magic-pcap-collection-stop-full-pcap Write
List Pipelines — cloudflare.getv4accountsbyaccount_idpipelinesv1pipelines Read
Create Pipeline — cloudflare.postv4accountsbyaccount_idpipelinesv1pipelines Write
Delete Pipeline — cloudflare.deletev4accountsbyaccount_idpipelinesv1pipelinesbypipeline_id Write
Get Pipeline Details — cloudflare.getv4accountsbyaccount_idpipelinesv1pipelinesbypipeline_id Read
List Sinks — cloudflare.getv4accountsbyaccount_idpipelinesv1sinks Read
Create Sink — cloudflare.postv4accountsbyaccount_idpipelinesv1sinks Write
Delete Sink — cloudflare.deletev4accountsbyaccount_idpipelinesv1sinksbysink_id Write
Get Sink Details — cloudflare.getv4accountsbyaccount_idpipelinesv1sinksbysink_id Read
List Streams — cloudflare.getv4accountsbyaccount_idpipelinesv1streams Read
Create Stream — cloudflare.postv4accountsbyaccount_idpipelinesv1streams Write
Delete Stream — cloudflare.deletev4accountsbyaccount_idpipelinesv1streamsbystream_id Write
Get Stream Details — cloudflare.getv4accountsbyaccount_idpipelinesv1streamsbystream_id Read
Update Stream — cloudflare.patchv4accountsbyaccount_idpipelinesv1streamsbystream_id Write
Validate SQL — cloudflare.postv4accountsbyaccount_idpipelinesv1validate_sql Write
Get account profile — cloudflare.accounts_getaccountprofile Read
Update account profile — cloudflare.accounts_modifyaccountprofile Write
List Queues — cloudflare.queues-list Read
Create Queue — cloudflare.queues-create Write
Delete Queue — cloudflare.queues-delete Write
Get Queue — cloudflare.queues-get Read
Update Queue — cloudflare.queues-update-partial Write
Update Queue — cloudflare.queues-update Write
List Queue Consumers — cloudflare.queues-list-consumers Read
Create a Queue Consumer — cloudflare.queues-create-consumer Write
Delete Queue Consumer — cloudflare.queues-delete-consumer Write
Get Queue Consumer — cloudflare.queues-get-consumer Read
Update Queue Consumer — cloudflare.queues-update-consumer Write
Push Message — cloudflare.queues-push-message Write
Acknowledge + Retry Queue Messages — cloudflare.queues-ack-messages Write
Push Message Batch — cloudflare.queues-push-messages Write
Extend Message Leases — cloudflare.queues-extend-messages Write
Peek Queue Messages — cloudflare.queues-peek-messages Write
Pull Queue Messages — cloudflare.queues-pull-messages Write
Purge Peeked Queue Messages — cloudflare.queues-purge-messages Write
Get Queue Metrics — cloudflare.queues-get-metrics Read
Get Queue Purge Status — cloudflare.queues-purge-get Read
Purge Queue — cloudflare.queues-purge Write
List Buckets — cloudflare.r2-list-buckets Read
Delete Bucket — cloudflare.r2-delete-bucket Write
Get Bucket — cloudflare.r2-get-bucket Read
Patch Bucket — cloudflare.r2-patch-bucket Write
Create Bucket (by name) — cloudflare.r2-create-bucket-by-name Write
Delete Bucket CORS Policy — cloudflare.r2-delete-bucket-cors-policy Write
Get Bucket CORS Policy — cloudflare.r2-get-bucket-cors-policy Read
Set Bucket CORS Policy — cloudflare.r2-put-bucket-cors-policy Write
List Custom Domains of Bucket — cloudflare.r2-list-custom-domains Read
Attach Custom Domain To Bucket — cloudflare.r2-add-custom-domain Write
Remove Custom Domain From Bucket — cloudflare.r2-delete-custom-domain Write
Get Custom Domain Settings — cloudflare.r2-get-custom-domain-settings Read
Configure Custom Domain Settings — cloudflare.r2-edit-custom-domain-settings Write
Get r2.dev Domain of Bucket — cloudflare.r2-get-bucket-public-policy Read
Update r2.dev Domain of Bucket — cloudflare.r2-put-bucket-public-policy Write
List Bucket Jobs — cloudflare.r2-list-bucket-jobs Read
Create Bucket Job — cloudflare.r2-create-bucket-job Write
Get Bucket Job — cloudflare.r2-get-bucket-job Read
Get Object Lifecycle Rules — cloudflare.r2-get-bucket-lifecycle-configuration Read
Set Object Lifecycle Rules — cloudflare.r2-put-bucket-lifecycle-configuration Write
Get Local Uploads Configuration — cloudflare.r2-get-bucket-local-uploads-configuration Read
Set Local Uploads Configuration — cloudflare.r2-put-bucket-local-uploads-configuration Write
Delete Bucket Lock Rules — cloudflare.r2-delete-bucket-lock-configuration Write
Get Bucket Lock Rules — cloudflare.r2-get-bucket-lock-configuration Read
Set Bucket Lock Rules — cloudflare.r2-put-bucket-lock-configuration Write
Delete Objects — cloudflare.r2-delete-objects Write
List Objects — cloudflare.r2-list-objects Read
Delete Object — cloudflare.r2-delete-object Write
Disable Sippy — cloudflare.r2-delete-bucket-sippy-config Write
Get Sippy Configuration — cloudflare.r2-get-bucket-sippy-config Read
Get Account-Level Metrics — cloudflare.r2-get-account-level-metrics Read
Create Temporary Access Credentials — cloudflare.r2-create-temp-access-credentials Write
Fetch all apps — cloudflare.get_apps Read
Create App — cloudflare.create_app Write
Fetch app details — cloudflare.get_app Read
Update an app — cloudflare.update_app Write
Fetch day-wise session and recording analytics data for an App — cloudflare.get-org-analytics Read
Fetch day-wise analytics data for your livestreams — cloudflare.get-livestream-analytics-daywise Read
Fetch complete analytics data for your livestreams — cloudflare.get-livestream-analytics-complete Read
Fetch all livestreams — cloudflare.fetch_all_livestreams Read
Fetch livestream session details using livestream session ID — cloudflare.get-v2-livestreams-livestream-session-id Read
Fetch livestream details using livestream ID — cloudflare.get-v2-livestream-session-livestream-id Read
Fetch active livestream session details — cloudflare.get-v2-active-livestream-session-details Read
Fetch all meetings for an App — cloudflare.get_all_meetings Read
Create a meeting — cloudflare.create_meeting Write
Fetch a meeting for an App — cloudflare.get_meeting Read
Update a meeting — cloudflare.update_meeting Write
Replace a meeting — cloudflare.replace_meeting Write
Fetch active livestreams for a meeting — cloudflare.get-v2-meetings-meetingid-active-livestream Read
Stop livestreaming a meeting — cloudflare.stop_livestreaming Write
Fetch details of an active session — cloudflare.getactivesession Read
Kick participants from an active session — cloudflare.kickpartcipants Write
Kick all participants — cloudflare.kickallparticipants Write
Mute participants of an active session — cloudflare.muteparticipants Write
Mute all participants — cloudflare.muteallparticipants Write
Create a poll — cloudflare.createpoll Write
Fetch livestream session details for a meeting — cloudflare.livestream-session-details Read
Start livestreaming a meeting — cloudflare.start-livestreaming Write
Fetch all participants of a meeting — cloudflare.get_meeting_participants Read
Add a participant — cloudflare.add_participant Write
Delete a participant — cloudflare.delete_meeting_participant Write
Fetch a participant's detail — cloudflare.get_meeting_participant Read
Edit a participant's detail — cloudflare.edit_participant Write
Replace a participant's detail — cloudflare.replace_participant Write
Revoke participant's authentication token — cloudflare.revoke_token Write
Refresh participant's authentication token — cloudflare.regenerate_token Write
Fetch all presets — cloudflare.get-presets Read
Create a preset — cloudflare.post-presets Write
Delete a preset — cloudflare.delete-presets-preset_id Write
Fetch details of a preset — cloudflare.get-presets-preset_id Read
Update a preset — cloudflare.patch-presets-preset_id Write
Replace a preset — cloudflare.put-presets-preset_id Write
Fetch all recordings for an App — cloudflare.get_all_recordings Read
Start recording a meeting — cloudflare.start_recording Write
Fetch active recording — cloudflare.get_active_recording Read
Start recording participant audio tracks — cloudflare.starttrackrecordingforameeting Write
Fetch details of a recording — cloudflare.get_one_recording Read
Pause/Resume/Stop recording — cloudflare.pause_resume_stop_recording Write
Fetch all sessions of an App — cloudflare.getsessions Read
Fetch details of peer — cloudflare.getparticipantdatafrompeerid Read
Fetch details of a session — cloudflare.getsessiondetails Read
Fetch all chat messages of a session — cloudflare.getsessionchat Read
Fetch livestream session details using a session ID — cloudflare.get-v2-livestreamsession-session-meetingid-active-livestream Read
Fetch participants list of a session — cloudflare.getsessionparticipants Read
Fetch details of a participant — cloudflare.getparticipantdetails Read
Fetch summary of transcripts for a session — cloudflare.getsessionsummary Read
Generate summary of Transcripts for the session — cloudflare.post-sessions-session_id-summary Write
Fetch the complete transcript for a session — cloudflare.getsessiontranscript Read
Fetch all webhooks details — cloudflare.getallwebhooks Read
Add a webhook — cloudflare.addwebhook Write
Fetch all supported webhook events — cloudflare.getallwebhookevents Read
Fetch details of a webhook — cloudflare.getwebhook Read
Edit a webhook — cloudflare.editwebhook Write
Replace a webhook — cloudflare.replacewebhook Write
Check domain availability — cloudflare.sandbox-registrar-domain-discovery-check Write
Search for available domains — cloudflare.sandbox-registrar-domain-discovery-search Read
List extensions — cloudflare.sandbox-registrar-extension-list Read
Get extension — cloudflare.sandbox-registrar-extension-get Read
List Registrations — cloudflare.sandbox-registrar-domain-registration-list Read
Create Registration — cloudflare.sandbox-registrar-domain-registration-create Write
Get Registration — cloudflare.sandbox-registrar-domain-registration-get Read
Get Registration Status — cloudflare.sandbox-registrar-domain-registration-get-status Read
Get Update Status — cloudflare.sandbox-registrar-domain-registration-get-update-status Read
Check domain availability — cloudflare.registrar-domain-discovery-check Write
Search for available domains — cloudflare.registrar-domain-discovery-search Read
Check domain transfer eligibility — cloudflare.registrar-domain-discovery-transfer-check Write
List extensions — cloudflare.registrar-extension-list Read
Get extension — cloudflare.registrar-extension-get Read
List Registrations — cloudflare.registrar-domain-registration-list Read
Create Registration — cloudflare.registrar-domain-registration-create Write
Get Registration — cloudflare.registrar-domain-registration-get Read
Get Registration Status — cloudflare.registrar-domain-registration-get-status Read
Initiate Transfer — cloudflare.registrar-domain-transfer-in-create Write
Get Transfer Status — cloudflare.registrar-domain-transfer-get-status Read
Get Update Status — cloudflare.registrar-domain-registration-get-update-status Read
Get an account industry — cloudflare.reporting-industry-get Read
Update an account industry — cloudflare.reporting-industry-update Write
List reporting policies — cloudflare.reporting-policies-list Read
Get a reporting policy — cloudflare.reporting-policies-get Read
List generated reports — cloudflare.reporting-reports-list Read
Get a generated report — cloudflare.reporting-reports-get Read
Request Trace — cloudflare.account-request-tracer-request-trace Write
List applications — cloudflare.getresourcelibraryapplications Read
Create application — cloudflare.createresourcelibraryapplication Write
Look up applications in a rule sentence — cloudflare.lookupresourcelibraryapplications Write
Delete application — cloudflare.deleteresourcelibraryapplication Write
Get application — cloudflare.getresourcelibraryapplicationbyid Read
Update application — cloudflare.updateresourcelibraryapplication Write
List application categories — cloudflare.getresourcelibrarycategories Read
Get application category — cloudflare.getresourcelibrarycategorybyid Read
Get lists — cloudflare.lists-get-lists Read
Create a list — cloudflare.lists-create-a-list Write
Get bulk operation status — cloudflare.lists-get-bulk-operation-status Read
Delete a list — cloudflare.lists-delete-a-list Write
Get a list — cloudflare.lists-get-a-list Read
Update a list — cloudflare.lists-update-a-list Write
Delete list items — cloudflare.lists-delete-list-items Write
Get list items — cloudflare.lists-get-list-items Read
Create list items — cloudflare.lists-create-list-items Write
Update all list items — cloudflare.lists-update-all-list-items Write
Get a list item — cloudflare.lists-get-a-list-item Read
List account rulesets — cloudflare.listaccountrulesets Read
Create an account ruleset — cloudflare.createaccountruleset Write
Get an account entry point ruleset — cloudflare.getaccountentrypointruleset Read
Update an account entry point ruleset — cloudflare.updateaccountentrypointruleset Write
List an account entry point ruleset's versions — cloudflare.listaccountentrypointrulesetversions Read
Get an account entry point ruleset version — cloudflare.getaccountentrypointrulesetversion Read
Delete an account ruleset — cloudflare.deleteaccountruleset Write
Get an account ruleset — cloudflare.getaccountruleset Read
Update an account ruleset — cloudflare.updateaccountruleset Write
Delete an account ruleset rule — cloudflare.deleteaccountrulesetrule Write
List an account ruleset's versions — cloudflare.listaccountrulesetversions Read
Delete an account ruleset version — cloudflare.deleteaccountrulesetversion Write
Get an account ruleset version — cloudflare.getaccountrulesetversion Read
List an account ruleset version's rules by tag — cloudflare.listaccountrulesetversionrulesbytag Read
Create a Web Analytics site — cloudflare.web-analytics-create-site Write
List Web Analytics sites — cloudflare.web-analytics-list-sites Read
List Web Analytics site tags — cloudflare.web-analytics-list-site-tags Read
Validate a Web Analytics site hostname — cloudflare.web-analytics-validate-site-hostname Read
List Web Analytics zone tags — cloudflare.web-analytics-list-zone-tags Read
Delete a Web Analytics site — cloudflare.web-analytics-delete-site Write
Get a Web Analytics site — cloudflare.web-analytics-get-site Read
Update a Web Analytics site — cloudflare.web-analytics-update-site Write
Create a Web Analytics rule — cloudflare.web-analytics-create-rule Write
Delete a Web Analytics rule — cloudflare.web-analytics-delete-rule Write
Update a Web Analytics rule — cloudflare.web-analytics-update-rule Write
List rules in Web Analytics ruleset — cloudflare.web-analytics-list-rules Read
Update Web Analytics rules — cloudflare.web-analytics-modify-rules Write
List SCIM Groups — cloudflare.scim-groups-list Read
Create SCIM Group — cloudflare.scim-groups-create Write
Delete SCIM Group — cloudflare.scim-groups-delete Write
Get SCIM Group — cloudflare.scim-groups-get Read
Patch SCIM Group — cloudflare.scim-groups-patch Write
Replace SCIM Group — cloudflare.scim-groups-put Write
List SCIM Resource Types — cloudflare.scim-resource-types-list Read
Get SCIM Resource Type — cloudflare.scim-resource-types-get Read
List SCIM Schemas — cloudflare.scim-schemas-list Read
Get SCIM Schema — cloudflare.scim-schemas-get Read
Get SCIM Service Provider Config — cloudflare.scim-service-provider-config-get Read
List SCIM Users — cloudflare.scim-users-list Read
Create SCIM User — cloudflare.scim-users-create Write
Delete SCIM User — cloudflare.scim-users-delete Write
Get SCIM User — cloudflare.scim-users-get Read
Patch SCIM User — cloudflare.scim-users-patch Write
Replace SCIM User — cloudflare.scim-users-put Write
List ACLs — cloudflare.secondary-dns---acl--list-ac-ls Read
Create ACL — cloudflare.secondary-dns---acl--create-acl Write
Delete ACL — cloudflare.secondary-dns---acl--delete-acl Write
ACL Details — cloudflare.secondary-dns---acl--acl-details Read
Update ACL — cloudflare.secondary-dns---acl--update-acl Write
List Peers — cloudflare.secondary-dns---peer--list-peers Read
Create Peer — cloudflare.secondary-dns---peer--create-peer Write
Delete Peer — cloudflare.secondary-dns---peer--delete-peer Write
Peer Details — cloudflare.secondary-dns---peer--peer-details Read
Update Peer — cloudflare.secondary-dns---peer--update-peer Write
List TSIGs — cloudflare.secondary-dns---tsig--list-tsi-gs Read
Create TSIG — cloudflare.secondary-dns---tsig--create-tsig Write
Delete TSIG — cloudflare.secondary-dns---tsig--delete-tsig Write
TSIG Details — cloudflare.secondary-dns---tsig--tsig-details Read
Update TSIG — cloudflare.secondary-dns---tsig--update-tsig Write
View secret usage — cloudflare.secrets-store-quota Read
List account stores — cloudflare.secrets-store-list Read
Create a store — cloudflare.secrets-store-create Write
Delete a store — cloudflare.secrets-store-delete-by-id Write
Get a store by ID — cloudflare.secrets-store-get-store-by-id Read
Delete secrets — cloudflare.secrets-store-delete-bulk Write
List store secrets — cloudflare.secrets-store-secrets-list Read
Create a secret — cloudflare.secrets-store-secret-create Write
Delete a secret — cloudflare.secrets-store-secret-delete-by-id Write
Get a secret by ID — cloudflare.secrets-store-get-by-id Read
Patch a secret — cloudflare.secrets-store-patch-by-id Write
Duplicate Secret — cloudflare.secrets-store-duplicate-by-id Write
Retrieves Security Center Insights — cloudflare.get-security-center-insights Read
Retrieves Account Audit Log — cloudflare.get-security-center-account-audit-log Read
Retrieves Security Center Insight Counts by Class — cloudflare.get-security-center-insight-counts-by-class Read
Retrieves a Partner Security Center Insight Count — cloudflare.get-security-center-partner-insight-count Read
Get Recent Account Scans — cloudflare.get-security-center-account-scans Read
Start On-Demand Account Scan — cloudflare.start-security-center-account-scan Write
Retrieves Security Center Insight Counts by Severity — cloudflare.get-security-center-insight-counts-by-severity Read
Retrieves Security Center Insight Counts by Type — cloudflare.get-security-center-insight-counts-by-type Read
Retrieves Issue Audit Log — cloudflare.get-security-center-issue-audit-log Read
Updates Security Center Insight Classification — cloudflare.update-security-center-insight-classification Write
Retrieves Security Center Insight Context — cloudflare.get-security-center-insight-context Read
Archives Security Center Insight — cloudflare.archive-security-center-insight Write
Retrieves Partner Integration Settings — cloudflare.get-security-center-partner-settings Read
Updates Partner Integration Settings — cloudflare.update-security-center-partner-settings Write
Lists Partner-Discovered Shadow Zones — cloudflare.get-security-center-partner-shadow-zones Read
Lists Hosts in a Partner-Discovered Shadow Zone — cloudflare.get-security-center-partner-shadow-zone-hosts Read
Retrieves Account State — cloudflare.get-security-center-account-state Read
Updates Account State — cloudflare.update-security-center-account-state Write
List Image Resizing configurations for account — cloudflare.account-settings-list-transformations Read
Get Unique Transformations billing setting — cloudflare.account-settings-get-ut-billing-setting Read
Change Unique Transformations billing setting — cloudflare.account-settings-change-ut-billing-setting Write
List account shares — cloudflare.shares-list Read
Trigger a share creation — cloudflare.share-create Write
Trigger a share deletion — cloudflare.share-delete Write
Get account share by ID — cloudflare.shares-get-by-id Read
Trigger a share update — cloudflare.share-update Write
List share excluded recipients by share ID — cloudflare.share-excluded-recipients-list Read
Trigger an account exclusion from a share — cloudflare.share-excluded-recipient-create Write
Trigger excluded-account reconciliation on a share — cloudflare.share-excluded-recipients-update Write
Trigger an account un-exclusion from a share — cloudflare.share-excluded-recipient-delete Write
Get share excluded recipient by ID — cloudflare.share-excluded-recipients-get-by-id Read
List share recipients by share ID — cloudflare.share-recipients-list Read
Trigger recipient reconciliation on a share — cloudflare.share-recipients-update Write
Trigger a recipient removal from a share — cloudflare.share-recipient-delete Write
Get share recipient by ID — cloudflare.share-recipients-get-by-id Read
List share resources by share ID — cloudflare.share-resources-list Read
Trigger a resource addition to a share — cloudflare.share-resource-create Write
Trigger a resource deletion from a share — cloudflare.share-resource-delete Write
Get share resource by ID — cloudflare.share-resources-get-by-id Read
Trigger a resource metadata update in a share — cloudflare.share-resource-update Write
List jobs — cloudflare.slurper-list-jobs Read
Create a job — cloudflare.slurper-create-job Write
Abort all jobs — cloudflare.slurper-abort-all-jobs Write
Delete a job — cloudflare.slurper-delete-job Write
Get job details — cloudflare.slurper-get-job Read
Abort a job — cloudflare.slurper-abort-job Write
Get job logs — cloudflare.slurper-get-job-logs Read
Pause a job — cloudflare.slurper-pause-job Write
Get job progress — cloudflare.slurper-get-job-progress Read
Resume a job — cloudflare.slurper-resume-job Write
Check source connectivity — cloudflare.slurper-check-source-connectivity Write
Check target connectivity — cloudflare.slurper-check-target-connectivity Write
Get all SSO connectors — cloudflare.get-all-sso-connectors Read
Initialize new SSO connector — cloudflare.init-new-sso-connector Write
Delete SSO connector — cloudflare.delete-sso-connector Write
Get single SSO connector — cloudflare.get-sso-connector Read
Update SSO connector state — cloudflare.update-sso-connector-state Write
Begin SSO connector verification — cloudflare.begin-sso-connector-verification Write
List namespaces — cloudflare.workers-kv-namespace-list-namespaces Read
Create a namespace — cloudflare.workers-kv-namespace-create-a-namespace Write
Delete a namespace — cloudflare.workers-kv-namespace-remove-a-namespace Write
Get a namespace — cloudflare.workers-kv-namespace-get-a-namespace Read
Rename a namespace — cloudflare.workers-kv-namespace-rename-a-namespace Write
Write multiple key-value pairs — cloudflare.workers-kv-namespace-write-multiple-key-value-pairs Write
Delete multiple key-value pairs — cloudflare.workers-kv-namespace-delete-multiple-key-value-pairs Write
Get multiple key-value pairs — cloudflare.workers-kv-namespace-get-multiple-key-value-pairs Write
List keys in a namespace — cloudflare.workers-kv-namespace-list-a-namespace--s-keys Read
Get a key's metadata — cloudflare.workers-kv-namespace-read-the-metadata-for-a-key Read
Delete a key-value pair — cloudflare.workers-kv-namespace-delete-key-value-pair Write
List videos — cloudflare.stream-videos-list-videos Read
Initiate video uploads using TUS — cloudflare.stream-videos-initiate-video-uploads-using-tus Write
Clip videos given a start and end time — cloudflare.stream-video-clipping-clip-videos-given-a-start-and-end-time Write
Upload videos from a URL — cloudflare.stream-videos-upload-videos-from-a-url Write
Upload videos via direct upload URLs — cloudflare.stream-videos-upload-videos-via-direct-upload-ur-ls Write
List signing keys — cloudflare.stream-signing-keys-list-signing-keys Read
Create signing keys — cloudflare.stream-signing-keys-create-signing-keys Write
Delete signing keys — cloudflare.stream-signing-keys-delete-signing-keys Write
List live inputs — cloudflare.stream-live-inputs-list-live-inputs Read
Create a live input — cloudflare.stream-live-inputs-create-a-live-input Write
Delete a live input — cloudflare.stream-live-inputs-delete-a-live-input Write
Retrieve a live input — cloudflare.stream-live-inputs-retrieve-a-live-input Read
Update a live input — cloudflare.stream-live-inputs-update-a-live-input Write
Disable a live input — cloudflare.stream-live-inputs-disable-a-live-input Write
Enable a live input — cloudflare.stream-live-inputs-enable-a-live-input Write
List all outputs associated with a specified live input — cloudflare.stream-live-inputs-list-all-outputs-associated-with-a-spec-7c0ac43140 Read
Create a new output, connected to a live input — cloudflare.stream-live-inputs-create-a-new-output--connected-to-a-live-input Write
Delete an output — cloudflare.stream-live-inputs-delete-an-output Write
Update an output — cloudflare.stream-live-inputs-update-an-output Write
Rotate keys for a live input — cloudflare.stream-live-inputs-rotate-keys-for-a-live-input Write
Storage use — cloudflare.stream-videos-storage-usage Read
Get account Stream usage — cloudflare.usage-analytics-get-account-stream-usage Read
List watermark profiles — cloudflare.stream-watermark-profile-list-watermark-profiles Read
Create watermark profiles via basic upload — cloudflare.stream-watermark-profile-create-watermark-profiles-via-basic-upload Write
Delete watermark profiles — cloudflare.stream-watermark-profile-delete-watermark-profiles Write
Watermark profile details — cloudflare.stream-watermark-profile-watermark-profile-details Read
Delete webhooks — cloudflare.stream-webhook-delete-webhooks Write
View webhook — cloudflare.stream-webhook-view-webhooks Read
Create VOD webhooks — cloudflare.stream-webhook-create-webhooks Write
Delete video — cloudflare.stream-videos-delete-video Write
Retrieve video details — cloudflare.stream-videos-retrieve-video-details Read
Edit video details — cloudflare.stream-videos-update-video-details Write
List additional audio tracks on a video — cloudflare.list-audio-tracks Read
Add audio tracks to a video — cloudflare.add-audio-track Write
Delete additional audio tracks on a video — cloudflare.delete-audio-tracks Write
Edit additional audio tracks on a video — cloudflare.edit-audio-tracks Write
List captions or subtitles — cloudflare.stream-subtitles.-captions-list-captions-or-subtitles Read
Delete captions or subtitles — cloudflare.stream-subtitles.-captions-delete-captions-or-subtitles Write
List captions or subtitles for a provided language — cloudflare.stream-subtitles.-captions-get-caption-or-subtitle-for-language Read
Generate captions or subtitles for a provided language via AI — cloudflare.stream-subtitles.-captions-generate-caption-or-subtitle-for-language Write
Return WebVTT captions for a provided language — cloudflare.stream-subtitles.-captions-get-vtt-caption-or-subtitle Read
Delete downloads — cloudflare.stream-mp4-downloads-delete-downloads Write
List downloads — cloudflare.stream-mp4-downloads-list-downloads Read
Create downloads — cloudflare.stream-mp4-downloads-create-downloads Write
Delete download — cloudflare.stream-downloads-delete-type-specific-downloads Write
Create download — cloudflare.stream-downloads-create-type-specific-downloads Write
Deprecated: Retrieve legacy embed code HTML — cloudflare.stream-videos-retreieve-embed-code-html Read
Create signed URL tokens for videos — cloudflare.stream-videos-create-signed-url-tokens-for-videos Write
List Subscriptions — cloudflare.account-subscriptions-list-subscriptions Read
Create Subscription — cloudflare.account-subscriptions-create-subscription Write
Cancel Delayed Downgrade — cloudflare.account-subscriptions-cancel-delayed-downgrade Write
Delete Subscription — cloudflare.account-subscriptions-delete-subscription Write
Get Subscription — cloudflare.account-subscriptions-get-subscription Read
Update Subscription — cloudflare.account-subscriptions-update-subscription Write
Append Subscription Action — cloudflare.account-subscriptions-action-append-subscription Write
Get Cancel Reason — cloudflare.account-subscriptions-get-cancel-reason Read
Create Cancel Reason — cloudflare.account-subscriptions-create-cancel-reason Write
Delete tags from an account-level resource — cloudflare.tags-delete Write
Get tags for an account-level resource — cloudflare.tags-get Read
Set tags for an account-level resource — cloudflare.tags-set Write
List tag keys — cloudflare.tags-list-keys Read
List tagged resources — cloudflare.tags-list Read
List tag key summary — cloudflare.tags-list-key-summary Read
List tag values — cloudflare.tags-list-values Read
List tunnel routes — cloudflare.tunnel-route-list-tunnel-routes Read
Create a tunnel route — cloudflare.tunnel-route-create-a-tunnel-route Write
Get tunnel route by IP — cloudflare.tunnel-route-get-tunnel-route-by-ip Read
Delete a tunnel route — cloudflare.tunnel-route-delete-a-tunnel-route Write
Get tunnel route — cloudflare.tunnel-route-get-tunnel-route Read
Update a tunnel route — cloudflare.tunnel-route-update-a-tunnel-route Write
List virtual networks — cloudflare.tunnel-virtual-network-list-virtual-networks Read
Create a virtual network — cloudflare.tunnel-virtual-network-create-a-virtual-network Write
Delete a virtual network — cloudflare.tunnel-virtual-network-delete Write
Get a virtual network — cloudflare.tunnel-virtual-network-get Read
Update a virtual network — cloudflare.tunnel-virtual-network-update Write
List Tokens — cloudflare.account-api-tokens-list-tokens Read
Create Token — cloudflare.account-api-tokens-create-token Write
List Permission Groups — cloudflare.account-api-tokens-list-permission-groups Read
Verify Token — cloudflare.account-api-tokens-verify-token Read
Delete Token — cloudflare.account-api-tokens-delete-token Write
Token Details — cloudflare.account-api-tokens-token-details Read
Roll Token — cloudflare.account-api-tokens-roll-token Write
Delete script triggers — cloudflare.wor-delete-script-triggers Write
Get script triggers — cloudflare.wor-get-script-triggers Read
Add script triggers — cloudflare.wor-add-script-triggers Write
Replace script triggers — cloudflare.wor-replace-script-triggers Write
List All Tunnels — cloudflare.cloudflare-tunnel-list-all-tunnels Read
Bulk create URL Scans — cloudflare.urlscanner-create-scan-bulk-v2 Write
Get URL scan's DOM — cloudflare.urlscanner-get-scan-dom-v2 Read
Get URL scan's HAR — cloudflare.urlscanner-get-scan-har-v2 Read
Get raw response — cloudflare.urlscanner-get-response-v2 Read
Get URL scan — cloudflare.urlscanner-get-scan-v2 Read
Create URL Scan — cloudflare.urlscanner-create-scan-v2 Write
Get screenshot — cloudflare.urlscanner-get-scan-screenshot-v2 Read
Search URL scans — cloudflare.urlscanner-search-scans-v2 Read
List Vectorize Indexes — cloudflare.vectorize-list-vectorize-indexes Read
Create Vectorize Index — cloudflare.vectorize-create-vectorize-index Write
Delete Vectorize Index — cloudflare.vectorize-delete-vectorize-index Write
Get Vectorize Index — cloudflare.vectorize-get-vectorize-index Read
Delete Vectors By Identifier — cloudflare.vectorize-delete-vectors-by-id Write
Get Vectors By Identifier — cloudflare.vectorize-get-vectors-by-id Write
Get Vectorize Index Info — cloudflare.vectorize-index-info Read
List Vectors — cloudflare.vectorize-list-vectors Read
Create Metadata Index — cloudflare.vectorize-create-metadata-index Write
Delete Metadata Index — cloudflare.vectorize-delete-metadata-index Write
List Metadata Indexes — cloudflare.vectorize-list-metadata-indexes Read
Query Vectors — cloudflare.vectorize-query-vector Write
List credential sets — cloudflare.list-credential-sets Read
Create credential set — cloudflare.create-credential-set Write
Delete credential set — cloudflare.delete-credential-set Write
Get credential set — cloudflare.get-credential-set Read
Edit credential set — cloudflare.edit-credential-set Write
Update credential set — cloudflare.update-credential-set Write
List credentials — cloudflare.list-credentials Read
Create credential — cloudflare.create-credential Write
Delete credential — cloudflare.delete-credential Write
Get credential — cloudflare.get-credential Read
Edit credential — cloudflare.edit-credential Write
Update credential — cloudflare.update-credential Write
List scans — cloudflare.list-scans Read
Create scan — cloudflare.create-scan Write
Delete scan — cloudflare.delete-scan Write
Get scan — cloudflare.get-scan Read
List target environments — cloudflare.list-target-environments Read
Create target environment — cloudflare.create-target-environment Write
Delete target environment — cloudflare.delete-target-environment Write
Get target environment — cloudflare.get-target-environment Read
Edit target environment — cloudflare.edit-target-environment Write
Update target environment — cloudflare.update-target-environment Write
List waiting rooms for account — cloudflare.waiting-room-list-waiting-rooms-account Read
List Mesh nodes — cloudflare.cloudflare-tunnel-list-warp-connector-tunnels Read
Create a Mesh node — cloudflare.cloudflare-tunnel-create-a-warp-connector-tunnel Write
Delete a Mesh node — cloudflare.cloudflare-tunnel-delete-a-warp-connector-tunnel Write
Get a Mesh node — cloudflare.cloudflare-tunnel-get-a-warp-connector-tunnel Read
Update a Mesh node — cloudflare.cloudflare-tunnel-update-a-warp-connector-tunnel Write
Get Mesh node HA configuration — cloudflare.cloudflare-tunnel-configuration-get-warp-connector-configuration Read
Update Mesh node HA configuration — cloudflare.cloudflare-tunnel-configuration-update-warp-connector-configuration Write
List Mesh node connections — cloudflare.cloudflare-tunnel-list-warp-connector-tunnel-connections Read
Get a Mesh node connector — cloudflare.cloudflare-tunnel-get-warp-connector-tunnel-connector Read
Trigger a manual failover for a Mesh node — cloudflare.cloudflare-tunnel-manual-failover-warp-connector-tunnel Write
Get a Mesh node token — cloudflare.cloudflare-tunnel-get-a-warp-connector-tunnel-token Read
Fetch Workers Account Settings — cloudflare.worker-account-settings-fetch-worker-account-settings Read
Configure Workers Account Settings — cloudflare.worker-account-settings-create-worker-account-settings Write
List Workers for Platforms Dispatch Namespaces — cloudflare.namespace-worker-list Read
Create Workers for Platforms Dispatch Namespace — cloudflare.namespace-worker-create Write
Delete Workers for Platforms Dispatch Namespace — cloudflare.namespace-worker-delete-namespace Write
Get Workers for Platforms Dispatch Namespace — cloudflare.namespace-worker-get-namespace Read
Patch Workers for Platforms Dispatch Namespace — cloudflare.namespace-worker-patch-namespace Write
Update Workers for Platforms Dispatch Namespace — cloudflare.namespace-worker-put-namespace Write
Delete Workers for Platforms Scripts — cloudflare.namespace-worker-delete-scripts Write
List Workers for Platforms Scripts — cloudflare.namespace-worker-list-scripts Read
Delete Workers for Platforms Script — cloudflare.namespace-worker-script-delete-worker Write
Get Workers for Platforms Script details — cloudflare.namespace-worker-script-worker-details Read
Create Workers for Platforms Assets Upload Session — cloudflare.namespace-worker-script-update-create-assets-upload-session Write
Get Workers for Platforms Script Bindings — cloudflare.namespace-worker-get-script-bindings Read
Get Workers for Platforms Script Content — cloudflare.namespace-worker-get-script-content Read
List Workers for Platforms Script Secrets — cloudflare.namespace-worker-list-script-secrets Read
Add a secret to a Workers for Platforms script — cloudflare.namespace-worker-put-script-secrets Write
Patch multiple Workers for Platforms script secrets — cloudflare.namespace-worker-patch-script-secrets-bulk Write
Delete Workers for Platforms script secret — cloudflare.namespace-worker-delete-script-secret Write
Get Workers for Platforms Script Secret — cloudflare.namespace-worker-get-script-secrets Read
Get Workers for Platforms Script Settings — cloudflare.namespace-worker-get-script-settings Read
List Workers for Platforms Script Tags — cloudflare.namespace-worker-get-script-tags Read
Replace Workers for Platforms Script Tags — cloudflare.namespace-worker-put-script-tags Write
Update Workers for Platforms Script Tag — cloudflare.namespace-worker-patch-script-tag Write
Create Workers for Platforms Script Tag — cloudflare.namespace-worker-put-script-tag Write
List Worker Domains — cloudflare.workers.domains.list Read
Attach Worker Domain — cloudflare.workers.domains.update Write
Detach Worker Domain — cloudflare.workers.domains.delete Write
Get Worker Domain — cloudflare.workers.domains.get Read
List Durable Object Namespaces — cloudflare.durable-objects-namespace-list-namespaces Read
List Objects in a Durable Object namespace — cloudflare.durable-objects-namespace-list-objects Read
Query a Durable Object — cloudflare.durable-objects-namespace-query Write
List Agent sessions — cloudflare.agents.sessions.list Read
List Agent session runs — cloudflare.agents.sessions.runs.list Read
Get Destinations — cloudflare.destination.list Read
Create Destination — cloudflare.destination.create Write
Delete Destination — cloudflare.destinations.delete Write
Update Destination — cloudflare.destination.update Write
List detected issues — cloudflare.issues.list Read
List issue automations — cloudflare.issues.automations.list Read
Create an issue automation — cloudflare.issues.automations.create Write
Delete an issue automation — cloudflare.issues.automations.delete Write
Get an issue automation — cloudflare.issues.automations.get Read
Update an issue automation — cloudflare.issues.automations.update Write
Create an issue group — cloudflare.issues.groups.create Write
Dissolve an issue group — cloudflare.issues.groups.delete Write
Add issue group members — cloudflare.issues.groups.members.add Write
Remove an issue group member — cloudflare.issues.groups.members.remove Write
Summarize detected issues — cloudflare.issues.summary Read
Get an issue — cloudflare.issues.get Read
Modify an issue — cloudflare.issues.patch Write
Notify about an issue — cloudflare.issues.notificationruns.create Write
List issue occurrences — cloudflare.issues.occurrences.list Read
List Metrics Exports — cloudflare.metricsexport.list Read
Upsert Metrics Exports — cloudflare.metricsexport.upsert Write
List queries — cloudflare.queries.list Read
Save query — cloudflare.queries.post Write
Delete query — cloudflare.queries.delete Write
Get query — cloudflare.queries.get Read
Update query — cloudflare.queries.patch Write
Create a sharable link to a query result — cloudflare.shared.query.post Write
View a query that has been shared — cloudflare.shared.query.get Read
List keys — cloudflare.telemetry.keys.list Write
Prepare live tail — cloudflare.telemetry.live-tail.post Write
Live tail heartbeat — cloudflare.telemetry.live-tail.heartbeat.get Write
Run a query — cloudflare.telemetry.query Write
List values — cloudflare.telemetry.values.list Write
Get event count — cloudflare.usage.get Read
List Workers Smart Placement Regions — cloudflare.worker-placement-list-regions Read
List Worker Scripts — cloudflare.worker-script-list-workers Read
Search Worker Scripts — cloudflare.worker-script-search-workers Read
Delete Worker — cloudflare.worker-script-delete-worker Write
Create Worker Assets Upload Session — cloudflare.worker-script-update-create-assets-upload-session Write
Get Worker Script Content — cloudflare.worker-script-get-content Read
List Worker Deployments — cloudflare.worker-deployments-list-deployments Read
Create Worker Deployment — cloudflare.worker-deployments-create-deployment Write
Delete Worker Deployment — cloudflare.worker-deployments-delete-deployment Write
Get Worker Deployment — cloudflare.worker-deployments-get-deployment Read
Get Worker Script Schedules (Cron Triggers) — cloudflare.worker-cron-trigger-get-cron-triggers Read
Update Worker Script Schedules (Cron Triggers) — cloudflare.worker-cron-trigger-update-cron-triggers Write
Get Worker Script Settings — cloudflare.worker-script-settings-get-settings Read
Patch Worker Script Settings — cloudflare.worker-script-settings-patch-settings Write
List secrets bound to a Worker script — cloudflare.worker-list-script-secrets Read
Add a secret to a Worker script — cloudflare.worker-put-script-secret Write
Patch multiple Worker script secrets — cloudflare.worker-patch-script-secrets-bulk Write
Delete Worker script secret — cloudflare.worker-delete-script-secret Write
Get a secret binding — cloudflare.worker-get-script-secret Read
Get Worker Script and Version Settings — cloudflare.worker-script-get-settings Read
Delete Worker Script Subdomain — cloudflare.worker-script-delete-subdomain Write
Get Worker Script Subdomain — cloudflare.worker-script-get-subdomain Read
Update Worker Script Subdomain — cloudflare.worker-script-post-subdomain Write
List Worker Tails — cloudflare.worker-tail-logs-list-tails Read
Start Worker Tail — cloudflare.worker-tail-logs-start-tail Write
Delete Worker Tail — cloudflare.worker-tail-logs-delete-tail Write
Get Worker Script Usage Model — cloudflare.worker-script-fetch-usage-model Read
Replace Worker Script Usage Model — cloudflare.worker-script-update-usage-model Write
List Versions — cloudflare.worker-versions-list-versions Read
Get Worker Script Version — cloudflare.worker-versions-get-version-detail Read
Get Worker Environment Script Content — cloudflare.worker-environment-get-script-content Read
Get Worker Environment Settings — cloudflare.worker-script-environment-get-settings Read
Patch Worker Environment Settings — cloudflare.worker-script-environment-patch-settings Write
Delete Workers Subdomain — cloudflare.worker-subdomain-delete-subdomain Write
Get a Workers Subdomain — cloudflare.worker-subdomain-get-subdomain Read
Create a Workers Subdomain — cloudflare.worker-subdomain-create-subdomain Write
List Workers — cloudflare.listworkers Read
Create Worker — cloudflare.createworker Write
Delete Worker — cloudflare.deleteworker Write
Get Worker — cloudflare.getworker Read
Edit Worker — cloudflare.editworker Write
Update Worker — cloudflare.updateworker Write
List Previews — cloudflare.workers.previews.list Read
Create Preview — cloudflare.workers.previews.create Write
Delete Preview — cloudflare.workers.previews.delete Write
Get Preview — cloudflare.workers.previews.get Read
Edit Preview — cloudflare.workers.previews.edit Write
Update Preview — cloudflare.workers.previews.update Write
List Preview Deployments — cloudflare.workers.previews.deployments.list Read
Create Preview Deployment — cloudflare.workers.previews.deployments.create Write
Patch Latest Preview Deployment — cloudflare.workers.previews.deployments.patchlatest Write
Delete Preview Deployment — cloudflare.workers.previews.deployments.delete Write
Get Preview Deployment — cloudflare.workers.previews.deployments.get Read
List Worker Versions — cloudflare.listworkerversions Read
Create Worker Version — cloudflare.createworkerversion Write
Get Latest Worker Version — cloudflare.getlatestworkerversion Read
Patch Latest Worker Version — cloudflare.patchlatestworkerversion Write
Delete Worker Version — cloudflare.deleteworkerversion Write
Get Worker Version — cloudflare.getworkerversion Read
List all Workflows — cloudflare.wor-list-workflows Read
List concurrency keys — cloudflare.wor-list-concurrency-keys Read
Create a concurrency key — cloudflare.wor-create-concurrency-key Write
Delete a concurrency key — cloudflare.wor-delete-concurrency-key Write
Get concurrency key details — cloudflare.wor-get-concurrency-key Read
Update a concurrency key — cloudflare.wor-update-concurrency-key Write
Get account settings — cloudflare.wor-get-workflow-settings Read
Update account settings — cloudflare.wor-update-workflow-settings Write
Deletes a Workflow — cloudflare.wor-delete-workflow Write
Get Workflow details — cloudflare.wor-get-workflow-details Read
Create/modify Workflow — cloudflare.wor-create-or-modify-workflow Write
List of workflow instances — cloudflare.wor-list-workflow-instances Read
Create a new workflow instance — cloudflare.wor-create-new-workflow-instance Write
Batch create new Workflow instances — cloudflare.wor-batch-create-workflow-instance Write
Batch delete instances of a workflow — cloudflare.wor-batch-delete-workflow-instances Write
Batch terminate instances of a workflow — cloudflare.wor-batch-terminate-workflow-instances Write
Get status of the job responsible for terminate all instances of a workflow — cloudflare.wor-status-terminate-workflow-instances Read
Delete a workflow instance — cloudflare.wor-delete-workflow-instance Write
Get logs and status from instance — cloudflare.wor-describe-workflow-instance Read
Send event to instance — cloudflare.wor-send-event-workflow-instance Write
Change status of instance — cloudflare.wor-change-status-workflow-instance Write
Get full step output from instance — cloudflare.wor-get-workflow-instance-step Read
Create a workflow instance event subscription token — cloudflare.wor-create-workflow-instance-subscription-token Read
List deployed Workflow versions — cloudflare.wor-list-workflow-versions Read
Get Workflow version details — cloudflare.wor-describe-workflow-versions Read
Get Workflow version dag — cloudflare.wor-describe-workflow-versions-dag Read
Get Workflow version graph — cloudflare.wor-describe-workflow-versions-graph Read
Get Zero Trust Connectivity Settings — cloudflare.zero-trust-accounts-get-connectivity-settings Read
Updates the Zero Trust Connectivity Settings — cloudflare.zero-trust-accounts-patch-connectivity-settings Write
List hostname routes — cloudflare.zero-trust-networks-route-hostname-list Read
Create hostname route — cloudflare.zero-trust-networks-route-hostname-create Write
Delete hostname route — cloudflare.zero-trust-networks-route-hostname-delete Write
Get hostname route — cloudflare.zero-trust-networks-route-hostname-get Read
Update hostname route — cloudflare.zero-trust-networks-route-hostname-update Write
List Subnets — cloudflare.zero-trust-networks-subnets-list Read
Get Cloudflare Source Subnet — cloudflare.zero-trust-networks-subnet-get-cloudflare-source Read
Update Cloudflare Source Subnet — cloudflare.zero-trust-networks-subnet-update-cloudflare-source Write
Get Initial Resolved IP Subnet — cloudflare.zero-trust-networks-subnet-get-initial-resolved-ip Read
Update Initial Resolved IP Subnet — cloudflare.zero-trust-networks-subnet-update-initial-resolved-ip Write
Create WARP IP subnet — cloudflare.zero-trust-networks-subnet-create-warp Write
Delete WARP IP subnet — cloudflare.zero-trust-networks-subnet-delete-warp Write
Get WARP IP subnet — cloudflare.zero-trust-networks-subnet-get-warp Read
Update WARP IP subnet — cloudflare.zero-trust-networks-subnet-update-warp Write
Get all behaviors and associated configuration — cloudflare.dlp-risk-score-behaviors-get Read
Update configuration for risk behaviors — cloudflare.dlp-risk-score-behaviors-put Write
List all risk score integrations for the account. — cloudflare.dlp-zt-risk-score-integration-list Read
Create new risk score integration. — cloudflare.dlp-zt-risk-score-integration-create Write
Get risk score integration by reference id. — cloudflare.dlp-zt-risk-score-integration-get-by-reference-id Read
Delete a risk score integration. — cloudflare.dlp-zt-risk-score-integration-delete Write
Get risk score integration by id. — cloudflare.dlp-zt-risk-score-integration-get Read
Update a risk score integration. — cloudflare.dlp-zt-risk-score-integration-update Write
Get risk score info for all users in the account — cloudflare.dlp-risk-score-summary-get Read
Get risk event/score information for a specific user — cloudflare.dlp-risk-score-summary-get-for-user Read
Clear the risk score for a particular user — cloudflare.dlp-risk-score-reset-post Write
Query analytics datasets — cloudflare.sql-api-query-get Read
Query analytics datasets — cloudflare.sql-api-query-post Write
List available analytics datasets — cloudflare.sql-api-introspection Read
Validate Billing Address — cloudflare.billing-validate-address Write
Get Rate Plan by Public Key — cloudflare.billing-get-rate-plan Read
List Certificates — cloudflare.origin-ca-list-certificates Read
Create Certificate — cloudflare.origin-ca-create-certificate Write
Revoke Certificate — cloudflare.origin-ca-revoke-certificate Write
Get Certificate — cloudflare.origin-ca-get-certificate Read
List category APIs — cloudflare.cws-list-category-apis Read
List category applications — cloudflare.cws-list-category-applications Read
List application versions — cloudflare.cws-list-category-application-versions Read
Get the latest application version — cloudflare.cws-get-latest-category-application-version Read
Get an application version — cloudflare.cws-get-category-application-version Read
List category operations — cloudflare.cws-list-category-operations Read
Get filter fields — cloudflare.cws-get-filter-schema Read
Cloudflare/JD Cloud IP Details — cloudflare.cloudflare-ips-cloudflare-ip-details Read
List Memberships — cloudflare.user--s-account-memberships-list-memberships Read
Delete Membership — cloudflare.user--s-account-memberships-delete-membership Write
Membership Details — cloudflare.user--s-account-memberships-membership-details Read
Update Membership — cloudflare.user--s-account-memberships-update-membership Write
List OAuth Scopes — cloudflare.oauth-scopes-list Read
List organizations the user has access to — cloudflare.organization_listorganizations Read
Create organization — cloudflare.organizations_createuserorganization Write
Delete organization — cloudflare.organizations_delete Write
Get organization — cloudflare.organizations_retrieve Read
Update organization — cloudflare.organizations_modify Write
List organization accounts — cloudflare.organizations_getaccounts Read
Get Organization Usage (Version 2, Alpha, Restricted) — cloudflare.billable-usage-v2-get-organization-usage Read
Handle organization invite — cloudflare.organizations_handleorganizationinvite Write
Get organization audit logs (Version 2) — cloudflare.audit-logs-v2-get-organization-audit-logs Read
Get resource change history from an organization audit log entry (Version 2) — cloudflare.audit-logs-v2-get-organization-audit-log-history Read
List organization members — cloudflare.members_list Read
Create organization member — cloudflare.members_create Write
Delete organization member — cloudflare.members_delete Write
Get organization member — cloudflare.members_retrieve Read
Batch create organization members — cloudflare.members_batchcreate Write
Get organization profile — cloudflare.organizations_getprofile Read
Modify organization profile. — cloudflare.organizations_modifyprofile Write
List organization shares — cloudflare.organization-shares-list Read
Check missing assets — cloudflare.pages-assets-check-missing Write
Upload asset — cloudflare.pages-assets-upload Write
Upsert asset hashes — cloudflare.pages-assets-upsert-hashes Write
Get agent readiness summary — cloudflare.radar-get-agent-readiness-summary Read
Get AI bots HTTP requests distribution by dimension — cloudflare.radar-get-ai-bots-summary Read
Get AI bots HTTP requests time series — cloudflare.radar-get-ai-bots-timeseries Read
Get time series distribution of AI bots HTTP requests by dimension. — cloudflare.radar-get-ai-bots-timeseries-group Read
Get Workers AI inference distribution by dimension — cloudflare.radar-get-ai-inference-summary Read
Get time series distribution of Workers AI inference by dimension. — cloudflare.radar-get-ai-inference-timeseries-group Read
Get AI markdown for agents reduction ratio summary — cloudflare.radar-get-ai-markdown-for-agents-summary Read
Get AI markdown for agents reduction ratio time series — cloudflare.radar-get-ai-markdown-for-agents-timeseries Read
Get latest annotations — cloudflare.radar-get-annotations Read
Get latest Internet outages and anomalies — cloudflare.radar-get-annotations-outages Read
Get the number of outages by location — cloudflare.radar-get-annotations-outages-top Read
Get annotation by ID — cloudflare.radar-get-annotation-by-id Read
Get AS112 summary by dimension — cloudflare.radar-get-dns-as112-summary Read
Get AS112 DNS queries time series — cloudflare.radar-get-dns-as112-timeseries Read
Get AS112 time series grouped by dimension — cloudflare.radar-get-dns-as112-timeseries-group Read
Get top locations by AS112 DNS queries — cloudflare.radar-get-dns-as112-top-locations Read
Get top locations by AS112 DNS queries with DNSSEC support — cloudflare.radar-get-dns-as112-top-locations-by-dnssec Read
Get top locations by AS112 DNS queries with EDNS support — cloudflare.radar-get-dns-as112-top-locations-by-edns Read
Get top locations by AS112 DNS queries for an IP version — cloudflare.radar-get-dns-as112-top-locations-by-ip-version Read
Get layer 3 attacks summary by dimension — cloudflare.radar-get-attacks-layer3-summary Read
Get layer 3 attacks by bytes time series — cloudflare.radar-get-attacks-layer3-timeseries-by-bytes Read
Get layer 3 attacks time series grouped by dimension — cloudflare.radar-get-attacks-layer3-timeseries-group Read
Get top layer 3 attack pairs (origin and target locations) — cloudflare.radar-get-attacks-layer3-top-attacks Read
Get top origin locations of layer 3 attacks — cloudflare.radar-get-attacks-layer3-top-origin-locations Read
Get top target locations of layer 3 attacks — cloudflare.radar-get-attacks-layer3-top-target-locations Read
Get layer 7 attacks summary by dimension — cloudflare.radar-get-attacks-layer7-summary Read
Get layer 7 attacks time series — cloudflare.radar-get-attacks-layer7-timeseries Read
Get layer 7 attacks time series grouped by dimension — cloudflare.radar-get-attacks-layer7-timeseries-group Read
Get top origin ASes of layer 7 attacks — cloudflare.radar-get-attacks-layer7-top-origin-as Read
Get top layer 7 attack pairs (origin and target locations) — cloudflare.radar-get-attacks-layer7-top-attacks Read
Get top origin locations of layer 7 attacks — cloudflare.radar-get-attacks-layer7-top-origin-location Read
Get top target locations of layer 7 attacks — cloudflare.radar-get-attacks-layer7-top-target-location Read
Get BGP hijack events — cloudflare.radar-get-bgp-hijacks-events Read
Get announced IP address space time series — cloudflare.radar-get-bgp-ips-timeseries Read
Get top ASes by announced IP space — cloudflare.radar-get-bgp-ips-top-ases Read
Get BGP route leak events — cloudflare.radar-get-bgp-route-leak-events Read
List ASes from global routing tables — cloudflare.radar-get-bgp-routes-asns Read
Get Multi-Origin AS (MOAS) prefixes — cloudflare.radar-get-bgp-pfx2as-moas Read
Get tier-1 path segments for an AS — cloudflare.radar-get-bgp-routes-paths Read
Get prefix-to-ASN mapping — cloudflare.radar-get-bgp-pfx2as Read
Get real-time BGP routes for a prefix — cloudflare.radar-get-bgp-routes-realtime Read
Get BGP routing table stats — cloudflare.radar-get-bgp-routes-stats Read
Get upstream composition time series for an AS — cloudflare.radar-get-bgp-routes-upstreams-timeseries Read
Get ASPA changes over time — cloudflare.radar-get-bgp-rpki-aspa-changes Read
Get ASPA objects snapshot — cloudflare.radar-get-bgp-rpki-aspa-snapshot Read
Get ASPA count time series — cloudflare.radar-get-bgp-rpki-aspa-timeseries Read
Get RPKI ROA deployment time series — cloudflare.radar-get-bgp-rpki-roas-timeseries Read
Get BGP time series — cloudflare.radar-get-bgp-timeseries Read
Get top ASes by BGP updates — cloudflare.radar-get-bgp-top-ases Read
Get top ASes by prefix count — cloudflare.radar-get-bgp-top-asns-by-prefixes Read
Get top prefixes by BGP updates — cloudflare.radar-get-bgp-top-prefixes Read
List bots — cloudflare.radar-get-bots Read
Get crawler HTTP request distribution by dimension — cloudflare.radar-get-crawlers-summary Read
Get time series of crawler HTTP request distribution by dimension — cloudflare.radar-get-crawlers-timeseries-group Read
Get bots HTTP requests distribution by dimension — cloudflare.radar-get-bots-summary Read
Get bots HTTP requests time series — cloudflare.radar-get-bots-timeseries Read
Get time series distribution of bots HTTP requests by dimension. — cloudflare.radar-get-bots-timeseries-group Read
Get bot details — cloudflare.radar-get-bot-details Read
List certificate authorities — cloudflare.radar-get-certificate-authorities Read
Get certificate authority details — cloudflare.radar-get-certificate-authority-details Read
List certificate logs — cloudflare.radar-get-certificate-logs Read
Get certificate log details — cloudflare.radar-get-certificate-log-details Read
Get certificate distribution by dimension — cloudflare.radar-get-ct-summary Read
Get certificates time series — cloudflare.radar-get-ct-timeseries Read
Get time series of certificate distribution by dimension — cloudflare.radar-get-ct-timeseries-group Read
List datasets — cloudflare.radar-get-reports-datasets Read
Get dataset download URL — cloudflare.radar-post-reports-dataset-download-url Write
Get dataset CSV stream — cloudflare.radar-get-reports-dataset-download Read
Get DNS summary by dimension — cloudflare.radar-get-dns-summary Read
Get DNS queries time series — cloudflare.radar-get-dns-timeseries Read
Get DNS time series grouped by dimension — cloudflare.radar-get-dns-timeseries-group Read
Get top ASes by DNS queries — cloudflare.radar-get-dns-top-ases Read
Get top locations by DNS queries — cloudflare.radar-get-dns-top-locations Read
Get email routing summary by dimension — cloudflare.radar-get-email-routing-summary Read
Get email routing time series grouped by dimension — cloudflare.radar-get-email-routing-timeseries-group Read
Get email security summary by dimension — cloudflare.radar-get-email-security-summary Read
Get email security time series grouped by dimension — cloudflare.radar-get-email-security-timeseries-group Read
Get top TLDs by email message volume — cloudflare.radar-get-email-security-top-tlds-by-messages Read
Get top TLDs by email malicious classification — cloudflare.radar-get-email-security-top-tlds-by-malicious Read
Get top TLDs by email spam classification — cloudflare.radar-get-email-security-top-tlds-by-spam Read
Get top TLDs by email spoof classification — cloudflare.radar-get-email-security-top-tlds-by-spoof Read
List autonomous systems — cloudflare.radar-get-entities-asn-list Read
Get AS rankings by botnet threat feed activity — cloudflare.radar-get-as-botnet-threat-feed Read
Get AS details by IP address — cloudflare.radar-get-entities-asn-by-ip Read
Get AS details by ASN — cloudflare.radar-get-entities-asn-by-id Read
Get IRR AS-SETs that an AS is a member of — cloudflare.radar-get-asns-as-set Read
Get AS-level relationships by ASN — cloudflare.radar-get-asns-rel Read
Get IP address details — cloudflare.radar-get-entities-ip Read
List locations — cloudflare.radar-get-entities-locations Read
Get location details — cloudflare.radar-get-entities-location-by-alpha2 Read
List Geolocations — cloudflare.radar-get-geolocations Read
Get Geolocation details — cloudflare.radar-get-geolocation-details Read
Get HTTP requests summary by dimension — cloudflare.radar-get-http-summary Read
Get HTTP requests time series — cloudflare.radar-get-http-timeseries Read
Get HTTP requests time series grouped by dimension — cloudflare.radar-get-http-timeseries-group Read
Get top ASes by HTTP requests — cloudflare.radar-get-http-top-ases-by-http-requests Read
Get top ASes by HTTP requests for a bot class — cloudflare.radar-get-http-top-ases-by-bot-class Read
Get top ASes by HTTP requests for a browser family — cloudflare.radar-get-http-top-ases-by-browser-family Read
Get top ASes by HTTP requests for a device type — cloudflare.radar-get-http-top-ases-by-device-type Read
Get top ASes by HTTP requests for an HTTP protocol — cloudflare.radar-get-http-top-ases-by-http-protocol Read
Get top ASes by HTTP requests for an HTTP version — cloudflare.radar-get-http-top-ases-by-http-version Read
Get top ASes by HTTP requests for an IP version — cloudflare.radar-get-http-top-ases-by-ip-version Read
Get top ASes by HTTP requests for an OS — cloudflare.radar-get-http-top-ases-by-operating-system Read
Get top ASes by HTTP requests for a TLS version — cloudflare.radar-get-http-top-ases-by-tls-version Read
Get top locations by HTTP requests — cloudflare.radar-get-http-top-locations-by-http-requests Read
Get top locations by HTTP requests for a bot class — cloudflare.radar-get-http-top-locations-by-bot-class Read
Get top locations by HTTP requests for a browser family — cloudflare.radar-get-http-top-locations-by-browser-family Read
Get top locations by HTTP requests for a device type — cloudflare.radar-get-http-top-locations-by-device-type Read
Get top locations by HTTP requests for an HTTP protocol — cloudflare.radar-get-http-top-locations-by-http-protocol Read
Get top locations by HTTP requests for an HTTP version — cloudflare.radar-get-http-top-locations-by-http-version Read
Get top locations by HTTP requests for an IP version — cloudflare.radar-get-http-top-locations-by-ip-version Read
Get top locations by HTTP requests for an OS — cloudflare.radar-get-http-top-locations-by-operating-system Read
Get top locations by HTTP requests for a TLS version — cloudflare.radar-get-http-top-locations-by-tls-version Read
Get HTTP authentication requests distribution by dimension — cloudflare.radar-get-leaked-credential-checks-summary Read
Get time series distribution of HTTP authentication requests by dimension. — cloudflare.radar-get-leaked-credential-checks-timeseries-group Read
Get network traffic distribution by dimension — cloudflare.radar-get-netflows-summary Read
Get network traffic time series — cloudflare.radar-get-netflows-timeseries Read
Get time series distribution of network traffic by dimension — cloudflare.radar-get-netflows-timeseries-group Read
Get top ASes by network traffic — cloudflare.radar-get-netflows-top-ases Read
Get top locations by network traffic — cloudflare.radar-get-netflows-top-locations Read
List Origins — cloudflare.radar-get-origins Read
Get origin metrics distribution by dimension — cloudflare.radar-get-origins-summary Read
Get origin metrics time series — cloudflare.radar-get-origins-timeseries Read
Get origin metrics time series grouped by dimension — cloudflare.radar-get-origins-timeseries-group Read
Get Origin Post-Quantum Data Summary — cloudflare.radar-get-origin-post-quantum-summary Read
Get Origin Post-Quantum Data Over Time — cloudflare.radar-get-origin-post-quantum-timeseries-groups Read
Check Post-Quantum TLS support — cloudflare.radar-get-post-quantum-tls-support Read
Get speed tests histogram — cloudflare.radar-get-quality-speed-histogram Read
Get speed tests summary — cloudflare.radar-get-quality-speed-summary Read
Get top ASes by speed test results — cloudflare.radar-get-quality-speed-top-ases Read
Get top locations by speed test results — cloudflare.radar-get-quality-speed-top-locations Read
Get domain rank details — cloudflare.radar-get-ranking-domain-details Read
List Internet services categories — cloudflare.radar-get-ranking-internet-services-categories Read
Get Internet services rank time series — cloudflare.radar-get-ranking-internet-services-timeseries Read
Get top Internet services — cloudflare.radar-get-ranking-top-internet-services Read
Get domains rank time series — cloudflare.radar-get-ranking-domain-timeseries Read
Get top or trending domains — cloudflare.radar-get-ranking-top-domains Read
Get top domain categories by robots.txt files parsed — cloudflare.radar-get-robots-txt-top-domain-categories-by-files-parsed Read
Get top user agents on robots.txt files — cloudflare.radar-get-robots-txt-top-user-agents-by-directive Read
Search for locations, ASes, reports, and more — cloudflare.radar-get-search-global Read
Get TCP resets and timeouts summary — cloudflare.radar-get-tcp-resets-timeouts-summary Read
Get TCP resets and timeouts time series — cloudflare.radar-get-tcp-resets-timeouts-timeseries-group Read
List TLDs — cloudflare.radar-get-tlds Read
Get TLD Performance Summary — cloudflare.radar-get-tlds-performance-summary Read
Get TLD Performance Over Time — cloudflare.radar-get-tlds-performance-timeseries-groups Read
Get TLD details — cloudflare.radar-get-tld-details Read
Get latest Internet traffic anomalies — cloudflare.radar-get-traffic-anomalies Read
Get top locations by total traffic anomalies — cloudflare.radar-get-traffic-anomalies-top Read
Get traffic anomaly by UUID — cloudflare.radar-get-traffic-anomaly-by-uuid Read
List tenant accounts — cloudflare.tenants_listaccounts Read
List Tenant Custom Nameservers — cloudflare.tenant-level-custom-nameservers-list-tenant-custom-nameservers Read
Add Tenant Custom Nameserver — cloudflare.tenant-level-custom-nameservers-add-tenant-custom-nameserver Write
Delete Tenant Custom Nameserver — cloudflare.tenant-level-custom-nameservers-delete-tenant-custom-nameserver Write
User Details — cloudflare.user-user-details Read
Edit User — cloudflare.user-edit-user Write
Get count of zones with Argo Smart Routing enabled for user — cloudflare.argo-smart-routing-get-count-zones-enabled-for-user Read
Get user audit logs — cloudflare.audit-logs-get-user-audit-logs Read
Get communication preferences — cloudflare.user-communication-preferences-get Read
Update communication preferences — cloudflare.user-communication-preferences-update Write
List IP Access rules — cloudflare.ip-access-rules-for-a-user-list-ip-access-rules Read
Delete an IP Access rule — cloudflare.ip-access-rules-for-a-user-delete-an-ip-access-rule Write
Get an IP Access rule — cloudflare.ip-access-rules-for-a-user-get-an-ip-access-rule Read
Update an IP Access rule — cloudflare.ip-access-rules-for-a-user-update-an-ip-access-rule Write
List Invitations — cloudflare.user--s-invites-list-invitations Read
Invitation Details — cloudflare.user--s-invites-invitation-details Read
Respond to Invitation — cloudflare.user--s-invites-respond-to-invitation Write
List Monitors — cloudflare.load-balancer-monitors-list-monitors Read
Create Monitor — cloudflare.load-balancer-monitors-create-monitor Write
Delete Monitor — cloudflare.load-balancer-monitors-delete-monitor Write
Monitor Details — cloudflare.load-balancer-monitors-monitor-details Read
Patch Monitor — cloudflare.load-balancer-monitors-patch-monitor Write
Update Monitor — cloudflare.load-balancer-monitors-update-monitor Write
Preview Monitor — cloudflare.load-balancer-monitors-preview-monitor Write
List Monitor References — cloudflare.load-balancer-monitors-list-monitor-references Read
List Pools — cloudflare.load-balancer-pools-list-pools Read
Patch Pools — cloudflare.load-balancer-pools-patch-pools Write
Create Pool — cloudflare.load-balancer-pools-create-pool Write
Delete Pool — cloudflare.load-balancer-pools-delete-pool Write
Pool Details — cloudflare.load-balancer-pools-pool-details Read
Patch Pool — cloudflare.load-balancer-pools-patch-pool Write
Update Pool — cloudflare.load-balancer-pools-update-pool Write
Pool Health Details — cloudflare.load-balancer-pools-pool-health-details Read
Preview Pool — cloudflare.load-balancer-pools-preview-pool Write
List Pool References — cloudflare.load-balancer-pools-list-pool-references Read
Preview Result — cloudflare.load-balancer-monitors-preview-result Read
List Regions — cloudflare.user-load-balancer-regions-list-regions Read
List Healthcheck Events — cloudflare.load-balancer-healthcheck-events-list-healthcheck-events Read
Get User Membership — cloudflare.user-memberships-get Read
Get zones bandwidth report — cloudflare.spectrum-analytics-get-zones-report Read
Get User Subscriptions — cloudflare.user-subscription-get-user-subscriptions Read
Create User Subscription — cloudflare.user-subscription-create-user-subscription Write
Delete User Subscription — cloudflare.user-subscription-delete-user-subscription Write
Update User Subscription — cloudflare.user-subscription-update-user-subscription Write
List user tenants — cloudflare.user_listusertenants Read
List Tokens — cloudflare.user-api-tokens-list-tokens Read
Create Token — cloudflare.user-api-tokens-create-token Write
List Token Permission Groups — cloudflare.permission-groups-list-permission-groups Read
Verify Token — cloudflare.user-api-tokens-verify-token Read
Delete Token — cloudflare.user-api-tokens-delete-token Write
Token Details — cloudflare.user-api-tokens-token-details Read
Roll Token — cloudflare.user-api-tokens-roll-token Write
Request domain connect validation — cloudflare.postverify Write
Serve a provider template — cloudflare.getprovidertemplate Read
Serve a provider configuration — cloudflare.getproviderconfiguration Read
Provide settings if domain is served by Cloudflare — cloudflare.getdomainsettings Read
Trigger deploy hook — cloudflare.triggerdeployhook Write
List Zones — cloudflare.zones-get Read
Create Zone — cloudflare.zones-post Write
Delete Zone — cloudflare.zones-0-delete Write
Zone Details — cloudflare.zones-0-get Read
Edit Zone — cloudflare.zones-0-patch Write
List Access Applications — cloudflare.zone-level-access-applications-list-access-applications Read
Add an Access application — cloudflare.zone-level-access-applications-add-a-bookmark-application Write
List short-lived certificate CAs — cloudflare.zone-level-access-short-lived-certificate-c-as-list-short--22caea06d1 Read
Delete a short-lived certificate CA — cloudflare.zone-level-access-short-lived-certificate-c-as-delete-a-sh-a8831aa1dd Write
Get a short-lived certificate CA — cloudflare.zone-level-access-short-lived-certificate-c-as-get-a-short-eaf60afb56 Read
Create a short-lived certificate CA — cloudflare.zone-level-access-short-lived-certificate-c-as-create-a-sh-7a27acdb55 Write
List Access policies — cloudflare.zone-level-access-policies-list-access-policies Read
Create an Access policy — cloudflare.zone-level-access-policies-create-an-access-policy Write
Delete an Access policy — cloudflare.zone-level-access-policies-delete-an-access-policy Write
Get an Access policy — cloudflare.zone-level-access-policies-get-an-access-policy Read
Update an Access policy — cloudflare.zone-level-access-policies-update-an-access-policy Write
List mTLS certificates — cloudflare.zone-level-access-mtls-authentication-list-mtls-certificates Read
Add an mTLS certificate — cloudflare.zone-level-access-mtls-authentication-add-an-mtls-certificate Write
List all mTLS hostname settings — cloudflare.zone-level-access-mtls-authentication-list-mtls-certificat-ae09802d86 Read
Update an mTLS certificate's hostname settings — cloudflare.zone-level-access-mtls-authentication-update-an-mtls-certi-9ab3745f97 Write
Delete an mTLS certificate — cloudflare.zone-level-access-mtls-authentication-delete-an-mtls-certificate Write
Get an mTLS certificate — cloudflare.zone-level-access-mtls-authentication-get-an-mtls-certificate Read
Update an mTLS certificate — cloudflare.zone-level-access-mtls-authentication-update-an-mtls-certificate Write
List Access groups — cloudflare.zone-level-access-groups-list-access-groups Read
Create an Access group — cloudflare.zone-level-access-groups-create-an-access-group Write
Delete an Access group — cloudflare.zone-level-access-groups-delete-an-access-group Write
Get an Access group — cloudflare.zone-level-access-groups-get-an-access-group Read
Update an Access group — cloudflare.zone-level-access-groups-update-an-access-group Write
List Access identity providers — cloudflare.zone-level-access-identity-providers-list-access-identity-providers Read
Add an Access identity provider — cloudflare.zone-level-access-identity-providers-add-an-access-identity-provider Write
Delete an Access identity provider — cloudflare.zone-level-access-identity-providers-delete-an-access-iden-a86f257052 Write
Get an Access identity provider — cloudflare.zone-level-access-identity-providers-get-an-access-identity-provider Read
Update an Access identity provider — cloudflare.zone-level-access-identity-providers-update-an-access-iden-dc7a3c4e9e Write
Get your Zero Trust organization — cloudflare.zone-level-zero-trust-organization-get-your-zero-trust-organization Read
Create your Zero Trust organization — cloudflare.zone-level-zero-trust-organization-create-your-zero-trust--370c6afab3 Write
Update your Zero Trust organization — cloudflare.zone-level-zero-trust-organization-update-your-zero-trust--4e6f7216d2 Write
Revoke all Access tokens for a user — cloudflare.zone-level-zero-trust-organization-revoke-all-access-token-daef55cb0e Write
List service tokens — cloudflare.zone-level-access-service-tokens-list-service-tokens Read
Create a service token — cloudflare.zone-level-access-service-tokens-create-a-service-token Write
Delete a service token — cloudflare.zone-level-access-service-tokens-delete-a-service-token Write
Get a service token — cloudflare.zone-level-access-service-tokens-get-a-service-token Read
Update a service token — cloudflare.zone-level-access-service-tokens-update-a-service-token Write
List Custom Origin Trust Store Details — cloudflare.custom-origin-trust-store-list-details Read
Upload Custom Origin Trust Store — cloudflare.custom-origin-trust-store-create Write
Delete Custom Origin Trust Store — cloudflare.custom-origin-trust-store-delete Write
Custom Origin Trust Store Details — cloudflare.custom-origin-trust-store-details Read
Total TLS Settings Details — cloudflare.total-tls-total-tls-settings-details Read
Enable or Disable Total TLS — cloudflare.total-tls-enable-or-disable-total-tls Write
Rerun the Activation Check — cloudflare.put-zones-zone_id-activation_check Write
List Regional Hostnames — cloudflare.dls-zone-regional-hostnames-list Read
Create Regional Hostname — cloudflare.dls-zone-regional-hostnames-create Write
Delete Regional Hostname — cloudflare.dls-zone-regional-hostnames-delete Write
Fetch Regional Hostname — cloudflare.dls-zone-regional-hostnames-fetch Read
Update Regional Hostname — cloudflare.dls-zone-regional-hostnames-patch Write
Get robots.txt rules — cloudflare.ai-audit-get-robots Read
Bulk get robots.txt rules — cloudflare.ai-audit-bulk-get-robots Write
Get the AI Security for Apps custom topics of a zone. — cloudflare.ai-security-custom-topics-get Read
Update the AI Security for Apps custom topics of a zone. — cloudflare.ai-security-custom-topics-put Write
Get the AI Security for Apps status for a zone. — cloudflare.ai-security-settings-get Read
Update the AI Security for Apps status for a zone. — cloudflare.ai-security-settings-put Write
Argo Analytics for a zone — cloudflare.argo-analytics-for-zone-argo-analytics-for-a-zone Read
Argo Analytics for a zone at different PoPs — cloudflare.argo-analytics-for-geolocation-argo-analytics-for-a-zone-a-1002d24562 Read
Get session identifier settings — cloudflare.api-shield-settings-retrieve-information-about-specific-co-4672584b9d Read
Update session identifier settings — cloudflare.api-shield-settings-set-configuration-properties Write
Export discovered API operations as OpenAPI schemas — cloudflare.api-shield-api-discovery-retrieve-discovered-operations-on-da306fd4a9 Read
List discovered web and API operations — cloudflare.api-shield-api-discovery-retrieve-discovered-operations-on-a-zone Read
Edit discovered web and API operations — cloudflare.api-shield-api-patch-discovered-operations Write
Get a discovered web or API operation — cloudflare.api-shield-api-discovery-retrieve-discovered-operation-by-id Read
Edit a discovered web or API operation — cloudflare.api-shield-api-patch-discovered-operation Write
List operation labels — cloudflare.api-shield-labels-get-labels Read
Get a managed operation label — cloudflare.api-shield-labels-get-managed-label Read
Replace operations attached to a managed label — cloudflare.api-shield-labels-replace-operations-attached-to-managed-label Write
Delete user-defined operation labels — cloudflare.api-shield-labels-delete-user-labels Write
Create user-defined operation labels — cloudflare.api-shield-labels-create-user-labels Write
Delete a user-defined operation label — cloudflare.api-shield-delete-user-label Write
Get a user-defined operation label — cloudflare.api-shield-labels-get-user-label Read
Edit a user-defined operation label — cloudflare.api-shield-patch-user-label Write
Update a user-defined operation label — cloudflare.api-shield-put-user-label Write
Replace operations attached to a user-defined label — cloudflare.api-shield-labels-replace-operations-attached-to-user-label Write
Delete web or API operations — cloudflare.api-shield-endpoint-management-delete-multiple-operations Write
List web and API operations — cloudflare.api-shield-endpoint-management-retrieve-information-about--6722bf7447 Read
Create web or API operations — cloudflare.api-shield-endpoint-management-add-operations-to-a-zone Write
Create a web or API operation — cloudflare.api-shield-endpoint-management-add-operation-to-a-zone Write
Remove labels from web or API operations — cloudflare.api-shield-operations-bulk-delete-labels-to-operations Write
Attach labels to web or API operations — cloudflare.api-shield-operations-bulk-post-labels-to-operations Write
Replace labels on web or API operations — cloudflare.api-shield-operations-bulk-put-labels-to-operations Write
Delete a web or API operation — cloudflare.api-shield-endpoint-management-delete-an-operation Write
Get a web or API operation — cloudflare.api-shield-endpoint-management-retrieve-information-about--43cd9e45f3 Read
Remove labels from a web or API operation — cloudflare.api-shield-operations-delete-labels-from-operation Write
Attach labels to a web or API operation — cloudflare.api-shield-operations-post-labels-to-operation Write
Replace labels on a web or API operation — cloudflare.api-shield-operations-put-labels-to-operation Write
Export web and API operations as OpenAPI schemas — cloudflare.api-shield-endpoint-management-retrieve-operations-and-fea-7969eb7eff Read
Get Argo Smart Routing setting — cloudflare.argo-smart-routing-get-argo-smart-routing-setting Read
Patch Argo Smart Routing setting — cloudflare.argo-smart-routing-patch-argo-smart-routing-setting Write
Get Tiered Cache — cloudflare.tiered-caching-get-tiered-caching-setting Read
Update Tiered Cache — cloudflare.tiered-caching-patch-tiered-caching-setting Write
List Available Plans — cloudflare.zone-rate-plan-list-available-plans Read
Available Plan Details — cloudflare.zone-rate-plan-available-plan-details Read
List Available Rate Plans — cloudflare.zone-rate-plan-list-available-rate-plans Read
Get Zone Bot Management Config — cloudflare.bot-management-for-a-zone-get-config Read
List zone feedback reports — cloudflare.bot-management-zone-feedback-list Read
Submit a feedback report — cloudflare.bot-management-zone-feedback-create Write
Get Cache Reserve setting — cloudflare.zone-cache-settings-get-cache-reserve-setting Read
Change Cache Reserve setting — cloudflare.zone-cache-settings-change-cache-reserve-setting Write
Get Cache Reserve Clear — cloudflare.zone-cache-settings-get-cache-reserve-clear Read
Start Cache Reserve Clear — cloudflare.zone-cache-settings-start-cache-reserve-clear Write
Get Regional Tiered Cache setting — cloudflare.zone-cache-settings-get-regional-tiered-cache-setting Read
Change Regional Tiered Cache setting — cloudflare.zone-cache-settings-change-regional-tiered-cache-setting Write
Delete Smart Tiered Cache setting — cloudflare.smart-tiered-cache-delete-smart-tiered-cache-setting Write
Get Smart Tiered Cache setting — cloudflare.smart-tiered-cache-get-smart-tiered-cache-setting Read
Patch Smart Tiered Cache setting — cloudflare.smart-tiered-cache-patch-smart-tiered-cache-setting Write
Create Smart Tiered Cache setting — cloudflare.smart-tiered-cache-create-smart-tiered-cache-setting Write
Delete variants setting — cloudflare.zone-cache-settings-delete-variants-setting Write
Get variants setting — cloudflare.zone-cache-settings-get-variants-setting Read
Change variants setting — cloudflare.zone-cache-settings-change-variants-setting Write
List Hostname Associations — cloudflare.client-certificate-for-a-zone-list-hostname-associations Read
Replace Hostname Associations — cloudflare.client-certificate-for-a-zone-put-hostname-associations Write
List Client Certificates — cloudflare.client-certificate-for-a-zone-list-client-certificates Read
Create Client Certificate — cloudflare.client-certificate-for-a-zone-create-client-certificate Write
Revoke Client Certificate — cloudflare.client-certificate-for-a-zone-delete-client-certificate Write
Client Certificate Details — cloudflare.client-certificate-for-a-zone-client-certificate-details Read
Reactivate Client Certificate — cloudflare.client-certificate-for-a-zone-edit-client-certificate Write
Rules — cloudflare.zone-cloud-connector-rules Read
Put Rules — cloudflare.zone-cloud-conenctor-rules-put Write
Disable Content Scanning for a zone. — cloudflare.waf-content-scanning-disable Write
Enable Content Scanning for a zone. — cloudflare.waf-content-scanning-enable Write
List the Content Scanning custom expressions of a zone. — cloudflare.waf-content-scanning-list-custom-scan-expressions Read
Create Content Scanning custom expressions for a zone. — cloudflare.waf-content-scanning-add-custom-scan-expressions Write
Delete a Content Scanning custom expression from a zone. — cloudflare.waf-content-scanning-delete-custom-scan-expressions Write
Update a Content Scanning custom expression for a zone. — cloudflare.waf-content-scanning-update-custom-scan-expression Write
Get the Content Scanning status for a zone. — cloudflare.waf-content-scanning-get-status Read
Update the Content Scanning status for a zone. — cloudflare.waf-content-scanning-update-settings Write
Get CT Alerting Subscription — cloudflare.ct-alerting-get-subscription Read
Update CT Alerting Subscription — cloudflare.ct-alerting-update-subscription Write
List SSL Configurations — cloudflare.custom-ssl-for-a-zone-list-ssl-configurations Read
Create SSL Configuration — cloudflare.custom-ssl-for-a-zone-create-ssl-configuration Write
Re-prioritize SSL Certificates — cloudflare.custom-ssl-for-a-zone-re-prioritize-ssl-certificates Write
Delete SSL Configuration — cloudflare.custom-ssl-for-a-zone-delete-ssl-configuration Write
SSL Configuration Details — cloudflare.custom-ssl-for-a-zone-ssl-configuration-details Read
Edit SSL Configuration — cloudflare.custom-ssl-for-a-zone-edit-ssl-configuration Write
List Custom CSRs — cloudflare.custom-csrs-for-a-zone-list-custom-csrs Read
Create Custom CSR — cloudflare.custom-csrs-for-a-zone-create-custom-csr Write
Delete Custom CSR — cloudflare.custom-csrs-for-a-zone-delete-custom-csr Write
Custom CSR Details — cloudflare.custom-csrs-for-a-zone-custom-csr-details Read
List Custom Hostnames — cloudflare.custom-hostname-for-a-zone-list-custom-hostnames Read
Create Custom Hostname — cloudflare.custom-hostname-for-a-zone-create-custom-hostname Write
Delete Fallback Origin for Custom Hostnames — cloudflare.custom-hostname-fallback-origin-for-a-zone-delete-fallback-a74258cd43 Write
Get Fallback Origin for Custom Hostnames — cloudflare.custom-hostname-fallback-origin-for-a-zone-get-fallback-or-c9aa7aaff5 Read
Update Fallback Origin for Custom Hostnames — cloudflare.custom-hostname-fallback-origin-for-a-zone-update-fallback-3465fb829a Write
Get Custom Hostname Quota — cloudflare.custom-hostname-for-a-zone-get-custom-hostname-quota Read
Delete Custom Hostname (and any issued SSL certificates) — cloudflare.custom-hostname-for-a-zone-delete-custom-hostname---and-an-be27c53402 Write
Custom Hostname Details — cloudflare.custom-hostname-for-a-zone-custom-hostname-details Read
Edit Custom Hostname — cloudflare.custom-hostname-for-a-zone-edit-custom-hostname Write
Delete Single Certificate And Key For Custom Hostname — cloudflare.custom-hostname-for-a-zone-delete_single_certificate_and_k-57ef29945b Write
Replace Custom Certificate and Custom Key In Custom Hostname — cloudflare.custom-hostname-for-a-zone-edit-custom-certificate-custom-hostname Write
List custom pages — cloudflare.custom-pages-for-a-zone-list-custom-pages Read
List custom assets — cloudflare.custom-assets-for-a-zone-list-custom-assets Read
Create a custom asset — cloudflare.custom-assets-for-a-zone-create-a-custom-asset Write
Delete a custom asset — cloudflare.custom-assets-for-a-zone-delete-a-custom-asset Write
Get a custom asset — cloudflare.custom-assets-for-a-zone-get-a-custom-asset Read
Update a custom asset — cloudflare.custom-assets-for-a-zone-update-a-custom-asset Write
Create a preview token — cloudflare.custom-pages-for-a-zone-create-preview-token Write
Get a custom page — cloudflare.custom-pages-for-a-zone-get-a-custom-page Read
Update a custom page — cloudflare.custom-pages-for-a-zone-update-a-custom-page Write
Retrieve the DCV Delegation unique identifier. — cloudflare.dcv-delegation-uuid-get Read
Get device certificate provisioning status — cloudflare.devices-get-policy-certificates Read
Update device certificate provisioning status — cloudflare.devices-update-policy-certificates Write
List DNS Records — cloudflare.dns-records-for-a-zone-list-dns-records Read
Batch DNS Records — cloudflare.dns-records-for-a-zone-batch-dns-records Write
Export DNS Records — cloudflare.dns-records-for-a-zone-export-dns-records Read
List Scanned DNS Records — cloudflare.dns-records-for-a-zone-review-dns-scan Read
Review Scanned DNS Records — cloudflare.dns-records-for-a-zone-apply-dns-scan-results Write
Trigger DNS Record Scan — cloudflare.dns-records-for-a-zone-trigger-dns-scan Write
Get DNS Record Usage — cloudflare.dns-records-for-a-zone-get-usage Read
Delete DNS Record — cloudflare.dns-records-for-a-zone-delete-dns-record Write
DNS Record Details — cloudflare.dns-records-for-a-zone-dns-record-details Read
Show DNS Settings — cloudflare.dns-settings-for-a-zone-list-dns-settings Read
Update DNS Settings — cloudflare.dns-settings-for-a-zone-update-dns-settings Write
Delete DNSSEC records — cloudflare.dnssec-delete-dnssec-records Write
DNSSEC Details — cloudflare.dnssec-dnssec-details Read
Edit DNSSEC Status — cloudflare.dnssec-edit-dnssec-status Write
List DNSSEC ZSKs — cloudflare.dnssec-list-dnssec-zsks Read
Get DMARC Report Status — cloudflare.get_dmarc_reports_status Read
Configure DMARC Reports — cloudflare.configure_dmarc_reports Write
Inspect SPF Record — cloudflare.inspect_spf Read
Get Email Routing settings — cloudflare.email-routing-settings-get-email-routing-settings Read
Update Email Routing settings — cloudflare.email-routing-settings-update-email-routing-settings Write
Apply Email Routing settings — cloudflare.email-routing-settings-replace-email-routing-settings Write
Disable Email Routing — cloudflare.email-routing-settings-disable-email-routing-dns Write
Email Routing - DNS settings — cloudflare.email-routing-settings-email-routing-dns-settings Read
Unlock Email Routing DNS records — cloudflare.email-routing-settings-unlock-email-routing-dns Write
Enable Email Routing — cloudflare.email-routing-settings-enable-email-routing-dns Write
List routing rules — cloudflare.email-routing-routing-rules-list-routing-rules Read
Create routing rule — cloudflare.email-routing-routing-rules-create-routing-rule Write
Get catch-all rule — cloudflare.email-routing-routing-rules-get-catch-all-rule Read
Update catch-all rule — cloudflare.email-routing-routing-rules-update-catch-all-rule Write
Delete routing rule — cloudflare.email-routing-routing-rules-delete-routing-rule Write
Get routing rule — cloudflare.email-routing-routing-rules-get-routing-rule Read
Update routing rule — cloudflare.email-routing-routing-rules-update-routing-rule Write
List sending subdomains — cloudflare.email-sending-subdomains-list-sending-subdomains Read
Create a sending subdomain — cloudflare.email-sending-subdomains-create-sending-subdomain Write
Preview sending subdomain DNS — cloudflare.email-sending-subdomains-preview-sending-subdomain Write
Delete a sending subdomain — cloudflare.email-sending-subdomains-delete-sending-subdomain Write
Get a sending subdomain — cloudflare.email-sending-subdomains-get-sending-subdomain Read
Update a sending subdomain — cloudflare.email-sending-subdomains-update-sending-subdomain Write
Get sending subdomain DNS records — cloudflare.email-sending-subdomains-get-sending-subdomain-dns Read
Fix sending subdomain DNS records — cloudflare.email-sending-subdomains-fix-sending-subdomain-dns Write
Get sending subdomain DNS status — cloudflare.email-sending-subdomains-get-sending-subdomain-dns-status Read
Get sending subdomain complaint count — cloudflare.email-sending-subdomains-get-sending-subdomain-reputation-complaints Read
Get Zone Entitlements — cloudflare.entitlements-get-zone-entitlements Read
List zone environments — cloudflare.zonesenvironmentslist Read
Partially update zone environments — cloudflare.zonesenvironmentsedit Write
Create zone environments — cloudflare.zonesenvironmentscreate Write
Upsert zone environments — cloudflare.zonesenvironmentsupdate Write
Delete zone environment — cloudflare.zonesenvironmentsdelete Write
Invalidate Cached Content by Environment — cloudflare.zone-environment-invalidate Write
Purge Cached Content by Environment — cloudflare.zone-environment-purge Write
Roll back zone environment — cloudflare.zonesenvironmentsrollback Write
List IP Access rules — cloudflare.ip-access-rules-for-a-zone-list-ip-access-rules Read
Delete an IP Access rule — cloudflare.ip-access-rules-for-a-zone-delete-an-ip-access-rule Write
Update an IP Access rule — cloudflare.ip-access-rules-for-a-zone-update-an-ip-access-rule Write
List Zone Lockdown rules — cloudflare.zone-lockdown-list-zone-lockdown-rules Read
Create a Zone Lockdown rule — cloudflare.zone-lockdown-create-a-zone-lockdown-rule Write
Delete a Zone Lockdown rule — cloudflare.zone-lockdown-delete-a-zone-lockdown-rule Write
Get a Zone Lockdown rule — cloudflare.zone-lockdown-get-a-zone-lockdown-rule Read
Update a Zone Lockdown rule — cloudflare.zone-lockdown-update-a-zone-lockdown-rule Write
Delete the payload logging key — cloudflare.payload-logging-keys-for-a-zone-delete-the-payload-logging-key Write
Get the payload logging key — cloudflare.payload-logging-keys-for-a-zone-get-the-payload-logging-key Read
Set the payload logging key — cloudflare.payload-logging-keys-for-a-zone-set-the-payload-logging-key Write
List User Agent Blocking rules — cloudflare.user-agent-blocking-rules-list-user-agent-blocking-rules Read
Create a User Agent Blocking rule — cloudflare.user-agent-blocking-rules-create-a-user-agent-blocking-rule Write
Delete a User Agent Blocking rule — cloudflare.user-agent-blocking-rules-delete-a-user-agent-blocking-rule Write
Get a User Agent Blocking rule — cloudflare.user-agent-blocking-rules-get-a-user-agent-blocking-rule Read
Get Fraud Detection Settings — cloudflare.fraud-detection-zone-get-settings Read
Update Fraud Detection Settings — cloudflare.fraud-detection-zone-update-settings Write
List Health Checks — cloudflare.health-checks-list-health-checks Read
Create Health Check — cloudflare.health-checks-create-health-check Write
Create Preview Health Check — cloudflare.health-checks-create-preview-health-check Write
Delete Preview Health Check — cloudflare.health-checks-delete-preview-health-check Write
Health Check Preview Details — cloudflare.health-checks-health-check-preview-details Read
Delete Health Check — cloudflare.health-checks-delete-health-check Write
Health Check Details — cloudflare.health-checks-health-check-details Read
Patch Health Check — cloudflare.health-checks-patch-health-check Write
Update Health Check — cloudflare.health-checks-update-health-check Write
Remove Zone Hold — cloudflare.zones-0-hold-delete Write
Get Zone Hold — cloudflare.zones-0-hold-get Read
Update Zone Hold — cloudflare.zones-0-hold-patch Write
Create Zone Hold — cloudflare.zones-0-hold-post Write
List TLS setting for hostnames — cloudflare.per-hostname-tls-settings-list Read
Delete TLS setting for hostname — cloudflare.per-hostname-tls-settings-delete Write
Get TLS setting for hostname — cloudflare.per-hostname-tls-settings-get Read
Edit TLS setting for hostname — cloudflare.per-hostname-tls-settings-put Write
Get transformation flows — cloudflare.get_flowsget Read
Update transformation flows — cloudflare.put_flowsupdate Write
Create an ingress rule — cloudflare.sinkhole-config-create-ingress Write
Delete an ingress rule — cloudflare.sinkhole-config-delete-ingress Write
Get an ingress rule — cloudflare.sinkhole-config-get-ingress Read
Update an ingress rule — cloudflare.sinkhole-config-update-ingress Write
Invalidate Cached Content — cloudflare.zone-invalidate Write
List Keyless SSL Configurations — cloudflare.keyless-ssl-for-a-zone-list-keyless-ssl-configurations Read
Create Keyless SSL Configuration — cloudflare.keyless-ssl-for-a-zone-create-keyless-ssl-configuration Write
Delete Keyless SSL Configuration — cloudflare.keyless-ssl-for-a-zone-delete-keyless-ssl-configuration Write
Get Keyless SSL Configuration — cloudflare.keyless-ssl-for-a-zone-get-keyless-ssl-configuration Read
Edit Keyless SSL Configuration — cloudflare.keyless-ssl-for-a-zone-edit-keyless-ssl-configuration Write
Get the Leaked Credential Checks status for a zone. — cloudflare.waf-product-api-leaked-credentials-get-status Read
Update the Leaked Credential Checks status for a zone. — cloudflare.waf-product-api-leaked-credentials-set-status Write
List the custom detection locations of a zone. — cloudflare.waf-product-api-leaked-credentials-list-detections Read
Create a custom detection location for a zone. — cloudflare.waf-product-api-leaked-credentials-create-detection Write
Delete a custom detection location from a zone. — cloudflare.waf-product-api-leaked-credentials-delete-detection Write
Get a custom detection location of a zone. — cloudflare.waf-product-api-leaked-credentials-get-detection Read
Update a custom detection location of a zone. — cloudflare.waf-product-api-leaked-credentials-update-detection Write
List Load Balancers — cloudflare.load-balancers-list-load-balancers Read
Create Load Balancer — cloudflare.load-balancers-create-load-balancer Write
Delete Load Balancer — cloudflare.load-balancers-delete-load-balancer Write
Load Balancer Details — cloudflare.load-balancers-load-balancer-details Read
Patch Load Balancer — cloudflare.load-balancers-patch-load-balancer Write
Update Load Balancer — cloudflare.load-balancers-update-load-balancer Write
List fields — cloudflare.get-zones-zone_id-logpush-datasets-dataset_id-fields Read
List Logpush jobs for a dataset — cloudflare.get-zones-zone_id-logpush-datasets-dataset_id-jobs Read
List Instant Logs jobs — cloudflare.get-zones-zone_id-logpush-edge-jobs Read
Create Instant Logs job — cloudflare.post-zones-zone_id-logpush-edge-jobs Write
List Logpush jobs — cloudflare.get-zones-zone_id-logpush-jobs Read
Create Logpush job — cloudflare.post-zones-zone_id-logpush-jobs Write
Delete Logpush job — cloudflare.delete-zones-zone_id-logpush-jobs-job_id Write
Get Logpush job details — cloudflare.get-zones-zone_id-logpush-jobs-job_id Read
Update Logpush job — cloudflare.put-zones-zone_id-logpush-jobs-job_id Write
Get ownership challenge — cloudflare.post-zones-zone_id-logpush-ownership Write
Validate ownership challenge — cloudflare.post-zones-zone_id-logpush-ownership-validate Write
Validate destination — cloudflare.post-zones-zone_id-logpush-validate-destination Write
Check destination exists — cloudflare.post-zones-zone_id-logpush-validate-destination-exists Write
Validate origin — cloudflare.post-zones-zone_id-logpush-validate-origin Write
Get log retention flag — cloudflare.get-zones-zone_id-logs-control-retention-flag Read
Update log retention flag — cloudflare.post-zones-zone_id-logs-control-retention-flag Write
Get logs RayIDs — cloudflare.get-zones-zone_id-logs-rayids-ray_id Read
Get logs received — cloudflare.get-zones-zone_id-logs-received Read
List fields — cloudflare.get-zones-zone_id-logs-received-fields Read
Delete Managed Transforms — cloudflare.deletemanagedtransforms Write
List Managed Transforms — cloudflare.listmanagedtransforms Read
Update Managed Transforms — cloudflare.updatemanagedtransforms Write
Get zone Media usage — cloudflare.usage-analytics-get-zone-media-usage Read
Get zone monetization eligibility — cloudflare.monetization-get-zone-eligibility Read
Check zone monetization eligibility — cloudflare.monetization-check-zone-eligibility Write
Delete all payment rules — cloudflare.monetization-delete-ruleset Write
List payment rules — cloudflare.monetization-list-rules Read
Deploy payment ruleset — cloudflare.monetization-deploy-ruleset Write
Delete a payment rule — cloudflare.monetization-delete-rule Write
Get a payment rule — cloudflare.monetization-get-rule Read
Update a payment rule — cloudflare.monetization-patch-rule Write
Delete zone trace rules — cloudflare.zone.observability.tracing.rules.delete Write
View zone trace rules — cloudflare.zone.observability.tracing.rules.get Read
Replace zone trace rules — cloudflare.zone.observability.tracing.rules.update Write
Reset zone tracing settings — cloudflare.zone.observability.tracing.settings.delete Write
View zone tracing settings — cloudflare.zone.observability.tracing.settings.get Read
List origin cloud region mappings — cloudflare.origin-cloud-regions-v2-list Read
Batch delete origin cloud region mappings — cloudflare.origin-cloud-regions-v2-batch-delete Write
Batch create or replace origin cloud region mappings — cloudflare.origin-cloud-regions-v2-batch-upsert Write
List supported cloud vendors and regions — cloudflare.origin-cloud-regions-v2-supported-regions Read
Delete an origin cloud region mapping — cloudflare.origin-cloud-regions-v2-delete Write
Get an origin cloud region mapping — cloudflare.origin-cloud-regions-v2-get Read
Create or replace an origin cloud region mapping — cloudflare.origin-cloud-regions-v2-upsert Write
List Certificates — cloudflare.zone-level-authenticated-origin-pulls-list-certificates Read
Upload Certificate — cloudflare.zone-level-authenticated-origin-pulls-upload-certificate Write
List Hostname Associations — cloudflare.per-hostname-authenticated-origin-pull-list-hostname-associations Read
Enable or Disable a Hostname for Client Authentication — cloudflare.per-hostname-authenticated-origin-pull-enable-or-disable-a-9a86acfd38 Write
List Certificates — cloudflare.per-hostname-authenticated-origin-pull-list-certificates Read
Upload a Hostname Client Certificate — cloudflare.per-hostname-authenticated-origin-pull-upload-a-hostname-c-0fd8e52701 Write
Delete Hostname Client Certificate — cloudflare.per-hostname-authenticated-origin-pull-delete-hostname-cli-22f3b7c122 Write
Get the Hostname Client Certificate — cloudflare.per-hostname-authenticated-origin-pull-get-the-hostname-cl-9a143608ca Read
Get the Hostname Status for Client Authentication — cloudflare.per-hostname-authenticated-origin-pull-get-the-hostname-st-5bc83da3fe Read
Get Enablement Setting for Zone — cloudflare.zone-level-authenticated-origin-pulls-get-enablement-setting-for-zone Read
Set Enablement for Zone — cloudflare.zone-level-authenticated-origin-pulls-set-enablement-for-zone Write
Delete Certificate — cloudflare.zone-level-authenticated-origin-pulls-delete-certificate Write
Get Certificate Details — cloudflare.zone-level-authenticated-origin-pulls-get-certificate-details Read
Get client-side security settings — cloudflare.page-shield-get-settings Read
Update client-side security settings — cloudflare.page-shield-update-settings Write
List detected connections — cloudflare.page-shield-list-connections Read
Get a detected connection — cloudflare.page-shield-get-connection Read
List detected cookies — cloudflare.page-shield-list-cookies Read
Get a detected cookie — cloudflare.page-shield-get-cookie Read
List content security rules — cloudflare.page-shield-list-policies Read
Create a content security rule — cloudflare.page-shield-create-policy Write
Delete a content security rule — cloudflare.page-shield-delete-policy Write
Get a content security rule — cloudflare.page-shield-get-policy Read
Update a content security rule — cloudflare.page-shield-update-policy Write
List detected scripts — cloudflare.page-shield-list-scripts Read
Get a detected script — cloudflare.page-shield-get-script Read
List Page Rules — cloudflare.page-rules-list-page-rules Read
Create a Page Rule — cloudflare.page-rules-create-a-page-rule Write
Delete a Page Rule — cloudflare.page-rules-delete-a-page-rule Write
Get a Page Rule — cloudflare.page-rules-get-a-page-rule Read
Edit a Page Rule — cloudflare.page-rules-edit-a-page-rule Write
Update a Page Rule — cloudflare.page-rules-update-a-page-rule Write
Get pay-per-crawl zone eligibility — cloudflare.pay-per-crawl.getzonecanbeenabled Read
Get the pay-per-crawl config — cloudflare.pay-per-crawl.getconfig Read
Changes pay-per-crawl config for a zone — cloudflare.pay-per-crawl.patchconfig Write
Get pay-per-use zone eligibility — cloudflare.pay-per-crawl.getppuzonecanbeenabled Read
Get pay-per-use zone configuration — cloudflare.pay-per-crawl.getppuzoneconfiguration Read
Update pay-per-use zone configuration — cloudflare.pay-per-crawl.patchppuzoneconfiguration Write
List pay-per-use operators — cloudflare.pay-per-crawl.listppuoperators Read
Get pay-per-use usage statistics for a zone — cloudflare.pay-per-crawl.getppuzoneusagestats Read
Get Zone Precursor Config — cloudflare.precursor-for-a-zone-get-config Read
Update Zone Precursor Config — cloudflare.precursor-for-a-zone-update-config Write
Purge Cached Content — cloudflare.zone-purge Write
List zone rulesets — cloudflare.listzonerulesets Read
Create a zone ruleset — cloudflare.createzoneruleset Write
Get a zone entry point ruleset — cloudflare.getzoneentrypointruleset Read
Update a zone entry point ruleset — cloudflare.updatezoneentrypointruleset Write
List a zone entry point ruleset's versions — cloudflare.listzoneentrypointrulesetversions Read
Get a zone entry point ruleset version — cloudflare.getzoneentrypointrulesetversion Read
Delete a zone ruleset — cloudflare.deletezoneruleset Write
Get a zone ruleset — cloudflare.getzoneruleset Read
Update a zone ruleset — cloudflare.updatezoneruleset Write
Delete a zone ruleset rule — cloudflare.deletezonerulesetrule Write
List a zone ruleset's versions — cloudflare.listzonerulesetversions Read
Delete a zone ruleset version — cloudflare.deletezonerulesetversion Write
Get a zone ruleset version — cloudflare.getzonerulesetversion Read
List a zone ruleset version's rules by tag — cloudflare.listzonerulesetversionrulesbytag Read
List all uploaded schemas — cloudflare.schema-validation-list-schemas-paginated Read
Upload a schema — cloudflare.schema-validation-create-schema Write
List hosts covered by uploaded schemas — cloudflare.schema-validation-list-schema-hosts Read
Get global schema validation settings — cloudflare.schema-validation-get-settings Read
Edit global schema validation settings — cloudflare.schema-validation-edit-settings Write
List per-operation schema validation settings — cloudflare.schema-validation-list-per-operation-settings Read
Bulk edit per-operation schema validation settings — cloudflare.schema-validation-bulk-edit-per-operation-settings Write
Delete per-operation schema validation setting — cloudflare.schema-validation-delete-per-operation-setting Write
Get per-operation schema validation setting — cloudflare.schema-validation-get-per-operation-setting Read
Force AXFR — cloudflare.secondary-dns---secondary-zone--force-axfr Write
Delete Secondary Zone Configuration — cloudflare.secondary-dns---secondary-zone--delete-secondary-zone-configuration Write
Secondary Zone Configuration Details — cloudflare.secondary-dns---secondary-zone--secondary-zone-configuration-details Read
Create Secondary Zone Configuration — cloudflare.secondary-dns---secondary-zone--create-secondary-zone-configuration Write
Update Secondary Zone Configuration — cloudflare.secondary-dns---secondary-zone--update-secondary-zone-configuration Write
Delete Primary Zone Configuration — cloudflare.secondary-dns---primary-zone--delete-primary-zone-configuration Write
Primary Zone Configuration Details — cloudflare.secondary-dns---primary-zone--primary-zone-configuration-details Read
Create Primary Zone Configuration — cloudflare.secondary-dns---primary-zone--create-primary-zone-configuration Write
Update Primary Zone Configuration — cloudflare.secondary-dns---primary-zone--update-primary-zone-configuration Write
Disable Outgoing Zone Transfers — cloudflare.secondary-dns---primary-zone--disable-outgoing-zone-transfers Write
Enable Outgoing Zone Transfers — cloudflare.secondary-dns---primary-zone--enable-outgoing-zone-transfers Write
Force DNS NOTIFY — cloudflare.secondary-dns---primary-zone--force-dns-notify Write
Get Outgoing Zone Transfer Status — cloudflare.secondary-dns---primary-zone--get-outgoing-zone-transfer-status Read
Retrieves Zone Security Center Insights — cloudflare.get-zone-security-center-insights Read
Retrieves Zone Audit Log — cloudflare.get-zone-security-center-audit-log Read
Retrieves Zone Security Center Insight Counts by Class — cloudflare.get-zone-security-center-insight-counts-by-class Read
Retrieves a Partner Zone Security Center Insight Count — cloudflare.get-zone-security-center-partner-insight-count Read
Get Recent Zone Scans — cloudflare.get-security-center-zone-scans Read
Start On-Demand Zone Scan — cloudflare.start-security-center-zone-scan Write
Retrieves Zone Security Center Insight Counts by Severity — cloudflare.get-zone-security-center-insight-counts-by-severity Read
Retrieves Zone Security Center Insight Counts by Type — cloudflare.get-zone-security-center-insight-counts-by-type Read
Retrieves Zone Issue Audit Log — cloudflare.get-zone-security-center-issue-audit-log Read
Updates Zone Security Center Insight Classification — cloudflare.update-zone-security-center-insight-classification Write
Archives Zone Security Center Insight — cloudflare.archive-zone-security-center-insight Write
Lists Partner-Discovered Shadow Hosts for a Zone — cloudflare.get-zone-security-center-partner-shadow-hosts Read
Deletes security.txt — cloudflare.delete-security-txt Write
Retrieves security.txt — cloudflare.get-security-txt Read
Updates security.txt — cloudflare.update-security-txt Write
Delete aegis setting — cloudflare.zone-cache-settings-delete-aegis-setting Write
Get aegis setting — cloudflare.zone-cache-settings-get-aegis-setting Read
Change aegis setting — cloudflare.zone-cache-settings-change-aegis-setting Write
Get Auto-Origin TLS KEX enrollment status for the given zone — cloudflare.ssl-detector-auto-origin-tls-kex-get-enrollment Read
Patch Auto-Origin TLS KEX enrollment status for the given zone — cloudflare.ssl-detector-auto-origin-tls-kex-patch-enrollment Write
Get Automatic Platform Optimization setting — cloudflare.zone-settings-get-automatic-platform-optimization-setting Read
Change Automatic Platform Optimization setting — cloudflare.zone-settings-change-automatic-platform-optimization-setting Write
Get Binary AST setting — cloudflare.zone-settings-get-binary-ast-setting Read
Change Binary AST setting — cloudflare.zone-settings-change-binary-ast-setting Write
Get CSAM Scanner setting — cloudflare.csam-scanner-get-setting Read
Update CSAM Scanner setting — cloudflare.csam-scanner-update-setting Write
Get Cloudflare Fonts setting — cloudflare.zone-settings-get-fonts-setting Read
Change Cloudflare Fonts setting — cloudflare.zone-settings-change-fonts-setting Write
Get Google Tag Gateway configuration — cloudflare.zone-settings-get-google-tag-gateway-config Read
Update Google Tag Gateway configuration — cloudflare.zone-settings-change-google-tag-gateway-config Write
Get HTTP/2 Prioritization setting — cloudflare.zone-settings-get-h2-prioritization-setting Read
Change HTTP/2 Prioritization setting — cloudflare.zone-settings-change-h2-prioritization-setting Write
Get Image Transformations setting — cloudflare.zone-settings-get-image-resizing-setting Read
Change Image Transformations setting — cloudflare.zone-settings-change-image-resizing-setting Write
Get NEL setting — cloudflare.nel-settings-get Read
Edit NEL setting — cloudflare.nel-settings-edit Write
Get Origin H2 Max Streams Setting — cloudflare.zone-cache-settings-get-origin-h2-max-streams-setting Read
Change Origin H2 Max Streams Setting — cloudflare.zone-cache-settings-change-origin-h2-max-streams-setting Write
Get Origin Max HTTP Version Setting — cloudflare.zone-cache-settings-get-origin-max-http-version-setting Read
Change Origin Max HTTP Version Setting — cloudflare.zone-cache-settings-change-origin-max-http-version-setting Write
Delete Origin TLS Compliance Modes setting — cloudflare.zone-cache-settings-delete-origin-tls-compliance-modes-setting Write
Get Origin TLS Compliance Modes setting — cloudflare.zone-cache-settings-get-origin-tls-compliance-modes-setting Read
Change Origin TLS Compliance Modes setting — cloudflare.zone-cache-settings-change-origin-tls-compliance-modes-setting Write
Replace Origin TLS Compliance Modes setting — cloudflare.zone-cache-settings-replace-origin-tls-compliance-modes-setting Write
Get RUM status for a zone — cloudflare.web-analytics-get-rum-status Read
Toggle RUM on/off for a zone — cloudflare.web-analytics-toggle-rum Write
Get Cloudflare Speed Brain setting — cloudflare.zone-settings-get-speed-brain-setting Read
Change Cloudflare Speed Brain setting — cloudflare.zone-settings-change-speed-brain-setting Write
Get Automatic SSL/TLS enrollment status for the given zone — cloudflare.ssl-detector-automatic-mode-get-enrollment Read
Patch Automatic SSL/TLS Enrollment status for given zone — cloudflare.ssl-detector-automatic-mode-patch-enrollment Write
Get Image Transformations Allowed Origins setting — cloudflare.zone-settings-get-transformations-allowed-origins-setting Read
Change Image Transformations Allowed Origins setting — cloudflare.zone-settings-change-transformations-allowed-origins-setting Write
Get Image Transformations C2PA setting — cloudflare.zone-settings-get-transformations-c2pa-setting Read
Change Image Transformations C2PA setting — cloudflare.zone-settings-change-transformations-c2pa-setting Write
Get Transformations configuration — cloudflare.zone-settings-get-transformations-config Read
Change Transformations configuration — cloudflare.zone-settings-change-transformations-config Write
Get Zaraz configuration — cloudflare.get-zones-zone_identifier-zaraz-config Read
Get default Zaraz configuration — cloudflare.get-zones-zone_identifier-zaraz-default Read
Export Zaraz configuration — cloudflare.get-zones-zone_identifier-zaraz-export Read
List Zaraz historical configuration records — cloudflare.get-zones-zone_identifier-zaraz-history Read
Restore Zaraz historical configuration by ID — cloudflare.put-zones-zone_identifier-zaraz-history Write
Get Zaraz historical configurations by ID(s) — cloudflare.get-zones-zone_identifier-zaraz-config-history Read
Publish Zaraz preview configuration — cloudflare.post-zones-zone_identifier-zaraz-publish Write
Get Zaraz workflow — cloudflare.get-zones-zone_identifier-zaraz-workflow Read
Update Zaraz workflow — cloudflare.put-zones-zone_identifier-zaraz-workflow Write
Get zone setting — cloudflare.zone-settings-get-single-setting Read
Get Smart Shield Settings — cloudflare.smart-shield-get-settings Read
Patch Smart Shield Settings — cloudflare.smart-shield-patch-settings Write
Get Cache Reserve Clear — cloudflare.smart-shield-settings-get-cache-reserve-clear Read
Start Cache Reserve Clear — cloudflare.smart-shield-settings-start-cache-reserve-clear Write
List Health Checks — cloudflare.smart-shield-list-health-checks Read
Create Health Check — cloudflare.smart-shield-create-health-check Write
Delete Health Check — cloudflare.smart-shield-delete-health-check Write
Health Check Details — cloudflare.smart-shield-health-check-details Read
Patch Health Check — cloudflare.smart-shield-patch-health-check Write
Update Health Check — cloudflare.smart-shield-update-health-check Write
List zone snippets — cloudflare.listzonesnippets Read
Delete zone snippet rules — cloudflare.deletezonesnippetrules Write
List zone snippet rules — cloudflare.listzonesnippetrules Read
Update zone snippet rules — cloudflare.updatezonesnippetrules Write
Delete a zone snippet — cloudflare.deletezonesnippet Write
Get a zone snippet — cloudflare.getzonesnippet Read
Get current aggregated analytics — cloudflare.spectrum-aggregate-analytics-get-current-aggregated-analytics Read
Get analytics by time — cloudflare.spectrum-analytics---by-time--get-analytics-by-time Read
Get analytics summary — cloudflare.spectrum-analytics---summary--get-analytics-summary Read
List Spectrum applications — cloudflare.spectrum-applications-list-spectrum-applications Read
Delete Spectrum application — cloudflare.spectrum-applications-delete-spectrum-application Write
Get Spectrum application configuration — cloudflare.spectrum-applications-get-spectrum-application-configuration Read
List Spectrum application protocols — cloudflare.spectrum-applications-list-spectrum-application-protocols Read
Get quota and availability — cloudflare.speed-get-availabilities Read
List tested webpages — cloudflare.speed-list-pages Read
Delete all page tests — cloudflare.speed-delete-tests Write
List page test history — cloudflare.speed-list-test-history Read
Start page test — cloudflare.speed-create-test Write
Get a page test result — cloudflare.speed-get-test Read
List core web vital metrics trend — cloudflare.speed-list-page-trend Read
Delete scheduled page test — cloudflare.speed-delete-test-schedule Write
Get a page test schedule — cloudflare.speed-get-scheduled-test Read
Create scheduled page test — cloudflare.speed-create-scheduled-test Write
Analyze Certificate — cloudflare.analyze-certificate-analyze-certificate Write
List Certificate Packs — cloudflare.certificate-packs-list-certificate-packs Read
Order Advanced Certificate Manager Certificate Pack — cloudflare.certificate-packs-order-advanced-certificate-manager-certificate-pack Write
Get Certificate Pack Quotas — cloudflare.certificate-packs-get-certificate-pack-quotas Read
Delete Advanced Certificate Manager Certificate Pack — cloudflare.certificate-packs-delete-advanced-certificate-manager-cert-c1b2665810 Write
Get Certificate Pack — cloudflare.certificate-packs-get-certificate-pack Read
Restart Validation or Update Advanced Certificate Manager Certificate Pack — cloudflare.certificate-packs-restart-validation-for-advanced-certific-b3c0a565ac Write
Universal SSL Settings Details — cloudflare.universal-ssl-settings-for-a-zone-universal-ssl-settings-details Read
Edit Universal SSL Settings — cloudflare.universal-ssl-settings-for-a-zone-edit-universal-ssl-settings Write
SSL Verification Details — cloudflare.ssl-verification-ssl-verification-details Read
Edit SSL Certificate Pack Validation Method — cloudflare.ssl-verification-edit-ssl-certificate-pack-validation-method Write
Get zone Stream usage — cloudflare.usage-analytics-get-zone-stream-usage Read
Delete Zone Subscription — cloudflare.zone-subscription-delete-zone-subscription Write
Zone Subscription Details — cloudflare.zone-subscription-zone-subscription-details Read
Create Zone Subscription — cloudflare.zone-subscription-create-zone-subscription Write
Update Zone Subscription — cloudflare.zone-subscription-update-zone-subscription Write
Delete Zone Subscription — cloudflare.zone-subscription-delete-zone-subscriptions Write
Create Zone Subscription — cloudflare.zone-subscription-create-zone-subscriptions Write
Update Zone Subscription — cloudflare.zone-subscription-update-zone-subscriptions Write
Delete tags from a zone-level resource — cloudflare.tags-zone-delete Write
Get tags for a zone-level resource — cloudflare.tags-zone-get Read
Set tags for a zone-level resource — cloudflare.tags-zone-set Write
List token validation configurations — cloudflare.token-validation-config-list Read
Create a token validation configuration — cloudflare.token-validation-config-create Write
Delete a token validation configuration — cloudflare.token-validation-config-delete Write
Get a token validation configuration — cloudflare.token-validation-config-get Read
Edit a token validation configuration — cloudflare.token-validation-config-edit Write
Edit token validation credentials — cloudflare.token-validation-config-credentials-edit Write
Replace token validation credentials — cloudflare.token-validation-config-credentials-update Write
List token validation rules — cloudflare.token-validation-rules-list Read
Edit token validation rules — cloudflare.token-validation-rules-bulk-edit Write
Create token validation rules — cloudflare.token-validation-rules-bulk-create Write
Preview a token validation rule — cloudflare.token-validation-rules-preview Write
Delete a token validation rule — cloudflare.token-validation-rules-delete Write
Get a token validation rule — cloudflare.token-validation-rules-get Read
Edit a token validation rule — cloudflare.token-validation-rules-edit Write
Delete URL Normalization settings — cloudflare.deleteurlnormalization Write
Get URL Normalization settings — cloudflare.geturlnormalization Read
Update URL Normalization settings — cloudflare.updateurlnormalization Write
List waiting rooms for zone — cloudflare.waiting-room-list-waiting-rooms Read
Create waiting room — cloudflare.waiting-room-create-waiting-room Write
Create a custom waiting room page preview — cloudflare.waiting-room-create-a-custom-waiting-room-page-preview Write
Get zone-level Waiting Room settings — cloudflare.waiting-room-get-zone-settings Read
Patch zone-level Waiting Room settings — cloudflare.waiting-room-patch-zone-settings Write
Update zone-level Waiting Room settings — cloudflare.waiting-room-update-zone-settings Write
Delete waiting room — cloudflare.waiting-room-delete-waiting-room Write
Waiting room details — cloudflare.waiting-room-waiting-room-details Read
Patch waiting room — cloudflare.waiting-room-patch-waiting-room Write
Update waiting room — cloudflare.waiting-room-update-waiting-room Write
List events — cloudflare.waiting-room-list-events Read
Create event — cloudflare.waiting-room-create-event Write
Delete event — cloudflare.waiting-room-delete-event Write
Event details — cloudflare.waiting-room-event-details Read
Patch event — cloudflare.waiting-room-patch-event Write
Update event — cloudflare.waiting-room-update-event Write
Preview active event details — cloudflare.waiting-room-preview-active-event-details Read
List Waiting Room Rules — cloudflare.waiting-room-list-waiting-room-rules Read
Create Waiting Room Rule — cloudflare.waiting-room-create-waiting-room-rule Write
Replace Waiting Room Rules — cloudflare.waiting-room-replace-waiting-room-rules Write
Delete Waiting Room Rule — cloudflare.waiting-room-delete-waiting-room-rule Write
Patch Waiting Room Rule — cloudflare.waiting-room-patch-waiting-room-rule Write
Get waiting room status — cloudflare.waiting-room-get-waiting-room-status Read
List Web3 Hostnames — cloudflare.web3-hostname-list-web3-hostnames Read
Create Web3 Hostname — cloudflare.web3-hostname-create-web3-hostname Write
Web3 Hostname Details — cloudflare.web3-hostname-web3-hostname-details Read
Edit Web3 Hostname — cloudflare.web3-hostname-edit-web3-hostname Write
IPFS Universal Path Gateway Content List Details — cloudflare.web3-hostname-ipfs-universal-path-gateway-content-list-details Read
Update IPFS Universal Path Gateway Content List — cloudflare.web3-hostname-update-ipfs-universal-path-gateway-content-list Write
List IPFS Universal Path Gateway Content List Entries — cloudflare.web3-hostname-list-ipfs-universal-path-gateway-content-list-entries Read
Create IPFS Universal Path Gateway Content List Entry — cloudflare.web3-hostname-create-ipfs-universal-path-gateway-content-list-entry Write
IPFS Universal Path Gateway Content List Entry Details — cloudflare.web3-hostname-ipfs-universal-path-gateway-content-list-entry-details Read
Edit IPFS Universal Path Gateway Content List Entry — cloudflare.web3-hostname-edit-ipfs-universal-path-gateway-content-list-entry Write
List Worker Routes — cloudflare.worker-routes-list-routes Read
Create Worker Route — cloudflare.worker-routes-create-route Write
Delete Worker Route — cloudflare.worker-routes-delete-route Write
Get Worker Route — cloudflare.worker-routes-get-route Read
Replace Worker Route — cloudflare.worker-routes-update-route Write

Connect and use

Connect and use

Open the integration's connection form to check the available credential source. The source has not been resolved for this documentation export. The instructions below apply when using your own provider account.

Get your provider credentials

Follow these steps for Cloudflare, then enter the issued values in the connection form below.

  1. In Cloudflare, open My Profile → API Tokens → Create Token. Choose a template or custom permissions for only the accounts, zones and commands you need, and set an expiry. Copy the token into this connection’s Cloudflare API token field. Use an API token, not a Global API Key. Enable commands, create a Tooluse.net API key, and use the shared MCP configuration. Resource changes may incur Cloudflare charges.

Official credential setup

Where to enter credentials

In the integration page, sign in, choose your workspace and open Connect. If a Credentials choice is shown, select Use my credentials. Fill the following connection fields and save. Provider credentials belong in this form, never in an MCP configuration or tool input.

Connection field Requirement
Cloudflare API token Required

Open API keys and create a Tooluse.net key for the enabled commands.

Set TOOLUSE_API_KEY in your client and use the shared MCP configuration.

Configure Claude Code, Codex or Cursor once

Permissions and results

If you have more than one workspace, check the selected workspace in the connection or API-key dialog before saving. Roles, enabled commands, expiry and revocation use Tooluse.net's existing permissions. Disabling a connection or revoking a key immediately prevents new calls.

Send one Claude tool_use block per request. Keep the same Idempotency-Key when retrying the same request; use a new key for a new call. The response includes the shared Tooluse.net receipt and Claude tool_result. Check both HTTP status and the returned tool result before treating a call as successful.

Your connection's daily allowance and key permissions also apply. Adding a connection does not make a provider request.

Calls return the shared execution receipt and a Claude tool_result. Provider output varies by operation; consult the provider documentation for its response fields. Unconfirmed calls should be checked before retrying.

Call from your client

Use the shared MCP configuration. Refresh your client's tool list after saving the connection or changing key permissions, then call the returned tool name with the example input below.

Configure Claude Code, Codex or Cursor once

Discover your enabled tools

List permitted tools in Claude format. Read every page using page and size (maximum 100) until all results have been received. Use the returned name, not a catalog capability identifier, in the tool_use block.

curl 'https://api.tooluse.net/v1/tools' \
  -H "Authorization: Bearer $TOOLUSE_API_KEY"

Find this command in the tool list permitted by your key. Replace svc_FROM_YOUR_TOOL_LIST with its returned name. Use a new Idempotency-Key for each new call and retain it when retrying that same call.

HTTP call

curl 'https://api.tooluse.net/v1/tool-calls' \
  -H "Authorization: Bearer $TOOLUSE_API_KEY" \
  -H 'Content-Type: application/json' \
  -H 'Idempotency-Key: replace-with-a-new-call-id' \
  --data '{
  "type": "tool_use",
  "id": "toolu_example",
  "name": "svc_FROM_YOUR_TOOL_LIST",
  "input": {}
}'

Send one Claude tool_use block per request. Keep the same Idempotency-Key when retrying the same request; use a new key for a new call. The response includes the shared Tooluse.net receipt and Claude tool_result. Check both HTTP status and the returned tool result before treating a call as successful.

Commands

Heartbeat response — cloudflare.getheartbeat

Run Heartbeat response with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

This tool has no input parameters.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Accounts — cloudflare.accounts-list-accounts

Run List Accounts with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.name string Optional Name of the account.
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.direction string Optional Direction to order results. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an Account — cloudflare.account-creation

Run Create an Account with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
headers object Optional additionalProperties: false
headers.Idempotency-Key string Optional Optional key that identifies an Account-creation request. Free Account creation can require exactly one valid key, so API clients should send a key with every Account-creation request. Reuse the same key when retrying the same request. minLength: 1; maxLength: 128
body — Required $ref: "#/definitions/iam_create-account"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a specific account — cloudflare.account-deletion

Run Delete a specific account with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required The account ID of the account to be deleted

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Account Details — cloudflare.accounts-account-details

Run Account Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Account — cloudflare.accounts-update-account

Run Update Account with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
body — Required $ref: "#/definitions/iam_components-schemas-account"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "id": "023e105f4ecef8ad9ca31a8372d0c353",
    "name": "Demo Account",
    "type": "standard"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List abuse reports against the account — cloudflare.listabusereports

Run List abuse reports against the account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare Account ID maxLength: 32
query object Optional additionalProperties: false
query.page integer Optional Where in pagination to start listing abuse reports
query.per_page integer Optional How many abuse reports per page to list
query.sort string Optional A property to sort by, followed by the order (id, cdate, domain, type, status)
query.search string Optional Free-text search. Returns reports whose report ID starts with the term or whose domain contains the term, both case-insensitively. Surrounding whitespace is ignored, and an empty value is treated as absent. Combined with the other filters using AND. maxLength: 255
query.domain string Optional Filter by domain name related to the abuse report
query.created_before string Optional Returns reports created before the specified date
query.created_after string Optional Returns reports created after the specified date
query.status — Optional Filter by the status of the report. $ref: "#/definitions/abuse-reports_ReportStatus"
query.type — Optional Filter by the type of the report. $ref: "#/definitions/abuse-reports_ReportType"
query.mitigation_status — Optional Filter reports that have any mitigations in the given status. $ref: "#/definitions/abuse-reports_MitigationStatus"
query.pending_notice boolean Optional Also include reports in an open Notice and Takedown notice period. Combined with mitigation_status using OR, e.g. ?mitigation_status=active&pending_notice=true.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List submitted abuse reports — cloudflare.listsubmittedabusereports

Run List submitted abuse reports with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare Account ID maxLength: 32
query object Optional additionalProperties: false
query.page integer Optional Page of submitted reports to return. default: 1; minimum: 1
query.per_page integer Optional Number of submitted reports per page. default: 100; minimum: 1; maximum: 200
query.sort string Optional A property and direction to sort by (id, cdate, domain, type, status).
query.id string Optional Filter by report code.
query.domain array Optional Filter by reported domain. This parameter can be specified multiple times.
query.domain[] string Optional
query.created_before string Optional Return reports submitted before this time. format: "date-time"
query.created_after string Optional Return reports submitted after this time. format: "date-time"
query.status array Optional Filter by submitter-facing status. This parameter can be specified multiple times.
query.status[] — Optional $ref: "#/definitions/abuse-reports_SubmittedAbuseReportStatus"
query.type array Optional Filter by report type. This parameter can be specified multiple times.
query.type[] — Optional $ref: "#/definitions/abuse-reports_ReportType"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a submitted abuse report — cloudflare.getsubmittedabusereport

Run Get a submitted abuse report with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare Account ID maxLength: 32
path.report_id string Required Public report code.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "report_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List emails sent to an abuse report submitter — cloudflare.listsubmittedabusereportemails

Run List emails sent to an abuse report submitter with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare Account ID maxLength: 32
path.report_id string Required Public report code.
query object Optional additionalProperties: false
query.page integer Optional Page number to retrieve (default 1).
query.per_page integer Optional Number of emails per page (default 20, max 100).

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "report_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check whether a report can be appealed — cloudflare.checkappealeligibility

Run Check whether a report can be appealed with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare Account ID maxLength: 32
path.report_id string Required Abuse Report ID

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "report_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List abuse report emails — cloudflare.listemails

Run List abuse report emails with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare Account ID maxLength: 32
path.report_id string Required Abuse Report ID
query object Optional additionalProperties: false
query.page integer Optional Page number to retrieve (default 1)
query.per_page integer Optional Number of emails per page (default 20, max 100)

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "report_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List abuse report mitigations — cloudflare.listmitigations

Run List abuse report mitigations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare Account ID maxLength: 32
path.report_id string Required Abuse Report ID
query object Optional additionalProperties: false
query.page integer Optional Where in pagination to start listing abuse reports
query.per_page integer Optional How many abuse reports per page to list
query.sort string Optional A property to sort by, followed by the order enum: ["type,asc","type,desc","effective_date,asc","effective_date,desc","status,asc","status,desc","entity_type,asc","entity_type,desc"]
query.type — Optional Filter by the type of mitigation. This filter parameter can be specified multiple times to include multiple types of mitigations in the result set. $ref: "#/definitions/abuse-reports_MitigationType"
query.effective_before string Optional Returns mitigations that were dispatched before the given date
query.effective_after string Optional Returns mitigation that were dispatched after the given date
query.status — Optional Filter by the status of the mitigation. $ref: "#/definitions/abuse-reports_MitigationStatus"
query.entity_type — Optional Filter by the type of entity the mitigation impacts. $ref: "#/definitions/abuse-reports_MitigatedEntityType"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "report_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Request review on mitigations — cloudflare.requestreview

Run Request review on mitigations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare Account ID maxLength: 32
path.report_id string Required Abuse Report ID
body — Required $ref: "#/definitions/abuse-reports_MitigationAppealRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "report_id": "example"
  },
  "body": {
    "appeals": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an abuse report against the account — cloudflare.getabusereport

Run Get an abuse report against the account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare Account ID maxLength: 32
path.report_param string Required Public report ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "report_param": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Per-portal MCP tool-call timeseries — cloudflare.mcp-portals-api-portal-tool-call-timeseries

Run Per-portal MCP tool-call timeseries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.portal_id string Required
query object Optional additionalProperties: false
query.granularity string Optional enum: ["daily","monthly"]; default: "daily"
query.aggregate string Optional enum: ["true","false"]; default: "false"
query.tz string Optional default: "utc"; pattern: "^(utc|Z|\\+(?:(?:0\\d|1[0-3]):[0-5]\\d|14:00)|-(?:(?:0\\d|1[01]):[0-5]\\d|12:00))$"
query.days integer Optional Daily trailing-window size; defaults to 7 and is ignored for monthly minimum: 1; maximum: 179
query.response_status string Optional Response status to count; 'all' counts every status enum: ["success","error","cached","all"]; default: "success"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c",
    "portal_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Per-server MCP tool-call timeseries — cloudflare.mcp-portals-api-server-tool-call-timeseries

Run Per-server MCP tool-call timeseries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.server_id string Required
query object Optional additionalProperties: false
query.granularity string Optional enum: ["daily","monthly"]; default: "daily"
query.aggregate string Optional enum: ["true","false"]; default: "false"
query.tz string Optional default: "utc"; pattern: "^(utc|Z|\\+(?:(?:0\\d|1[0-3]):[0-5]\\d|14:00)|-(?:(?:0\\d|1[01]):[0-5]\\d|12:00))$"
query.days integer Optional Daily trailing-window size; defaults to 7 and is ignored for monthly minimum: 1; maximum: 179
query.response_status string Optional Response status to count; 'all' counts every status enum: ["success","error","cached","all"]; default: "success"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c",
    "server_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Account-global MCP tool-call timeseries — cloudflare.mcp-portals-api-account-tool-call-timeseries

Run Account-global MCP tool-call timeseries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.granularity string Optional enum: ["daily","monthly"]; default: "daily"
query.aggregate string Optional enum: ["true","false"]; default: "false"
query.tz string Optional default: "utc"; pattern: "^(utc|Z|\\+(?:(?:0\\d|1[0-3]):[0-5]\\d|14:00)|-(?:(?:0\\d|1[01]):[0-5]\\d|12:00))$"
query.days integer Optional Daily trailing-window size; defaults to 7 and is ignored for monthly minimum: 1; maximum: 179
query.response_status string Optional Response status to count; 'all' counts every status enum: ["success","error","cached","all"]; default: "success"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List MCP Portals — cloudflare.mcp-portals-api-list-portals

Run List MCP Portals with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 100
query.search string Optional Search by id, name, hostname

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new MCP Portal — cloudflare.mcp-portals-api-create-portals

Run Create a new MCP Portal with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Optional
body.allow_code_mode boolean Optional Deprecated: use code_mode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
body.code_mode string Optional Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400. enum: ["off","opt_in","default_on","enforced"]
body.description string Optional Optional description of the MCP portal. maxLength: 512
body.hostname string Required Hostname where the MCP portal is available. pattern: "^(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9-]*[A-Za-z0-9])$"
body.id string Required Unique identifier for the MCP portal. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
body.name string Required Display name for the MCP portal. maxLength: 350
body.secure_web_gateway boolean Optional Route outbound MCP traffic through Zero Trust Secure Web Gateway. default: false
body.servers array Optional MCP servers attached to the portal and their portal-specific settings. maxItems: 80
body.servers[] object Optional
body.servers[].default_disabled boolean Optional Hide this server's tools and prompts by default. To expose specific capabilities, set enabled: true for them in this server entry's updated_tools or updated_prompts fields when creating or updating the portal.
body.servers[].on_behalf boolean Optional Use end-user OAuth credentials when connecting this server to the portal.
body.servers[].server_id string Required Unique identifier for the MCP server. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
body.servers[].updated_prompts array Optional Portal-specific prompt overrides.
body.servers[].updated_prompts[] object Optional
body.servers[].updated_prompts[].alias string Optional Custom name exposed for the capability. maxLength: 40; pattern: "^[a-zA-Z0-9]+([_-][a-zA-Z0-9]+)*$"
body.servers[].updated_prompts[].description string Optional Custom description exposed for the capability.
body.servers[].updated_prompts[].enabled boolean Optional Whether the capability is available through the MCP server.
body.servers[].updated_prompts[].name string Required Name of the tool or prompt capability to override.
body.servers[].updated_tools array Optional Portal-specific tool overrides.
body.servers[].updated_tools[] object Optional
body.servers[].updated_tools[].alias string Optional Custom name exposed for the capability. maxLength: 40; pattern: "^[a-zA-Z0-9]+([_-][a-zA-Z0-9]+)*$"
body.servers[].updated_tools[].description string Optional Custom description exposed for the capability.
body.servers[].updated_tools[].enabled boolean Optional Whether the capability is available through the MCP server.
body.servers[].updated_tools[].name string Required Name of the tool or prompt capability to override.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an MCP Portal — cloudflare.mcp-portals-api-delete-portals

Run Delete an MCP Portal with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required Unique identifier for the MCP portal. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c",
    "id": "my-mcp-portal"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Read details of an MCP Portal — cloudflare.mcp-portals-api-fetch-gateways

Run Read details of an MCP Portal with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required Unique identifier for the MCP portal. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-mcp-portal",
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an MCP Portal — cloudflare.mcp-portals-api-update-portals

Run Update an MCP Portal with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required Unique identifier for the MCP portal. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
body object Optional
body.allow_code_mode boolean Optional Deprecated: use code_mode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
body.code_mode string Optional Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400. enum: ["off","opt_in","default_on","enforced"]
body.description string Optional Optional description of the MCP portal. maxLength: 512
body.hostname string Optional Hostname where the MCP portal is available. pattern: "^(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9-]*[A-Za-z0-9])$"
body.name string Optional Display name for the MCP portal. maxLength: 350
body.secure_web_gateway boolean Optional Route outbound MCP traffic through Zero Trust Secure Web Gateway. default: false
body.servers array Optional MCP servers attached to the portal and their portal-specific settings. maxItems: 80
body.servers[] object Optional
body.servers[].default_disabled boolean Optional Hide this server's tools and prompts by default. To expose specific capabilities, set enabled: true for them in this server entry's updated_tools or updated_prompts fields when creating or updating the portal.
body.servers[].on_behalf boolean Optional Use end-user OAuth credentials when connecting this server to the portal.
body.servers[].server_id string Required Unique identifier for the MCP server. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
body.servers[].updated_prompts array Optional Portal-specific prompt overrides.
body.servers[].updated_prompts[] object Optional
body.servers[].updated_prompts[].alias string Optional Custom name exposed for the capability. maxLength: 40; pattern: "^[a-zA-Z0-9]+([_-][a-zA-Z0-9]+)*$"
body.servers[].updated_prompts[].description string Optional Custom description exposed for the capability.
body.servers[].updated_prompts[].enabled boolean Optional Whether the capability is available through the MCP server.
body.servers[].updated_prompts[].name string Required Name of the tool or prompt capability to override.
body.servers[].updated_tools array Optional Portal-specific tool overrides.
body.servers[].updated_tools[] object Optional
body.servers[].updated_tools[].alias string Optional Custom name exposed for the capability. maxLength: 40; pattern: "^[a-zA-Z0-9]+([_-][a-zA-Z0-9]+)*$"
body.servers[].updated_tools[].description string Optional Custom description exposed for the capability.
body.servers[].updated_tools[].enabled boolean Optional Whether the capability is available through the MCP server.
body.servers[].updated_tools[].name string Required Name of the tool or prompt capability to override.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-mcp-portal",
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Resolve an MCP server OAuth redirect URI — cloudflare.mcp-portals-api-effective-redirect-uri

Run Resolve an MCP server OAuth redirect URI with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.portal_id string Required Unique identifier for the MCP portal. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.server_id string Required Unique identifier for the MCP server. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "portal_id": "my-mcp-portal",
    "server_id": "my-mcp-server",
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List MCP Servers — cloudflare.mcp-portals-api-list-servers

Run List MCP Servers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 100
query.search string Optional Search by id, name

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new MCP Server — cloudflare.mcp-portals-api-create-servers

Run Create a new MCP Server with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Optional
body.auth_credentials string Optional Credential configuration for the upstream MCP server. For auth_type "bearer", either a raw token string (e.g. "sk-abc123"), which is wrapped server-side as Authorization: Bearer <token>, or a JSON-encoded object of the form {"headers":{"Header-Name":"value",...}} for custom or multiple static headers (e.g. Cloudflare Access service tokens: {"headers":{"cf-access-client-id":"...","cf-access-client-secret":"..."}}). For auth_type "oauth" with a pre-registered client, send a JSON-encoded object containing auth_mode:"manual", config.authorization_endpoint, config.token_endpoint, and registration_info.client_id. Also provide registration_info.redirect_uris unless is_shared_oauth_callback_enabled is true. Optional fields include config.issuer, config.revocation_endpoint, registration_info.scope, and registration_info.token_endpoint_auth_method. Send the client secret in the separate client_secret field. Omit auth_credentials on update to preserve the existing configuration.
body.auth_type string Required Authentication method used to connect to the upstream MCP server. enum: ["oauth","bearer","unauthenticated"]
body.client_secret string Optional Provides 'client_secret' for a pre-registered OAuth client. This field is accepted on create or update only when 'auth_credentials.auth_mode' is 'manual'. It is required when creating an MCP server with manual OAuth credentials or changing an existing server to use manual OAuth credentials. Omit 'client_secret' on update to preserve the existing secret. Provide a new 'client_secret' to rotate the secret. The secret is never returned by read, create, or update requests.
body.description string | null Optional Optional description of the MCP server. maxLength: 512
body.hostname string Required URL of the upstream MCP endpoint. format: "uri"
body.id string Required Unique identifier for the MCP server. minLength: 1; maxLength: 32; pattern: "^[a-z0-9]+(?:-[a-z0-9]+)*$"
body.is_shared_oauth_callback_enabled boolean Optional When true, per-user authorization uses the shared Cloudflare callback URL as the 'redirect_uri' instead of the portal callback URL. The default is false. Set 'is_shared_oauth_callback_enabled' to true to enable the shared Cloudflare callback URL for this MCP server. default: false
body.name string Required Display name for the MCP server. maxLength: 350
body.secure_web_gateway boolean Optional Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway. default: false
body.updated_prompts array Optional Server-wide prompt capability overrides.
body.updated_prompts[] object Optional
body.updated_prompts[].alias string Optional Custom name exposed for the capability. maxLength: 40; pattern: "^[a-zA-Z0-9]+([_-][a-zA-Z0-9]+)*$"
body.updated_prompts[].description string Optional Custom description exposed for the capability.
body.updated_prompts[].enabled boolean Optional Whether the capability is available through the MCP server.
body.updated_prompts[].name string Required Name of the tool or prompt capability to override.
body.updated_tools array Optional Server-wide tool capability overrides.
body.updated_tools[] object Optional
body.updated_tools[].alias string Optional Custom name exposed for the capability. maxLength: 40; pattern: "^[a-zA-Z0-9]+([_-][a-zA-Z0-9]+)*$"
body.updated_tools[].description string Optional Custom description exposed for the capability.
body.updated_tools[].enabled boolean Optional Whether the capability is available through the MCP server.
body.updated_tools[].name string Required Name of the tool or prompt capability to override.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an MCP Server — cloudflare.mcp-portals-api-delete-servers

Run Delete an MCP Server with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required Unique identifier for the MCP server. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c",
    "id": "my-mcp-server"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Read the details of an MCP Server — cloudflare.mcp-portals-api-fetch-servers

Run Read the details of an MCP Server with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required Unique identifier for the MCP server. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c",
    "id": "my-mcp-server"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an MCP Server — cloudflare.mcp-portals-api-update-servers

Run Update an MCP Server with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required Unique identifier for the MCP server. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
body object Optional
body.auth_credentials string Optional Credential configuration for the upstream MCP server. For auth_type "bearer", either a raw token string (e.g. "sk-abc123"), which is wrapped server-side as Authorization: Bearer <token>, or a JSON-encoded object of the form {"headers":{"Header-Name":"value",...}} for custom or multiple static headers (e.g. Cloudflare Access service tokens: {"headers":{"cf-access-client-id":"...","cf-access-client-secret":"..."}}). For auth_type "oauth" with a pre-registered client, send a JSON-encoded object containing auth_mode:"manual", config.authorization_endpoint, config.token_endpoint, and registration_info.client_id. Also provide registration_info.redirect_uris unless is_shared_oauth_callback_enabled is true. Optional fields include config.issuer, config.revocation_endpoint, registration_info.scope, and registration_info.token_endpoint_auth_method. Send the client secret in the separate client_secret field. Omit auth_credentials on update to preserve the existing configuration.
body.client_secret string Optional Provides 'client_secret' for a pre-registered OAuth client. This field is accepted on create or update only when 'auth_credentials.auth_mode' is 'manual'. It is required when creating an MCP server with manual OAuth credentials or changing an existing server to use manual OAuth credentials. Omit 'client_secret' on update to preserve the existing secret. Provide a new 'client_secret' to rotate the secret. The secret is never returned by read, create, or update requests.
body.description string | null Optional Optional description of the MCP server. maxLength: 512
body.is_shared_oauth_callback_enabled boolean Optional When true, per-user authorization uses the shared Cloudflare callback URL as the 'redirect_uri' instead of the portal callback URL. The default is false. Set 'is_shared_oauth_callback_enabled' to true to enable the shared Cloudflare callback URL for this MCP server. default: false
body.name string Optional Display name for the MCP server. maxLength: 350
body.secure_web_gateway boolean Optional Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway. default: false
body.updated_prompts array Optional Server-wide prompt capability overrides.
body.updated_prompts[] object Optional
body.updated_prompts[].alias string Optional Custom name exposed for the capability. maxLength: 40; pattern: "^[a-zA-Z0-9]+([_-][a-zA-Z0-9]+)*$"
body.updated_prompts[].description string Optional Custom description exposed for the capability.
body.updated_prompts[].enabled boolean Optional Whether the capability is available through the MCP server.
body.updated_prompts[].name string Required Name of the tool or prompt capability to override.
body.updated_tools array Optional Server-wide tool capability overrides.
body.updated_tools[] object Optional
body.updated_tools[].alias string Optional Custom name exposed for the capability. maxLength: 40; pattern: "^[a-zA-Z0-9]+([_-][a-zA-Z0-9]+)*$"
body.updated_tools[].description string Optional Custom description exposed for the capability.
body.updated_tools[].enabled boolean Optional Whether the capability is available through the MCP server.
body.updated_tools[].name string Required Name of the tool or prompt capability to override.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-mcp-server",
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Sync MCP Server Capabilities — cloudflare.mcp-portals-api-sync-server

Run Sync MCP Server Capabilities with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required Unique identifier for the MCP server. minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-mcp-server",
    "account_id": "a86a8f5c339544d7bdc89926de14fb8c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Access applications — cloudflare.access-applications-list-access-applications

Run List Access applications with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.name string Optional The name of the app.
query.domain string Optional The domain of the app.
query.aud string Optional The aud of the app.
query.target_attributes string Optional Target Criteria attributes in key=value format.
query.exact boolean Optional True for only exact string matches against passed name/domain query parameters.
query.search string Optional Search for apps by other listed query parameters.
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 1000; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add an Access application — cloudflare.access-applications-add-an-application

Run Add an Access application with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_app_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "type": "self_hosted",
    "oauth_configuration": {},
    "user_populations": [
      "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List short-lived certificate CAs — cloudflare.access-short-lived-certificate-c-as-list-short-lived-certificate-c-as

Run List short-lived certificate CAs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 100; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a short-lived certificate CA — cloudflare.access-short-lived-certificate-c-as-delete-a-short-lived-c-53df2aaf7d

Run Delete a short-lived certificate CA with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a short-lived certificate CA — cloudflare.access-short-lived-certificate-c-as-get-a-short-lived-certificate-ca

Run Get a short-lived certificate CA with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a short-lived certificate CA — cloudflare.access-short-lived-certificate-c-as-create-a-short-lived-c-21a6dd88cb

Run Create a short-lived certificate CA with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Access application policies — cloudflare.access-policies-list-access-app-policies

Run List Access application policies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required The application ID. $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 200; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an Access application policy — cloudflare.access-policies-create-an-access-policy

Run Create an Access application policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required The application ID. $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_app_policy_write_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allow devs",
    "decision": "allow",
    "include": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an Access application policy — cloudflare.access-policies-delete-an-access-policy

Run Delete an Access application policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required The application ID. $ref: "#/definitions/access_uuid"
path.policy_id — Required The policy ID. $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an Access application policy — cloudflare.access-policies-get-an-access-policy

Run Get an Access application policy with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required The application ID. $ref: "#/definitions/access_uuid"
path.policy_id — Required The policy ID. $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an Access application policy — cloudflare.access-policies-update-an-access-policy

Run Update an Access application policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required The application ID. $ref: "#/definitions/access_uuid"
path.policy_id — Required The policy ID. $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_app_policy_write_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allow devs",
    "decision": "allow",
    "include": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Convert an Access application policy to a reusable policy — cloudflare.access-policies-convert-reusable

Run Convert an Access application policy to a reusable policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required The application ID. $ref: "#/definitions/access_uuid"
path.policy_id — Required The policy ID. $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List authenticator device AAGUIDs — cloudflare.access-authenticator-device-aaguids-list

Run List authenticator device AAGUIDs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List mTLS certificates — cloudflare.access-mtls-authentication-list-mtls-certificates

Run List mTLS certificates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 50; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add an mTLS certificate — cloudflare.access-mtls-authentication-add-an-mtls-certificate

Run Add an mTLS certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.associated_hostnames — Optional $ref: "#/definitions/access_associated_hostnames"
body.certificate string Required The certificate content.
body.name — Required $ref: "#/definitions/access_name-7"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allow devs",
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIGAjCCA+qgAwIBAgIJAI7kymlF7CWT...N4RI7KKB7nikiuUf8vhULKy5IX10\nDrUtmu/B\n-----END CERTIFICATE-----"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all mTLS hostname settings — cloudflare.access-mtls-authentication-list-mtls-certificates-hostname-settings

Run List all mTLS hostname settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an mTLS certificate's hostname settings — cloudflare.access-mtls-authentication-update-an-mtls-certificate-settings

Run Update an mTLS certificate's hostname settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.settings array Required
body.settings[] — Optional $ref: "#/definitions/access_settings"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "settings": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an mTLS certificate — cloudflare.access-mtls-authentication-delete-an-mtls-certificate

Run Delete an mTLS certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an mTLS certificate — cloudflare.access-mtls-authentication-get-an-mtls-certificate

Run Get an mTLS certificate with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an mTLS certificate — cloudflare.access-mtls-authentication-update-an-mtls-certificate

Run Update an mTLS certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.associated_hostnames — Required $ref: "#/definitions/access_associated_hostnames"
body.name — Optional $ref: "#/definitions/access_name-7"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "associated_hostnames": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List custom pages — cloudflare.access-custom-pages-list-custom-pages

Run List custom pages with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 50; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a custom page — cloudflare.access-custom-pages-create-a-custom-page

Run Create a custom page with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Optional $ref: "#/definitions/access_custom_page"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate a custom page template — cloudflare.access-custom-pages-validate-a-custom-page-template

Run Validate a custom page template with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Optional $ref: "#/definitions/access_custom_page_validate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a custom page — cloudflare.access-custom-pages-delete-a-custom-page

Run Delete a custom page with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_page_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_page_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a custom page — cloudflare.access-custom-pages-get-a-custom-page

Run Get a custom page with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_page_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_page_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a custom page — cloudflare.access-custom-pages-update-a-custom-page

Run Update a custom page with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_page_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Optional $ref: "#/definitions/access_custom_page"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_page_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List SSH Certificate Authorities (CA) — cloudflare.access-gateway-ca-list-ssh-ca

Run List SSH Certificate Authorities (CA) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add a new SSH Certificate Authority (CA) — cloudflare.access-gateway-ca-add-an-ssh-ca

Run Add a new SSH Certificate Authority (CA) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an SSH Certificate Authority (CA) — cloudflare.access-gateway-ca-delete-an-ssh-ca

Run Delete an SSH Certificate Authority (CA) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Access groups — cloudflare.access-groups-list-access-groups

Run List Access groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.name string Optional The name of the group.
query.search string Optional Search for groups by other listed query parameters.
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 1000; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an Access group — cloudflare.access-groups-create-an-access-group

Run Create an Access group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.exclude — Optional $ref: "#/definitions/access_exclude"
body.include — Required $ref: "#/definitions/access_include"
body.is_default — Optional $ref: "#/definitions/access_is_default"
body.name — Required $ref: "#/definitions/access_name-6"
body.require — Optional $ref: "#/definitions/access_require"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allow devs",
    "include": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an Access group — cloudflare.access-groups-delete-an-access-group

Run Delete an Access group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an Access group — cloudflare.access-groups-get-an-access-group

Run Get an Access group with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an Access group — cloudflare.access-groups-update-an-access-group

Run Update an Access group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.exclude — Optional $ref: "#/definitions/access_exclude"
body.include — Required $ref: "#/definitions/access_include"
body.is_default — Optional $ref: "#/definitions/access_is_default"
body.name — Required $ref: "#/definitions/access_name-6"
body.require — Optional $ref: "#/definitions/access_require"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allow devs",
    "include": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Access identity providers — cloudflare.access-identity-providers-list-access-identity-providers

Run List Access identity providers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.scim_enabled string Optional Indicates to Access to only retrieve identity providers that have the System for Cross-Domain Identity Management (SCIM) enabled.
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 200; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add an Access identity provider — cloudflare.access-identity-providers-add-an-access-identity-provider

Run Add an Access identity provider with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_identity-providers"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Widget Corps IDP",
    "type": "onetimepin",
    "config": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an Access identity provider — cloudflare.access-identity-providers-delete-an-access-identity-provider

Run Delete an Access identity provider with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an Access identity provider — cloudflare.access-identity-providers-get-an-access-identity-provider

Run Get an Access identity provider with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an Access identity provider — cloudflare.access-identity-providers-update-an-access-identity-provider

Run Update an Access identity provider with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_identity-providers"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Widget Corps IDP",
    "type": "onetimepin",
    "config": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create SAML encryption certificate for Identity Provider — cloudflare.access-identity-providers-create-saml-certificate-for-iden-2f0afb5921

Run Create SAML encryption certificate for Identity Provider with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List SCIM Group resources — cloudflare.access-identity-providers-list-scim-group-resources

Run List SCIM Group resources with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.cf_resource_id — Optional $ref: "#/definitions/access_cf_resource_id"
query.idp_resource_id — Optional $ref: "#/definitions/access_idp_resource_id"
query.name — Optional $ref: "#/definitions/access_name-4"
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 100; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a SCIM Group resource — cloudflare.access-identity-providers-delete-scim-group-resource

Run Delete a SCIM Group resource with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
path.group_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a SCIM Group resource — cloudflare.access-identity-providers-get-scim-group-resource

Run Get a SCIM Group resource with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
path.group_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List SCIM User resources — cloudflare.access-identity-providers-list-scim-user-resources

Run List SCIM User resources with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.cf_resource_id — Optional $ref: "#/definitions/access_cf_resource_id-2"
query.idp_resource_id — Optional $ref: "#/definitions/access_idp_resource_id-2"
query.username — Optional $ref: "#/definitions/access_username"
query.email — Optional $ref: "#/definitions/access_email"
query.name — Optional $ref: "#/definitions/access_name-5"
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 100; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a SCIM User resource — cloudflare.access-identity-providers-delete-scim-user-resource

Run Delete a SCIM User resource with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
path.user_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a SCIM User resource — cloudflare.access-identity-providers-get-scim-user-resource

Run Get a SCIM User resource with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
path.user_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List IdP federation grants — cloudflare.access-idp-federation-grants-list

Run List IdP federation grants with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an IdP federation grant — cloudflare.access-idp-federation-grants-create

Run Create an IdP federation grant with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_idp_federation_grant_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "idp_id": "a79de439-0e7f-4ebb-8a02-222222222222"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an IdP federation grant — cloudflare.access-idp-federation-grants-delete

Run Delete an IdP federation grant with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.grant_id — Required UID of the IdP federation grant. $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "grant_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an IdP federation grant — cloudflare.access-idp-federation-grants-get

Run Get an IdP federation grant with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.grant_id — Required UID of the IdP federation grant. $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "grant_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Access key configuration — cloudflare.access-key-configuration-get-the-access-key-configuration

Run Get the Access key configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the Access key configuration — cloudflare.access-key-configuration-update-the-access-key-configuration

Run Update the Access key configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.key_rotation_interval_days — Required $ref: "#/definitions/access_key_rotation_interval_days"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "key_rotation_interval_days": 30
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rotate Access keys — cloudflare.access-key-configuration-rotate-access-keys

Run Rotate Access keys with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Access authentication logs — cloudflare.access-authentication-logs-get-access-authentication-logs

Run Get Access authentication logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.limit integer Optional The maximum number of log entries to retrieve. default: 25
query.direction string Optional The chronological sorting order for the logs. enum: ["desc","asc"]; default: "desc"
query.since string Optional The earliest event timestamp to query. format: "date-time"
query.until string Optional The latest event timestamp to query. format: "date-time"
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 25
query.email — Optional Filter by user email. Match mode is controlled by emailOp (preferred) or the legacy email_exact flag. - Default (no emailOp, email_exact=false or unset): substring match — email=@example.com returns all events with that domain. - Exact match: set emailOp=eq (preferred) or email_exact=true — e.g. email=user@example.com&email_exact=true returns only that user. - Explicit substring match: set emailOp=contains (without email_exact=true). When both are set, email_exact=true takes precedence and the match is exact. - Exclusion: set emailOp=neq. With email_exact=true this is an exact-value exclusion; without it, a fuzzy substring exclusion. $ref: "#/definitions/access_email-3"
query.email_exact boolean Optional When true, email is matched exactly instead of substring matching. default: false
query.user_id — Optional Deprecated. Accepted for backward compatibility but no longer applied as a filter. Use email instead. $ref: "#/definitions/access_user_id"
query.allowedOp string Optional Operator for the allowed filter. enum: ["eq","neq"]; default: "eq"
query.country_codeOp string Optional Operator for the country_code filter. enum: ["eq","neq"]; default: "eq"
query.app_typeOp string Optional Operator for the app_type filter. enum: ["eq","neq"]; default: "eq"
query.app_uidOp string Optional Operator for the app_uid filter. enum: ["eq","neq"]; default: "eq"
query.ray_idOp string Optional Operator for the ray_id filter. enum: ["eq","neq"]; default: "eq"
query.emailOp string Optional Operator for the email filter. contains performs a substring (case-sensitive) match. When email_exact=true is also set, email_exact takes precedence and contains is ignored. enum: ["eq","neq","contains"]; default: "eq"
query.idpOp string Optional Operator for the idp filter. enum: ["eq","neq"]; default: "eq"
query.non_identityOp string Optional Operator for the non_identity filter. enum: ["eq","neq"]; default: "eq"
query.user_idOp string Optional Deprecated. Accepted for backward compatibility but no longer applied as a filter (the user_id parameter is itself deprecated). enum: ["eq","neq"]; default: "eq"
query.fields string Optional Comma-separated list of fields to include in the response. When omitted, all fields are returned.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Access JIT request logs — cloudflare.access-jit-request-logs-list

Run List Access JIT request logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 25; maximum: 1000
query.status — Optional $ref: "#/definitions/access_jit_request_status"
query.search string Optional Case-insensitive search over request ID, requester email, application audience, and application hostname.
query.since string Optional The earliest request timestamp to query. Defaults to 366 days before the current time. format: "date-time"
query.until string Optional The latest request timestamp to query. Defaults to the current time. format: "date-time"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an Access JIT request log — cloudflare.access-jit-request-logs-get

Run Get an Access JIT request log with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.knock_request_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "knock_request_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Access SCIM update logs — cloudflare.access-scim-update-logs-list-access-scim-update-logs

Run List Access SCIM update logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Required additionalProperties: false
query.limit — Optional $ref: "#/definitions/access_limit"
query.direction — Optional $ref: "#/definitions/access_direction"
query.since — Optional $ref: "#/definitions/access_since"
query.until — Optional $ref: "#/definitions/access_until"
query.idp_id — Required $ref: "#/definitions/access_idp_id"
query.status — Optional $ref: "#/definitions/access_status-2"
query.resource_type — Optional $ref: "#/definitions/access_resource_type"
query.request_method — Optional $ref: "#/definitions/access_request_method"
query.resource_user_email — Optional $ref: "#/definitions/access_resource_user_email"
query.resource_group_name — Optional $ref: "#/definitions/access_resource_group_name"
query.cf_resource_id — Optional $ref: "#/definitions/access_cf_resource_id-3"
query.idp_resource_id — Optional $ref: "#/definitions/access_idp_resource_id-3"
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 20; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "idp_id": [
      "df7e2w5f-02b7-4d9d-af26-8d1988fca630",
      "0194ae2c-efcf-7cfb-8884-055f1a161fa5"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get your Zero Trust organization — cloudflare.zero-trust-organization-get-your-zero-trust-organization

Run Get your Zero Trust organization with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create your Zero Trust organization — cloudflare.zero-trust-organization-create-your-zero-trust-organization

Run Create your Zero Trust organization with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.allow_authenticate_via_warp — Optional $ref: "#/definitions/access_allow_authenticate_via_warp"
body.auth_domain — Optional $ref: "#/definitions/access_auth_domain"
body.auto_redirect_to_identity — Optional $ref: "#/definitions/access_auto_redirect_to_identity"
body.deny_unmatched_requests — Optional $ref: "#/definitions/access_deny_unmatched_requests"
body.deny_unmatched_requests_exempted_zone_names — Optional $ref: "#/definitions/access_deny_unmatched_requests_exempted_zone_names"
body.disable_end_user_app_creation — Optional $ref: "#/definitions/access_disable_end_user_app_creation"
body.is_ui_read_only — Optional $ref: "#/definitions/access_is_ui_read_only"
body.login_design — Optional $ref: "#/definitions/access_login_design"
body.mfa_config — Optional $ref: "#/definitions/access_org_mfa_config"
body.mfa_piv_key_requirements — Optional $ref: "#/definitions/access_mfa_piv_key_requirements"
body.mfa_required_for_all_apps — Optional $ref: "#/definitions/access_mfa_required_for_all_apps"
body.name — Optional $ref: "#/definitions/access_name"
body.service_token_inactivity — Optional $ref: "#/definitions/access_service_token_inactivity"
body.session_duration — Optional $ref: "#/definitions/access_session_duration"
body.strict_service_token_auth — Optional $ref: "#/definitions/access_strict_service_token_auth"
body.ui_read_only_toggle_reason — Optional $ref: "#/definitions/access_ui_read_only_toggle_reason"
body.user_seat_expiration_inactive_time — Optional $ref: "#/definitions/access_user_seat_expiration_inactive_time"
body.warp_auth_non_browser_401 — Optional $ref: "#/definitions/access_warp_auth_non_browser_401"
body.warp_auth_session_duration — Optional $ref: "#/definitions/access_warp_auth_session_duration"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update your Zero Trust organization — cloudflare.zero-trust-organization-update-your-zero-trust-organization

Run Update your Zero Trust organization with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.allow_authenticate_via_warp — Optional $ref: "#/definitions/access_allow_authenticate_via_warp"
body.auth_domain — Optional $ref: "#/definitions/access_auth_domain"
body.auto_redirect_to_identity — Optional $ref: "#/definitions/access_auto_redirect_to_identity"
body.custom_pages — Optional $ref: "#/definitions/access_custom_pages"
body.deny_unmatched_requests — Optional $ref: "#/definitions/access_deny_unmatched_requests"
body.deny_unmatched_requests_exempted_zone_names — Optional $ref: "#/definitions/access_deny_unmatched_requests_exempted_zone_names"
body.disable_end_user_app_creation — Optional $ref: "#/definitions/access_disable_end_user_app_creation"
body.is_ui_read_only — Optional $ref: "#/definitions/access_is_ui_read_only"
body.login_design — Optional $ref: "#/definitions/access_login_design"
body.mfa_config — Optional $ref: "#/definitions/access_org_mfa_config"
body.mfa_piv_key_requirements — Optional $ref: "#/definitions/access_mfa_piv_key_requirements"
body.mfa_required_for_all_apps — Optional $ref: "#/definitions/access_mfa_required_for_all_apps"
body.name — Optional $ref: "#/definitions/access_name"
body.service_token_inactivity — Optional $ref: "#/definitions/access_service_token_inactivity"
body.session_duration — Optional $ref: "#/definitions/access_session_duration"
body.strict_service_token_auth — Optional $ref: "#/definitions/access_strict_service_token_auth"
body.ui_read_only_toggle_reason — Optional $ref: "#/definitions/access_ui_read_only_toggle_reason"
body.user_seat_expiration_inactive_time — Optional $ref: "#/definitions/access_user_seat_expiration_inactive_time"
body.warp_auth_non_browser_401 — Optional $ref: "#/definitions/access_warp_auth_non_browser_401"
body.warp_auth_session_duration — Optional $ref: "#/definitions/access_warp_auth_session_duration"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get your Zero Trust organization DoH settings — cloudflare.zero-trust-organization-get-your-zero-trust-organization-doh-settings

Run Get your Zero Trust organization DoH settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update your Zero Trust organization DoH settings — cloudflare.zero-trust-organization-update-your-zero-trust-organizatio-c7ffe55106

Run Update your Zero Trust organization DoH settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Optional
body.doh_jwt_duration — Optional $ref: "#/definitions/access_doh_jwt_duration"
body.service_token_id string Optional The uuid of the service token you want to use for DoH authentication

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revoke all Access tokens for a user — cloudflare.zero-trust-organization-revoke-all-access-tokens-for-a-user

Run Revoke all Access tokens for a user with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.devices boolean Optional When set to true, all devices associated with the user will be revoked.
body object Required
body.devices boolean Optional When set to true, all devices associated with the user will be revoked.
body.email string Required The email of the user to revoke.
body.user_uid string Optional The uuid of the user to revoke.
body.warp_session_reauth boolean Optional When set to true, the user will be required to re-authenticate to WARP for all Gateway policies that enforce a WARP client session duration. When false, the user’s WARP session will remain active

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "email": "test@example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Zero Trust organization trust settings — cloudflare.zero-trust-organization-delete-trust-settings

Run Delete Zero Trust organization trust settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zero Trust organization trust settings — cloudflare.zero-trust-organization-get-trust-settings

Run Get Zero Trust organization trust settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Zero Trust organization trust settings — cloudflare.zero-trust-organization-update-trust-settings

Run Update Zero Trust organization trust settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.grant_trust_to_all_accounts_in_org — Optional $ref: "#/definitions/access_grant_trust_to_all_accounts_in_org"
body.trusting_accounts — Optional $ref: "#/definitions/access_trusting_accounts"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace Zero Trust organization trust settings — cloudflare.zero-trust-organization-replace-trust-settings

Run Replace Zero Trust organization trust settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.grant_trust_to_all_accounts_in_org — Required $ref: "#/definitions/access_grant_trust_to_all_accounts_in_org"
body.trusting_accounts — Optional $ref: "#/definitions/access_trusting_accounts"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "grant_trust_to_all_accounts_in_org": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Access reusable policies — cloudflare.access-policies-list-access-reusable-policies

Run List Access reusable policies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 100; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an Access reusable policy — cloudflare.access-policies-create-an-access-reusable-policy

Run Create an Access reusable policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_policy_req"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allow devs",
    "decision": "allow",
    "include": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an Access reusable policy — cloudflare.access-policies-delete-an-access-reusable-policy

Run Delete an Access reusable policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.policy_id — Required $ref: "#/definitions/access_uuid-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an Access reusable policy — cloudflare.access-policies-get-an-access-reusable-policy

Run Get an Access reusable policy with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.policy_id — Required $ref: "#/definitions/access_uuid-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an Access reusable policy — cloudflare.access-policies-update-an-access-reusable-policy

Run Update an Access reusable policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.policy_id — Required $ref: "#/definitions/access_uuid-2"
body — Required $ref: "#/definitions/access_policy_req"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "name": "Allow devs",
    "decision": "allow",
    "include": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start Access policy test — cloudflare.access-policy-tests

Run Start Access policy test with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_policy_init_req"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the current status of a given Access policy test — cloudflare.access-policy-tests-get-an-update

Run Get the current status of a given Access policy test with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.policy_test_id — Required $ref: "#/definitions/access_policy_test_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_test_id": "f1a8b3c9d4e5f6789a0b1c2d3e4f5678a9b0c1d2e3f4a5b67890c1d2e3f4b5a6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an Access policy test users page — cloudflare.access-policy-tests-get-a-user-page

Run Get an Access policy test users page with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.policy_test_id — Required $ref: "#/definitions/access_policy_test_id"
query object Optional additionalProperties: false
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional default: 25; maximum: 1000
query.status string Optional Filter users by their policy evaluation status. enum: ["success","fail","error"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_test_id": "f1a8b3c9d4e5f6789a0b1c2d3e4f5678a9b0c1d2e3f4a5b67890c1d2e3f4b5a6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List SAML certificate sets — cloudflare.access-saml-certificates-list-certificate-sets

Run List SAML certificate sets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Maximum number of results per page. default: 25; minimum: 1; maximum: 1000
query.id string Optional Filter by SAML certificate set UID. Accepts a comma-separated list of UIDs.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get SAML certificate set — cloudflare.access-saml-certificates-get-certificate-set

Run Get SAML certificate set with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.saml_cert_set_id — Required UID of the SAML certificate set. $ref: "#/definitions/access_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "saml_cert_set_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Download current certificate in PEM format — cloudflare.access-saml-certificates-get-pem

Run Download current certificate in PEM format with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.saml_cert_set_id — Required UID of the SAML certificate set. $ref: "#/definitions/access_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "saml_cert_set_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rotate SAML certificate — cloudflare.access-saml-certificates-rotate-certificate

Run Rotate SAML certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.saml_cert_set_id — Required UID of the SAML certificate set to rotate. $ref: "#/definitions/access_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "saml_cert_set_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a user seat — cloudflare.zero-trust-seats-update-a-user-seat

Run Update a user seat with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier-2"
body — Required $ref: "#/definitions/access_seats_definition"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List service tokens — cloudflare.access-service-tokens-list-service-tokens

Run List service tokens with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.name string Optional The name of the service token.
query.search string Optional Search for service tokens by other listed query parameters.
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 1000; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a service token — cloudflare.access-service-tokens-create-a-service-token

Run Create a service token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.client_secret_version — Optional $ref: "#/definitions/access_client_secret_version"
body.duration — Optional $ref: "#/definitions/access_duration"
body.enabled — Optional $ref: "#/definitions/access_enabled"
body.name — Required $ref: "#/definitions/access_name-2"
body.previous_client_secret_expires_at — Optional $ref: "#/definitions/access_previous_client_secret_expires_at"
body.tags — Optional $ref: "#/definitions/access_tags"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "CI/CD token"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a service token — cloudflare.access-service-tokens-delete-a-service-token

Run Delete a service token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.service_token_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "service_token_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a service token — cloudflare.access-service-tokens-get-a-service-token

Run Get a service token with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.service_token_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "service_token_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a service token — cloudflare.access-service-tokens-update-a-service-token

Run Update a service token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.service_token_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.client_secret_version — Optional $ref: "#/definitions/access_client_secret_version"
body.duration — Optional $ref: "#/definitions/access_duration"
body.enabled — Optional $ref: "#/definitions/access_enabled"
body.name — Optional $ref: "#/definitions/access_name-2"
body.previous_client_secret_expires_at — Optional $ref: "#/definitions/access_previous_client_secret_expires_at"
body.tags — Optional $ref: "#/definitions/access_tags"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "service_token_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Refresh a service token — cloudflare.access-service-tokens-refresh-a-service-token

Run Refresh a service token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.service_token_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "service_token_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rotate a service token — cloudflare.access-service-tokens-rotate-a-service-token

Run Rotate a service token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.service_token_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Optional
body.previous_client_secret_expires_at string Optional The expiration of the previous client_secret. If not provided, it defaults to the current timestamp in order to immediately expire the previous secret. If the service token was reported as leaked, this must not be in the future; the leaked secret is discarded immediately. format: "date-time"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "service_token_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tags — cloudflare.access-tags-list-tags

Run List tags with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 50; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a tag — cloudflare.access-tags-create-tag

Run Create a tag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Optional
body.name — Optional $ref: "#/definitions/access_name-13"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a tag — cloudflare.access-tags-delete-a-tag

Run Delete a tag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.tag_name — Required $ref: "#/definitions/access_name-13"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "tag_name": "engineers"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a tag — cloudflare.access-tags-get-a-tag

Run Get a tag with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.tag_name — Required $ref: "#/definitions/access_name-13"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "tag_name": "engineers"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a tag — cloudflare.access-tags-update-a-tag

Run Update a tag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.tag_name — Required $ref: "#/definitions/access_name-13"
body — Optional $ref: "#/definitions/access_tag_without_app_count"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "tag_name": "engineers"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List user populations — cloudflare.access-user-populations-list-user-populations

Run List user populations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 100; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a user population — cloudflare.access-user-populations-create-user-population

Run Create a user population with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_user_population_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Employees"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a user population — cloudflare.access-user-populations-delete-user-population

Run Delete a user population with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.user_population_id — Required $ref: "#/definitions/access_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_population_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a user population — cloudflare.access-user-populations-get-user-population

Run Get a user population with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.user_population_id — Required $ref: "#/definitions/access_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_population_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a user population — cloudflare.access-user-populations-update-user-population

Run Update a user population with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.user_population_id — Required $ref: "#/definitions/access_uuid"
body — Required $ref: "#/definitions/access_user_population_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_population_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "name": "Employees"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List users in a user population — cloudflare.access-user-populations-list-users

Run List users in a user population with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.user_population_id — Required $ref: "#/definitions/access_uuid"
query object Optional additionalProperties: false
query.filter string Optional A SCIM filter expression.
query.startIndex integer Optional The 1-based index of the first result to return. default: 1; minimum: 1
query.count integer Optional The maximum number of results to return. minimum: 0
query.attributes string Optional Comma-separated SCIM attributes to return.
query.excludedAttributes string Optional Comma-separated SCIM attributes to exclude from the response.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_population_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a user population user — cloudflare.access-user-populations-create-user

Run Create a user population user with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.user_population_id — Required $ref: "#/definitions/access_uuid"
body — Required $ref: "#/definitions/access_scim_user"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_population_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a user population user — cloudflare.access-user-populations-delete-user

Run Delete a user population user with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.user_population_id — Required $ref: "#/definitions/access_uuid"
path.user_id string Required The SCIM user identifier.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_population_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "user_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a user population user — cloudflare.access-user-populations-get-user

Run Get a user population user with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.user_population_id — Required $ref: "#/definitions/access_uuid"
path.user_id string Required The SCIM user identifier.
query object Optional additionalProperties: false
query.attributes string Optional Comma-separated SCIM attributes to return.
query.excludedAttributes string Optional Comma-separated SCIM attributes to exclude from the response.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_population_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "user_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a user population user — cloudflare.access-user-populations-update-user

Run Update a user population user with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.user_population_id — Required $ref: "#/definitions/access_uuid"
path.user_id string Required The SCIM user identifier.
body — Required $ref: "#/definitions/access_scim_patch_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_population_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "user_id": "example"
  },
  "body": {
    "Operations": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace a user population user — cloudflare.access-user-populations-replace-user

Run Replace a user population user with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
path.user_population_id — Required $ref: "#/definitions/access_uuid"
path.user_id string Required The SCIM user identifier.
body — Required $ref: "#/definitions/access_scim_user"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_population_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "user_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get users — cloudflare.zero-trust-users-get-users

Run Get users with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
query object Optional additionalProperties: false
query.name string Optional The name of the user.
query.email string Optional The email of the user.
query.search string Optional Search for users by other listed query parameters.
query.page integer Optional Page number of results. default: 1
query.per_page integer Optional Number of results per page. default: 1000; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a user — cloudflare.zero-trust-users-create-user

Run Create a user with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.email — Required $ref: "#/definitions/access_email-2"
body.name — Optional $ref: "#/definitions/access_name-10"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "email": "jdoe@example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a user — cloudflare.zero-trust-users-delete-user

Run Delete a user with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.user_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "user_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a user — cloudflare.zero-trust-users-get-user

Run Get a user with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.user_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "user_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a user — cloudflare.zero-trust-users-update-user

Run Update a user with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.user_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.email — Required $ref: "#/definitions/access_email-2"
body.name — Required $ref: "#/definitions/access_name-10"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "user_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Jane Doe",
    "email": "jdoe@example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get active sessions — cloudflare.zero-trust-users-get-active-sessions

Run Get active sessions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.user_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "user_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get single active session — cloudflare.zero-trust-users-get-active-session

Run Get single active session with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.user_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
path.nonce — Required $ref: "#/definitions/access_nonce"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "user_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "nonce": "X1aXj1lFVcqqyoXF"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get failed logins — cloudflare.zero-trust-users-get-failed-logins

Run Get failed logins with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.user_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "user_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get last seen identity — cloudflare.zero-trust-users-get-last-seen-identity

Run Get last seen identity with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.user_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "user_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a user's authenticator — cloudflare.zero-trust-users-delete-mfa-authenticator

Run Delete a user's authenticator with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.user_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
path.authenticator_id — Required $ref: "#/definitions/access_authenticator_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "user_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "authenticator_id": "test-authenticator-id-123"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a user's passkey — cloudflare.zero-trust-users-delete-passkey

Run Delete a user's passkey with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.user_id — Required $ref: "#/definitions/access_uuid"
path.account_id — Required $ref: "#/definitions/access_identifier"
path.authenticator_id — Required $ref: "#/definitions/access_authenticator_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "user_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "authenticator_id": "test-authenticator-id-123"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Address Maps — cloudflare.ip-address-management-address-maps-list-address-maps

Run List Address Maps with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Address Map — cloudflare.ip-address-management-address-maps-create-address-map

Run Create Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
body object Required
body.description — Optional $ref: "#/definitions/addressing_description-2"
body.enabled — Optional $ref: "#/definitions/addressing_enabled"
body.ips array Optional
body.ips[] — Optional $ref: "#/definitions/addressing_ip_address"
body.memberships — Optional $ref: "#/definitions/addressing_membership_requests"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Address Map — cloudflare.ip-address-management-address-maps-delete-address-map

Run Delete Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Address Map Details — cloudflare.ip-address-management-address-maps-address-map-details

Run Address Map Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Address Map — cloudflare.ip-address-management-address-maps-update-address-map

Run Update Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
body object Required
body.default_sni — Optional $ref: "#/definitions/addressing_default_sni"
body.description — Optional $ref: "#/definitions/addressing_description-2"
body.enabled — Optional $ref: "#/definitions/addressing_enabled"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove an account membership from an Address Map — cloudflare.ip-address-management-address-maps-remove-an-account-membe-50c3d1b2c5

Run Remove an account membership from an Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.member_account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2",
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "member_account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add an account membership to an Address Map — cloudflare.ip-address-management-address-maps-add-an-account-membersh-c09c729fdc

Run Add an account membership to an Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.member_account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2",
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "member_account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove Multiple IPs from an Address Map — cloudflare.ip-address-management-address-maps-remove-multiple-ips-fro-d3aaba0685

Run Remove Multiple IPs from an Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
body object Required
body.ips array Required
body.ips[] — Optional $ref: "#/definitions/addressing_ip_address"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  },
  "body": {
    "ips": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add Multiple IPs to an Address Map — cloudflare.ip-address-management-address-maps-add-multiple-ips-to-an-address-map

Run Add Multiple IPs to an Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
body object Required
body.ips array Required
body.ips[] — Optional $ref: "#/definitions/addressing_ip_address"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  },
  "body": {
    "ips": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove an IP from an Address Map — cloudflare.ip-address-management-address-maps-remove-an-ip-from-an-address-map

Run Remove an IP from an Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ip_address — Required $ref: "#/definitions/addressing_ip_address"
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ip_address": "192.0.2.1",
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add an IP to an Address Map — cloudflare.ip-address-management-address-maps-add-an-ip-to-an-address-map

Run Add an IP to an Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ip_address — Required $ref: "#/definitions/addressing_ip_address"
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ip_address": "192.0.2.1",
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove Multiple Zones from an Address Map — cloudflare.ip-address-management-address-maps-remove-multiple-zones-f-5db05ad215

Run Remove Multiple Zones from an Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
body object Required
body.zones array Required
body.zones[] — Optional $ref: "#/definitions/addressing_zone_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  },
  "body": {
    "zones": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add Multiple Zones to an Address Map — cloudflare.ip-address-management-address-maps-add-multiple-zones-to-a-8db8398e99

Run Add Multiple Zones to an Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
body object Required
body.zones array Required
body.zones[] — Optional $ref: "#/definitions/addressing_zone_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  },
  "body": {
    "zones": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove a zone membership from an Address Map — cloudflare.ip-address-management-address-maps-remove-a-zone-membershi-3d71ec9d92

Run Remove a zone membership from an Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.member_zone_id — Required $ref: "#/definitions/addressing_zone_identifier"
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "member_zone_id": "8ac8489932db6327334c9b6d58544cfe",
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add a zone membership to an Address Map — cloudflare.ip-address-management-address-maps-add-a-zone-membership-t-bd46173fe2

Run Add a zone membership to an Address Map with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.member_zone_id — Required $ref: "#/definitions/addressing_zone_identifier"
path.address_map_id — Required $ref: "#/definitions/addressing_address_map_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "member_zone_id": "8ac8489932db6327334c9b6d58544cfe",
    "address_map_id": "055817b111884e0227e1be16a0be6ee0",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Leases — cloudflare.ip-address-management-list-leases

Run List Leases with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List LOA Documents — cloudflare.ip-address-management-prefixes-list-loa-documents

Run List LOA Documents with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Prefixes — cloudflare.ip-address-management-prefixes-list-prefixes

Run List Prefixes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add Prefix — cloudflare.ip-address-management-prefixes-add-prefix

Run Add Prefix with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
body object Required
body.asn — Required $ref: "#/definitions/addressing_asn"
body.cidr — Required $ref: "#/definitions/addressing_cidr"
body.delegate_loa_creation — Optional $ref: "#/definitions/addressing_delegate_loa_creation"
body.description — Optional $ref: "#/definitions/addressing_description"
body.loa_document_id — Optional $ref: "#/definitions/addressing_loa_document_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  },
  "body": {
    "cidr": "192.0.2.0/24",
    "asn": 13335
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Prefix — cloudflare.ip-address-management-prefixes-delete-prefix

Run Delete Prefix with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Prefix Details — cloudflare.ip-address-management-prefixes-prefix-details

Run Prefix Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Prefix Description — cloudflare.ip-address-management-prefixes-update-prefix-description

Run Update Prefix Description with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
body object Required
body.description — Required $ref: "#/definitions/addressing_description"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  },
  "body": {
    "description": "Internal test prefix"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List BGP Prefixes — cloudflare.ip-address-management-prefixes-list-bgp-prefixes

Run List BGP Prefixes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2",
    "prefix_id": "2af39739cc4e3b5910c918468bb89828"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create BGP Prefix — cloudflare.ip-address-management-prefixes-create-bgp-prefix

Run Create BGP Prefix with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
body — Required $ref: "#/definitions/addressing_bgp_prefix_create"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2",
    "prefix_id": "2af39739cc4e3b5910c918468bb89828"
  },
  "body": {
    "cidr": "192.0.2.0/24"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete BGP Prefix — cloudflare.ip-address-management-prefixes-delete-bgp-prefix

Run Delete BGP Prefix with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.bgp_prefix_id — Required $ref: "#/definitions/addressing_bgp_prefix_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2",
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "bgp_prefix_id": "7009ba364c7a5760798ceb430e603b74"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch BGP Prefix — cloudflare.ip-address-management-prefixes-fetch-bgp-prefix

Run Fetch BGP Prefix with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.bgp_prefix_id — Required $ref: "#/definitions/addressing_bgp_prefix_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2",
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "bgp_prefix_id": "7009ba364c7a5760798ceb430e603b74"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update BGP Prefix — cloudflare.ip-address-management-prefixes-update-bgp-prefix

Run Update BGP Prefix with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.bgp_prefix_id — Required $ref: "#/definitions/addressing_bgp_prefix_identifier"
body — Required $ref: "#/definitions/addressing_bgp_prefix_update_advertisement"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2",
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "bgp_prefix_id": "7009ba364c7a5760798ceb430e603b74"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Service Bindings — cloudflare.ip-address-management-service-bindings-list-service-bindings

Run List Service Bindings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2",
    "prefix_id": "2af39739cc4e3b5910c918468bb89828"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Service Binding — cloudflare.ip-address-management-service-bindings-create-service-binding

Run Create Service Binding with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
body — Optional $ref: "#/definitions/addressing_create_binding_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2",
    "prefix_id": "2af39739cc4e3b5910c918468bb89828"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Service Binding — cloudflare.ip-address-management-service-bindings-delete-service-binding

Run Delete Service Binding with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.binding_id — Required $ref: "#/definitions/addressing_service_binding_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2",
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "binding_id": "0429b49b6a5155297b78e75a44b09e14"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Service Binding — cloudflare.ip-address-management-service-bindings-get-service-binding

Run Get Service Binding with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.binding_id — Required $ref: "#/definitions/addressing_service_binding_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2",
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "binding_id": "0429b49b6a5155297b78e75a44b09e14"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Prefix Delegations — cloudflare.ip-address-management-prefix-delegation-list-prefix-delegations

Run List Prefix Delegations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Prefix Delegation — cloudflare.ip-address-management-prefix-delegation-create-prefix-delegation

Run Create Prefix Delegation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"
body object Required
body.cidr — Required $ref: "#/definitions/addressing_cidr"
body.delegated_account_id — Required $ref: "#/definitions/addressing_delegated_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  },
  "body": {
    "cidr": "192.0.2.0/24",
    "delegated_account_id": "b1946ac92492d2347c6235b4d2611184"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Prefix Delegation — cloudflare.ip-address-management-prefix-delegation-delete-prefix-delegation

Run Delete Prefix Delegation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.delegation_id — Required $ref: "#/definitions/addressing_delegation_identifier"
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "delegation_id": "d933b1530bc56c9953cf8ce166da8004",
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate Prefix — cloudflare.ip-address-management-prefixes-validate-prefix

Run Validate Prefix with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.prefix_id — Required $ref: "#/definitions/addressing_prefix_identifier"
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "prefix_id": "2af39739cc4e3b5910c918468bb89828",
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Regions — cloudflare.dls-account-regional-hostnames-list-regions

Run List Regions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dls_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Services — cloudflare.ip-address-management-service-bindings-list-services

Run List Services with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/addressing_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "258def64c72dae45f3e4c8516e2111f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get credit balance — cloudflare.aig-billing-get-credit-balance

Run Get credit balance with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get invoice history — cloudflare.aig-billing-get-invoice-history

Run Get invoice history with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
query object Optional additionalProperties: false
query.type string Optional Filter invoice type: auto, manual, or all. enum: ["auto","all","manual"]; default: "all"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get invoice preview — cloudflare.aig-billing-get-invoice-preview

Run Get invoice preview with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete spending limit (deprecated) — cloudflare.aig-billing-delete-spending-limit

Run Delete spending limit (deprecated) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get spending limit (deprecated) — cloudflare.aig-billing-get-spending-limit

Run Get spending limit (deprecated) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a top-up — cloudflare.aig-billing-create-topup

Run Create a top-up with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body object Required additionalProperties: false
body.amount integer Required Top-up amount in cents (min 1000). minimum: 1000
body.payment_method_id string Optional Payment method to charge instead of the customer's default payment method.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "amount": 5000
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete auto top-up configuration — cloudflare.aig-billing-delete-topup-config

Run Delete auto top-up configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get auto top-up configuration — cloudflare.aig-billing-get-topup-config

Run Get auto top-up configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set auto top-up configuration — cloudflare.aig-billing-set-topup-config

Run Set auto top-up configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body — Required
body object Required anyOf[1]; additionalProperties: false
body.amount integer Required Auto top-up amount in cents (min 1000). anyOf[1]; minimum: 1000
body.threshold integer Required Balance threshold in cents that triggers auto top-up (min 500). anyOf[1]; minimum: 500
body object Required anyOf[2]; additionalProperties: false
body.amount integer Required Auto top-up amount in cents (min 1000). anyOf[2]; minimum: 1000
body.consent_version string Required Version of the off-session auto-top-up consent accepted by the user. anyOf[2]; minLength: 1; maxLength: 100
body.payment_method_id string Required Card to authenticate for future automatic top-ups. anyOf[2]
body.setup_idempotency_key string Required Client-generated UUID that makes payment-method setup safe to retry. anyOf[2]; format: "uuid"
body.setup_intent_id string Optional Successfully confirmed payment-method setup identifier. anyOf[2]
body.threshold integer Required Balance threshold in cents that triggers auto top-up (min 500). anyOf[2]; minimum: 500

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "threshold": 500,
    "amount": 5000
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top-up eligibility — cloudflare.aig-billing-topup-eligibility

Run Get top-up eligibility with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body object Optional
body.payment_methods array Optional Account-level payment methods, forwarded by the dashboard. maxItems: 100
body.payment_methods[] object Optional
body.payment_methods[].default boolean Optional Whether this is the account default payment method.
body.payment_methods[].last_four string Optional Last 4 digits, for display copy only.
body.payment_methods[].type string Optional Payment-method type. Absent or unrecognized is treated as non-card (does not error). Known values: PAYPAL, CREDIT_CARD, APPLE_PAY, GOOGLE_PAY, ACH_DIRECT_DEBIT, SEPA_DEBIT, CASHAPP, LINK, CRYPTO.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account top-up limits — cloudflare.aig-billing-get-topup-limits

Run Get account top-up limits with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check top-up status — cloudflare.aig-billing-check-topup-status

Run Check top-up status with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body object Required additionalProperties: false
body.payment_intent_id string Required Top-up identifier to check status for.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "payment_intent_id": "in_1abc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get usage history — cloudflare.aig-billing-get-usage-history

Run Get usage history with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
query object Required additionalProperties: false
query.value_grouping_window string Required Grouping window for usage data. enum: ["day","hour"]
query.start_time number | null Optional Start time as Unix timestamp in milliseconds.
query.end_time number | null Optional End time as Unix timestamp in milliseconds.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "value_grouping_window": "day"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List custom providers — cloudflare.aig-config-list-account-provider

Run List custom providers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 100
query.beta boolean Optional
query.enable boolean Optional
query.search string Optional Search by id, name, slug

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a custom provider — cloudflare.aig-config-create-account-provider

Run Create a custom provider with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Optional
body.base_url string Required format: "uri"
body.beta boolean Optional
body.curl_example string Optional
body.description string Optional
body.enable boolean Optional
body.headers string Optional JSON object of extra HTTP headers that AI Gateway sends to the provider. Values can contain credentials. maxLength: 8192
body.js_example string Optional
body.link string Optional
body.name string Required
body.position integer Optional
body.slug string Required pattern: "^[a-zA-Z0-9_-]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List custom provider pricing rules — cloudflare.aig-config-list-account-provider-cost

Run List custom provider pricing rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 100
query.enable boolean Optional
query.account_provider_id string Optional Only return pricing rules for this custom provider ID. format: "uuid"
query.model_rule string Optional enum: ["equals","starts-with","contains"]; default: "equals"
query.cost_type string Optional default: "tokens"
query.search string Optional Search by model, changed_by

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a custom provider pricing rule — cloudflare.aig-config-create-account-provider-cost

Run Create a custom provider pricing rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Optional
body.account_provider_id string Required ID of the custom provider that the pricing rule applies to. format: "uuid"
body.cost_in number Optional
body.cost_out number Optional
body.cost_type string Optional default: "tokens"
body.enable boolean Optional
body.model string Required
body.model_rule string Optional enum: ["equals","starts-with","contains"]; default: "equals"
body.token_pricing object Optional
body.token_pricing.input_audio_tokens number Optional
body.token_pricing.input_cache_creation_tokens number Optional
body.token_pricing.input_cached_tokens number Optional
body.token_pricing.input_image_count number Optional
body.token_pricing.input_image_tokens number Optional
body.token_pricing.input_text_tokens number Optional
body.token_pricing.input_tokens number Optional
body.token_pricing.input_video_tokens number Optional
body.token_pricing.output_image_count number Optional
body.token_pricing.output_reasoning_tokens number Optional
body.token_pricing.output_tokens number Optional
body.token_pricing.total_tokens number Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a custom provider pricing rule — cloudflare.aig-config-delete-account-provider-cost

Run Delete a custom provider pricing rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a custom provider pricing rule — cloudflare.aig-config-fetch-account-provider-cost

Run Get a custom provider pricing rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a custom provider pricing rule — cloudflare.aig-config-update-account-provider-cost

Run Update a custom provider pricing rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required format: "uuid"
body object Optional
body.cost_in number Optional
body.cost_out number Optional
body.cost_type string Optional default: "tokens"
body.enable boolean Optional
body.model string Optional
body.model_rule string Optional enum: ["equals","starts-with","contains"]; default: "equals"
body.token_pricing object Optional
body.token_pricing.input_audio_tokens number Optional
body.token_pricing.input_cache_creation_tokens number Optional
body.token_pricing.input_cached_tokens number Optional
body.token_pricing.input_image_count number Optional
body.token_pricing.input_image_tokens number Optional
body.token_pricing.input_text_tokens number Optional
body.token_pricing.input_tokens number Optional
body.token_pricing.input_video_tokens number Optional
body.token_pricing.output_image_count number Optional
body.token_pricing.output_reasoning_tokens number Optional
body.token_pricing.output_tokens number Optional
body.token_pricing.total_tokens number Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a custom provider — cloudflare.aig-config-delete-account-provider

Run Delete a custom provider with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a custom provider — cloudflare.aig-config-fetch-account-provider

Run Get a custom provider with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a custom provider — cloudflare.aig-config-update-account-provider

Run Update a custom provider with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required format: "uuid"
body object Optional
body.base_url string Optional format: "uri"
body.beta boolean Optional
body.curl_example string Optional
body.description string Optional
body.enable boolean Optional
body.headers string Optional JSON object of extra HTTP headers that AI Gateway sends to the provider. Values can contain credentials. maxLength: 8192
body.js_example string Optional
body.link string Optional
body.logo string Optional
body.name string Optional
body.position integer Optional
body.slug string Optional pattern: "^[a-zA-Z0-9_-]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List evaluator types (deprecated) — cloudflare.aig-config-list-evaluators

Run List evaluator types (deprecated) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 5; maximum: 50
query.order_by string Optional default: "mandatory"
query.order_by_direction string Optional enum: ["asc","desc"]; default: "desc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List gateways — cloudflare.aig-config-list-gateway

Run List gateways with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 100
query.search string Optional Search by id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a gateway — cloudflare.aig-config-create-gateway

Run Create a gateway with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Optional
body.authentication boolean Optional Require authentication for gateway access. New gateways must have authentication enabled. Once enabled, authentication cannot be disabled.
body.byok_only boolean Optional Requires customer-provided provider credentials and prevents fallback to Unified Billing.
body.cache_invalidate_on_update boolean Required
body.cache_ttl integer | null Required minimum: 0
body.collect_logs boolean Required
body.dlp — Optional
body.dlp object Optional anyOf[1]
body.dlp.action string Required anyOf[1]; enum: ["BLOCK","FLAG"]
body.dlp.enabled boolean Required anyOf[1]
body.dlp.profiles array Required anyOf[1]
body.dlp.profiles[] string Optional anyOf[1]
body.dlp object Optional anyOf[2]
body.dlp.enabled boolean Required anyOf[2]
body.dlp.policies array Required anyOf[2]
body.dlp.policies[] object Optional anyOf[2]
body.dlp.policies[].action string Required anyOf[2]; enum: ["FLAG","BLOCK"]
body.dlp.policies[].check array Required anyOf[2]
body.dlp.policies[].check[] string Optional anyOf[2]; enum: ["REQUEST","RESPONSE"]
body.dlp.policies[].enabled boolean Required anyOf[2]
body.dlp.policies[].id string Required anyOf[2]
body.dlp.policies[].profiles array Required anyOf[2]
body.dlp.policies[].profiles[] string Optional anyOf[2]
body.guardrails object | null Optional
body.guardrails.prompt object Required
body.guardrails.prompt.P1 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S1 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S10 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S11 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S12 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S13 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S14 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S2 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S3 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S4 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S5 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S6 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S7 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S8 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S9 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response object Required
body.guardrails.response.P1 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S1 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S10 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S11 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S12 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S13 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S14 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S2 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S3 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S4 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S5 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S6 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S7 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S8 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S9 string Optional enum: ["FLAG","BLOCK"]
body.id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
body.log_classification boolean Optional
body.log_management integer | null Optional minimum: 10000; maximum: 10000000
body.log_management_strategy string | null Optional enum: ["STOP_INSERTING","DELETE_OLDEST"]
body.logpush boolean Optional
body.logpush_public_key string | null Optional minLength: 16; maxLength: 1024
body.otel array | null Optional maxItems: 5
body.otel[] object Optional
body.otel[].authorization string Optional maxLength: 256
body.otel[].content_type string Optional enum: ["json","protobuf"]; default: "json"
body.otel[].headers object Required additionalProperties: {"maxLength":4096,"type":"string"}
body.otel[].url string Required maxLength: 2048; format: "uri"
body.rate_limiting_interval integer | null Required minimum: 0
body.rate_limiting_limit integer | null Required minimum: 0
body.rate_limiting_technique string | null Optional enum: ["fixed","sliding"]
body.retry_backoff string | null Optional Backoff strategy for retry delays enum: ["constant","linear","exponential"]
body.retry_delay integer | null Optional Delay between retry attempts in milliseconds (0-60000) minimum: 0; maximum: 60000
body.retry_max_attempts integer | null Optional Maximum number of retry attempts for failed requests (1-5) minimum: 1; maximum: 5
body.spend_limits object | null Optional
body.spend_limits.enabled boolean Optional default: false
body.spend_limits.rules array Optional default: []; maxItems: 20
body.spend_limits.rules[] object Optional
body.spend_limits.rules[].enabled boolean Optional default: true
body.spend_limits.rules[].id string Optional default: "00000000"; minLength: 1; pattern: "^[a-zA-Z0-9_-]+$"
body.spend_limits.rules[].limit number Required exclusiveMinimum: 0
body.spend_limits.rules[].limitType string Required enum: ["cost"]
body.spend_limits.rules[].metadata object Optional additionalProperties: {"oneOf":[{"properties":{"mode":{"type":"string","enum":["partition"]}},"required":["mode"],"type":"object"},{"properties":{"mode":{"type":"string","enum":["filter"]},"values":{"type":"array","items":{"type":"string"}}},"required":["mode","values"],"type":"object"}]}
body.spend_limits.rules[].model object Optional
body.spend_limits.rules[].model.mode string Required enum: ["filter"]
body.spend_limits.rules[].model.values array Required
body.spend_limits.rules[].model.values[] string Optional
body.spend_limits.rules[].provider object Optional
body.spend_limits.rules[].provider.mode string Required enum: ["filter"]
body.spend_limits.rules[].provider.values array Required
body.spend_limits.rules[].provider.values[] string Optional
body.spend_limits.rules[].technique string Optional enum: ["fixed","sliding"]; default: "sliding"
body.spend_limits.rules[].window integer Required exclusiveMinimum: 0
body.store_id string | null Optional Secrets Store used by this gateway. Omit on update to keep the current store. Cannot be cleared while stored keys or secret references depend on it.
body.stripe object | null Optional
body.stripe.authorization string Required
body.stripe.usage_events array Required
body.stripe.usage_events[] object Optional
body.stripe.usage_events[].payload string Required
body.workers_ai_billing_mode string Optional Controls how Workers AI inference calls routed through this gateway are billed. 'postpaid' bills the account directly through Workers AI; 'unified' deducts credits via AI Gateway using neuron-based pricing and delegates billing to AI Gateway. enum: ["postpaid","unified"]; default: "postpaid"
body.zdr boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List custom domains — cloudflare.aig-config-list-custom-domain

Run List custom domains with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 100
query.status string Optional enum: ["initializing","pending_dcv","active","blocked","error"]
query.search string Optional Search by hostname

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a custom domain for a gateway — cloudflare.aig-config-create-custom-domain

Run Create a custom domain for a gateway with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
body object Optional
body.domain string Required Custom hostname that you own, such as ai.example.com. minLength: 1; maxLength: 253; pattern: "^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)+$"
body.minTLS string Optional enum: ["1.0","1.1","1.2","1.3"]
body.zone_id string Required ID of the Cloudflare zone that contains the custom hostname. pattern: "^[0-9a-f]{32}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a custom domain — cloudflare.aig-config-delete-custom-domain

Run Delete a custom domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.hostname string Required Custom hostname that you own, such as ai.example.com. minLength: 1; maxLength: 253; pattern: "^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway",
    "hostname": "ai.acme.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a custom domain — cloudflare.aig-config-fetch-custom-domain

Run Get a custom domain with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.hostname string Required Custom hostname that you own, such as ai.example.com. minLength: 1; maxLength: 253; pattern: "^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway",
    "hostname": "ai.acme.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List datasets (deprecated) — cloudflare.aig-config-list-dataset

Run List datasets (deprecated) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 100
query.name string Optional
query.enable boolean Optional
query.search string Optional Search by id, name, filters

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a dataset (deprecated) — cloudflare.aig-config-create-dataset

Run Create a dataset (deprecated) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
body object Optional
body.enable boolean Required
body.filters array Required
body.filters[] object Optional
body.filters[].key string Required enum: ["created_at","request_content_type","response_content_type","success","cached","provider","model","cost","tokens","tokens_in","tokens_out","duration","feedback"]
body.filters[].operator string Required enum: ["eq","contains","lt","gt"]
body.filters[].value array Required
body.filters[].value[] — Optional
body.filters[].value[] string Optional anyOf[1]
body.filters[].value[] number Optional anyOf[2]
body.filters[].value[] boolean Optional anyOf[3]
body.name string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "gateway_id": "my-gateway",
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a dataset (deprecated) — cloudflare.aig-config-delete-dataset

Run Delete a dataset (deprecated) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a dataset (deprecated) — cloudflare.aig-config-fetch-dataset

Run Get a dataset (deprecated) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a dataset (deprecated) — cloudflare.aig-config-update-dataset

Run Update a dataset (deprecated) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.id string Required
body object Optional
body.enable boolean Required
body.filters array Required
body.filters[] object Optional
body.filters[].key string Required enum: ["created_at","request_content_type","response_content_type","success","cached","provider","model","cost","tokens","tokens_in","tokens_out","duration","feedback"]
body.filters[].operator string Required enum: ["eq","contains","lt","gt"]
body.filters[].value array Required
body.filters[].value[] — Optional
body.filters[].value[] string Optional anyOf[1]
body.filters[].value[] number Optional anyOf[2]
body.filters[].value[] boolean Optional anyOf[3]
body.name string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List evaluations (deprecated) — cloudflare.aig-config-list-evaluations

Run List evaluations (deprecated) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 100
query.name string Optional
query.processed boolean Optional
query.search string Optional Search by id, name

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an evaluation (deprecated) — cloudflare.aig-config-create-evaluations

Run Create an evaluation (deprecated) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
body object Optional
body.dataset_ids array Required minItems: 1; maxItems: 5
body.dataset_ids[] string Optional
body.evaluation_type_ids array Required
body.evaluation_type_ids[] string Optional
body.name string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "gateway_id": "my-gateway",
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an evaluation (deprecated) — cloudflare.aig-config-delete-evaluations

Run Delete an evaluation (deprecated) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an evaluation (deprecated) — cloudflare.aig-config-fetch-evaluations

Run Get an evaluation (deprecated) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Gateway Logs — cloudflare.aig-config-delete-gateway-logs

Run Delete Gateway Logs with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
query object Optional additionalProperties: false
query.order_by string Optional enum: ["created_at","provider","model","model_type","success","cached","cost","tokens_in","tokens_out","duration","feedback"]; default: "created_at"
query.order_by_direction string Optional enum: ["asc","desc"]; default: "asc"
query.filters array Optional
query.filters[] object Optional
query.filters[].key string Required enum: ["id","created_at","request_content_type","response_content_type","request_type","success","cached","provider","model","model_type","cost","tokens","tokens_in","tokens_out","duration","feedback","event_id","metadata.key","metadata.value","authentication","wholesale","compatibilityMode","dlp_action","user_agent"]
query.filters[].operator string Required enum: ["eq","neq","contains","lt","gt"]
query.filters[].value array Required Filter values.
query.filters[].value[] — Optional
query.filters[].value[] string | null Optional anyOf[1]
query.filters[].value[] number Optional anyOf[2]
query.filters[].value[] boolean Optional anyOf[3]
query.limit integer Optional default: 10000; minimum: 1; maximum: 10000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "my-gateway"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Gateway Logs — cloudflare.aig-config-list-gateway-logs

Run List Gateway Logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
query object Optional additionalProperties: false
query.search string Optional Free-text search over log metadata.
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 50
query.order_by string Optional enum: ["created_at","provider","model","model_type","success","cached"]; default: "created_at"
query.order_by_direction string Optional enum: ["asc","desc"]; default: "desc"
query.filters array Optional
query.filters[] object Optional
query.filters[].key string Required enum: ["id","created_at","request_content_type","response_content_type","request_type","success","cached","provider","model","model_type","cost","tokens","tokens_in","tokens_out","duration","feedback","event_id","metadata.key","metadata.value","authentication","wholesale","compatibilityMode","dlp_action","user_agent"]
query.filters[].operator string Required enum: ["eq","neq","contains","lt","gt"]
query.filters[].value array Required Filter values.
query.filters[].value[] — Optional
query.filters[].value[] string | null Optional anyOf[1]
query.filters[].value[] number Optional anyOf[2]
query.filters[].value[] boolean Optional anyOf[3]
query.meta_info boolean Optional
query.direction string Optional enum: ["asc","desc"]
query.start_date string Optional format: "date-time"
query.end_date string Optional format: "date-time"
query.min_cost number Optional
query.max_cost number Optional
query.min_tokens_in number Optional
query.max_tokens_in number Optional
query.min_tokens_out number Optional
query.max_tokens_out number Optional
query.min_total_tokens number Optional
query.max_total_tokens number Optional
query.min_duration number Optional
query.max_duration number Optional
query.feedback — Optional
query.feedback number Optional anyOf[1]; enum: [-1]
query.feedback number Optional anyOf[2]; enum: [0]
query.feedback number Optional anyOf[3]; enum: [1]
query.success boolean Optional
query.cached boolean Optional
query.model string Optional Model filter.
query.model_type string Optional
query.provider string Optional
query.request_content_type string Optional
query.response_content_type string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "my-gateway"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Gateway Log Detail — cloudflare.aig-config-get-gateway-log-detail

Run Get Gateway Log Detail with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "example",
    "gateway_id": "my-gateway",
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Gateway Log — cloudflare.aig-config-patch-gateway-log

Run Patch Gateway Log with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
body object Optional
body.feedback number | null Optional minimum: -1; maximum: 1
body.metadata object | null Optional additionalProperties: {"anyOf":[{"type":"string"},{"type":"number"},{"type":"boolean"}]}
body.score number | null Optional minimum: 0; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "example",
    "gateway_id": "my-gateway",
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Gateway Log Request — cloudflare.aig-config-get-gateway-log-request

Run Get Gateway Log Request with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "example",
    "gateway_id": "my-gateway",
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Gateway Log Response — cloudflare.aig-config-get-gateway-log-response

Run Get Gateway Log Response with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "example",
    "gateway_id": "my-gateway",
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List provider keys — cloudflare.aig-config-list-providers

Run List provider keys with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Store a provider key — cloudflare.aig-config-create-providers

Run Store a provider key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
body object Optional
body.alias string Required
body.default_config boolean Required
body.provider_slug string Required
body.rate_limit number Optional
body.rate_limit_period number Optional default: 60
body.secret string Optional Provider API key to store in the Secrets Store configured on the gateway.
body.secret_id string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a provider key — cloudflare.aig-config-delete-providers

Run Delete a provider key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a provider key — cloudflare.aig-config-fetch-providers

Run Get a provider key with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rotate a provider key — cloudflare.aig-config-update-providers

Run Rotate a provider key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.id string Required
body object Optional
body.secret string Required Provider API key to store in the Secrets Store configured on the gateway.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "gateway_id": "my-gateway",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List dynamic routes — cloudflare.aig-config-list-gateway-dynamic-routes

Run List dynamic routes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required
query object Optional additionalProperties: false
query.page integer Optional Page number
query.per_page integer Optional Number of routes per page

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "54442216"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a dynamic route — cloudflare.aig-config-post-gateway-dynamic-route

Run Create a dynamic route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required
body object Optional
body.elements array Required
body.elements[] — Optional
body.elements[] object Optional oneOf[1]
body.elements[].id string Required oneOf[1]
body.elements[].outputs object Required oneOf[1]
body.elements[].outputs.next object Required oneOf[1]
body.elements[].outputs.next.elementId string Required oneOf[1]
body.elements[].type string Required oneOf[1]; enum: ["start"]
body.elements[] object Optional oneOf[2]
body.elements[].id string Required oneOf[2]
body.elements[].outputs object Required oneOf[2]
body.elements[].outputs.false object Required oneOf[2]
body.elements[].outputs.false.elementId string Required oneOf[2]
body.elements[].outputs.true object Required oneOf[2]
body.elements[].outputs.true.elementId string Required oneOf[2]
body.elements[].properties object Required oneOf[2]
body.elements[].properties.conditions object Optional oneOf[2]
body.elements[].type string Required oneOf[2]; enum: ["conditional"]
body.elements[] object Optional oneOf[3]
body.elements[].id string Required oneOf[3]
body.elements[].outputs object Required oneOf[3]; additionalProperties: {"properties":{"elementId":{"type":"string"}},"required":["elementId"],"type":"object"}
body.elements[].type string Required oneOf[3]; enum: ["percentage"]
body.elements[] object Optional oneOf[4]
body.elements[].id string Required oneOf[4]
body.elements[].outputs object Required oneOf[4]
body.elements[].outputs.fallback object Required oneOf[4]
body.elements[].outputs.fallback.elementId string Required oneOf[4]
body.elements[].outputs.success object Required oneOf[4]
body.elements[].outputs.success.elementId string Required oneOf[4]
body.elements[].properties object Required oneOf[4]
body.elements[].properties.key string Required oneOf[4]
body.elements[].properties.limit number Required oneOf[4]
body.elements[].properties.limitType string Required oneOf[4]; enum: ["count","cost"]
body.elements[].properties.window number Required oneOf[4]
body.elements[].type string Required oneOf[4]; enum: ["rate"]
body.elements[] object Optional oneOf[5]
body.elements[].id string Required oneOf[5]
body.elements[].outputs object Required oneOf[5]
body.elements[].outputs.fallback object Required oneOf[5]
body.elements[].outputs.fallback.elementId string Required oneOf[5]
body.elements[].outputs.success object Required oneOf[5]
body.elements[].outputs.success.elementId string Required oneOf[5]
body.elements[].properties object Required oneOf[5]
body.elements[].properties.model string Required oneOf[5]
body.elements[].properties.provider string Required oneOf[5]
body.elements[].properties.retries number Required oneOf[5]
body.elements[].properties.timeout number Required oneOf[5]
body.elements[].type string Required oneOf[5]; enum: ["model"]
body.elements[] object Optional oneOf[6]
body.elements[].id string Required oneOf[6]
body.elements[].outputs object Required oneOf[6]; additionalProperties: {"properties":{"elementId":{"type":"string"}},"required":["elementId"],"type":"object"}
body.elements[].type string Required oneOf[6]; enum: ["end"]
body.name string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "54442216"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a dynamic route — cloudflare.aig-config-delete-gateway-dynamic-route

Run Delete a dynamic route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required
path.id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "54442216",
    "id": "54442216"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a dynamic route — cloudflare.aig-config-get-gateway-dynamic-route

Run Get a dynamic route with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required
path.id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "54442216",
    "id": "54442216"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rename a dynamic route — cloudflare.aig-config-update-gateway-dynamic-route

Run Rename a dynamic route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required
path.id string Required
body object Optional
body.name string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "54442216",
    "id": "54442216"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List dynamic route deployments — cloudflare.aig-config-list-gateway-dynamic-route-deployments

Run List dynamic route deployments with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required
path.id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "54442216",
    "id": "54442216"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Deploy a dynamic route version — cloudflare.aig-config-post-gateway-dynamic-route-deployment

Run Deploy a dynamic route version with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required
path.id string Required
body object Optional
body.version_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "54442216",
    "id": "54442216"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List dynamic route versions — cloudflare.aig-config-list-gateway-dynamic-route-versions

Run List dynamic route versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required
path.id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "54442216",
    "id": "54442216"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a dynamic route version — cloudflare.aig-config-post-gateway-dynamic-route-version

Run Create a dynamic route version with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required
path.id string Required
body object Optional
body.elements array Required
body.elements[] — Optional
body.elements[] object Optional oneOf[1]
body.elements[].id string Required oneOf[1]
body.elements[].outputs object Required oneOf[1]
body.elements[].outputs.next object Required oneOf[1]
body.elements[].outputs.next.elementId string Required oneOf[1]
body.elements[].type string Required oneOf[1]; enum: ["start"]
body.elements[] object Optional oneOf[2]
body.elements[].id string Required oneOf[2]
body.elements[].outputs object Required oneOf[2]
body.elements[].outputs.false object Required oneOf[2]
body.elements[].outputs.false.elementId string Required oneOf[2]
body.elements[].outputs.true object Required oneOf[2]
body.elements[].outputs.true.elementId string Required oneOf[2]
body.elements[].properties object Required oneOf[2]
body.elements[].properties.conditions object Optional oneOf[2]
body.elements[].type string Required oneOf[2]; enum: ["conditional"]
body.elements[] object Optional oneOf[3]
body.elements[].id string Required oneOf[3]
body.elements[].outputs object Required oneOf[3]; additionalProperties: {"properties":{"elementId":{"type":"string"}},"required":["elementId"],"type":"object"}
body.elements[].type string Required oneOf[3]; enum: ["percentage"]
body.elements[] object Optional oneOf[4]
body.elements[].id string Required oneOf[4]
body.elements[].outputs object Required oneOf[4]
body.elements[].outputs.fallback object Required oneOf[4]
body.elements[].outputs.fallback.elementId string Required oneOf[4]
body.elements[].outputs.success object Required oneOf[4]
body.elements[].outputs.success.elementId string Required oneOf[4]
body.elements[].properties object Required oneOf[4]
body.elements[].properties.key string Required oneOf[4]
body.elements[].properties.limit number Required oneOf[4]
body.elements[].properties.limitType string Required oneOf[4]; enum: ["count","cost"]
body.elements[].properties.window number Required oneOf[4]
body.elements[].type string Required oneOf[4]; enum: ["rate"]
body.elements[] object Optional oneOf[5]
body.elements[].id string Required oneOf[5]
body.elements[].outputs object Required oneOf[5]
body.elements[].outputs.fallback object Required oneOf[5]
body.elements[].outputs.fallback.elementId string Required oneOf[5]
body.elements[].outputs.success object Required oneOf[5]
body.elements[].outputs.success.elementId string Required oneOf[5]
body.elements[].properties object Required oneOf[5]
body.elements[].properties.model string Required oneOf[5]
body.elements[].properties.provider string Required oneOf[5]
body.elements[].properties.retries number Required oneOf[5]
body.elements[].properties.timeout number Required oneOf[5]
body.elements[].type string Required oneOf[5]; enum: ["model"]
body.elements[] object Optional oneOf[6]
body.elements[].id string Required oneOf[6]
body.elements[].outputs object Required oneOf[6]; additionalProperties: {"properties":{"elementId":{"type":"string"}},"required":["elementId"],"type":"object"}
body.elements[].type string Required oneOf[6]; enum: ["end"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "54442216",
    "id": "54442216"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a dynamic route version — cloudflare.aig-config-get-gateway-dynamic-route-version

Run Get a dynamic route version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.gateway_id string Required
path.id string Required
path.version_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "gateway_id": "54442216",
    "id": "54442216",
    "version_id": "54442216"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Gateway URL — cloudflare.aig-config-get-gateway-url

Run Get Gateway URL with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.gateway_id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
path.provider string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "gateway_id": "my-gateway",
    "account_id": "0d37909e38d3e99c29fa2cd343ac421a",
    "provider": "workers-ai"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a gateway — cloudflare.aig-config-delete-gateway

Run Delete a gateway with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "id": "my-gateway"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a gateway — cloudflare.aig-config-fetch-gateway

Run Get a gateway with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "id": "my-gateway"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a gateway — cloudflare.aig-config-update-gateway

Run Update a gateway with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required Unique identifier of the AI Gateway within the account. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
body object Optional
body.authentication boolean Optional Require authentication for gateway access. New gateways must have authentication enabled. Once enabled, authentication cannot be disabled.
body.byok_only boolean Optional Requires customer-provided provider credentials and prevents fallback to Unified Billing.
body.cache_invalidate_on_update boolean Required
body.cache_ttl integer | null Required minimum: 0
body.collect_logs boolean Required
body.dlp — Optional
body.dlp object Optional anyOf[1]
body.dlp.action string Required anyOf[1]; enum: ["BLOCK","FLAG"]
body.dlp.enabled boolean Required anyOf[1]
body.dlp.profiles array Required anyOf[1]
body.dlp.profiles[] string Optional anyOf[1]
body.dlp object Optional anyOf[2]
body.dlp.enabled boolean Required anyOf[2]
body.dlp.policies array Required anyOf[2]
body.dlp.policies[] object Optional anyOf[2]
body.dlp.policies[].action string Required anyOf[2]; enum: ["FLAG","BLOCK"]
body.dlp.policies[].check array Required anyOf[2]
body.dlp.policies[].check[] string Optional anyOf[2]; enum: ["REQUEST","RESPONSE"]
body.dlp.policies[].enabled boolean Required anyOf[2]
body.dlp.policies[].id string Required anyOf[2]
body.dlp.policies[].profiles array Required anyOf[2]
body.dlp.policies[].profiles[] string Optional anyOf[2]
body.guardrails object | null Optional
body.guardrails.prompt object Required
body.guardrails.prompt.P1 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S1 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S10 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S11 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S12 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S13 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S14 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S2 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S3 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S4 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S5 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S6 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S7 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S8 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.prompt.S9 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response object Required
body.guardrails.response.P1 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S1 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S10 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S11 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S12 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S13 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S14 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S2 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S3 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S4 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S5 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S6 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S7 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S8 string Optional enum: ["FLAG","BLOCK"]
body.guardrails.response.S9 string Optional enum: ["FLAG","BLOCK"]
body.log_classification boolean Optional
body.log_management integer | null Optional minimum: 10000; maximum: 10000000
body.log_management_strategy string | null Optional enum: ["STOP_INSERTING","DELETE_OLDEST"]
body.logpush boolean Optional
body.logpush_public_key string | null Optional minLength: 16; maxLength: 1024
body.otel array | null Optional maxItems: 5
body.otel[] object Optional
body.otel[].authorization string Optional maxLength: 256
body.otel[].content_type string Optional enum: ["json","protobuf"]; default: "json"
body.otel[].headers object Required additionalProperties: {"maxLength":4096,"type":"string"}
body.otel[].url string Required maxLength: 2048; format: "uri"
body.rate_limiting_interval integer | null Required minimum: 0
body.rate_limiting_limit integer | null Required minimum: 0
body.rate_limiting_technique string | null Optional enum: ["fixed","sliding"]
body.retry_backoff string | null Optional Backoff strategy for retry delays enum: ["constant","linear","exponential"]
body.retry_delay integer | null Optional Delay between retry attempts in milliseconds (0-60000) minimum: 0; maximum: 60000
body.retry_max_attempts integer | null Optional Maximum number of retry attempts for failed requests (1-5) minimum: 1; maximum: 5
body.spend_limits object | null Optional
body.spend_limits.enabled boolean Optional default: false
body.spend_limits.rules array Optional default: []; maxItems: 20
body.spend_limits.rules[] object Optional
body.spend_limits.rules[].enabled boolean Optional default: true
body.spend_limits.rules[].id string Optional default: "00000000"; minLength: 1; pattern: "^[a-zA-Z0-9_-]+$"
body.spend_limits.rules[].limit number Required exclusiveMinimum: 0
body.spend_limits.rules[].limitType string Required enum: ["cost"]
body.spend_limits.rules[].metadata object Optional additionalProperties: {"oneOf":[{"properties":{"mode":{"type":"string","enum":["partition"]}},"required":["mode"],"type":"object"},{"properties":{"mode":{"type":"string","enum":["filter"]},"values":{"type":"array","items":{"type":"string"}}},"required":["mode","values"],"type":"object"}]}
body.spend_limits.rules[].model object Optional
body.spend_limits.rules[].model.mode string Required enum: ["filter"]
body.spend_limits.rules[].model.values array Required
body.spend_limits.rules[].model.values[] string Optional
body.spend_limits.rules[].provider object Optional
body.spend_limits.rules[].provider.mode string Required enum: ["filter"]
body.spend_limits.rules[].provider.values array Required
body.spend_limits.rules[].provider.values[] string Optional
body.spend_limits.rules[].technique string Optional enum: ["fixed","sliding"]; default: "sliding"
body.spend_limits.rules[].window integer Required exclusiveMinimum: 0
body.store_id string | null Optional Secrets Store used by this gateway. Omit on update to keep the current store. Cannot be cleared while stored keys or secret references depend on it.
body.stripe object | null Optional
body.stripe.authorization string Required
body.stripe.usage_events array Required
body.stripe.usage_events[] object Optional
body.stripe.usage_events[].payload string Required
body.workers_ai_billing_mode string Optional Controls how Workers AI inference calls routed through this gateway are billed. 'postpaid' bills the account directly through Workers AI; 'unified' deducts credits via AI Gateway using neuron-based pricing and delegates billing to AI Gateway. enum: ["postpaid","unified"]; default: "postpaid"
body.zdr boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "3ebbcb006d4d46d7bb6a8c7f14676cb0",
    "id": "my-gateway"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AI Gateway logging state — cloudflare.aig-config-get-logging-state

Run Get AI Gateway logging state with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Migrate AI Gateway logging to Workers Observability — cloudflare.aig-config-patch-logging-state

Run Migrate AI Gateway logging to Workers Observability with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List namespaces — cloudflare.ai-search-list-namespaces

Run List namespaces with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional Page number (1-indexed). default: 1; minimum: 1
query.per_page integer Optional Number of results per page. default: 20; minimum: 1; maximum: 100
query.search string Optional Filter namespaces whose name or description contains this string (case-insensitive). maxLength: 256

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a namespace — cloudflare.ai-search-create-namespace

Run Create a namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Optional
body.description string | null Optional Optional description for the namespace. Max 256 characters. maxLength: 256
body.name string Required pattern: "^[a-z0-9]([a-z0-9-]{0,26}[a-z0-9])?$"
body.public_endpoint_params object Optional
body.public_endpoint_params.authorized_hosts array Optional
body.public_endpoint_params.authorized_hosts[] string Optional
body.public_endpoint_params.chat_completions_endpoint object Optional
body.public_endpoint_params.chat_completions_endpoint.disabled boolean Optional Disable chat completions endpoint for this public endpoint. default: false
body.public_endpoint_params.custom_domains array | null Optional Custom domain hostnames that alias this public endpoint. GET and create responses return the current set; on update (PUT) this field is only echoed back when supplied in the request body, otherwise it is null (omit it to leave domains unchanged). maxItems: 1
body.public_endpoint_params.custom_domains[] string Optional Custom domain hostname. Must belong to a Verified zone on this account. minLength: 1; maxLength: 253
body.public_endpoint_params.default_domain_enabled boolean Optional When false, the instance is reachable only via a registered custom domain and the default <public_endpoint_id>.search.ai.cloudflare.com host returns 404. Requires at least one custom domain. Defaults to true. public_endpoint_params is replaced wholesale on update, so resend default_domain_enabled on every update to keep the default host off — omitting it resets to true. default: true
body.public_endpoint_params.enabled boolean Optional default: false
body.public_endpoint_params.instances_allowed array Optional Instance IDs exposed through the namespace public endpoint. Empty means nothing is searchable. Every ID must reference an existing instance in this namespace, and the list must stay within the account's multi-instance search limit. default: []; maxItems: 10
body.public_endpoint_params.instances_allowed[] string Optional AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
body.public_endpoint_params.mcp object Optional
body.public_endpoint_params.mcp.description string Optional default: "Finds exactly what you're looking for"
body.public_endpoint_params.mcp.disabled boolean Optional Disable MCP endpoint for this public endpoint. default: false
body.public_endpoint_params.rate_limit object Optional
body.public_endpoint_params.rate_limit.period_ms integer Optional minimum: 60000; maximum: 3600000
body.public_endpoint_params.rate_limit.requests integer Optional minimum: 1
body.public_endpoint_params.rate_limit.technique string Optional enum: ["fixed","sliding"]
body.public_endpoint_params.search_endpoint object Optional
body.public_endpoint_params.search_endpoint.disabled boolean Optional Disable search endpoint for this public endpoint. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List AI Search instances. — cloudflare.ai-search-namespace-list-instances

Run List AI Search instances. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
query object Optional additionalProperties: false
query.page integer Optional Page number (1-indexed). default: 1; minimum: 1
query.per_page integer Optional Number of results per page. default: 20; minimum: 1; maximum: 100
query.search string Optional Filter instances whose id contains this string (case-insensitive). maxLength: 64
query.hostname string Optional Return only instances with this exact Search for Agents hostname (case-insensitive). minLength: 1; maxLength: 253
query.order_by string Optional Field to order results by. enum: ["created_at"]; default: "created_at"
query.order_by_direction string Optional Order direction. enum: ["asc","desc"]; default: "desc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an AI Search instance. — cloudflare.ai-search-namespace-create-instance

Run Create an AI Search instance. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
body object Optional
body.ai_gateway_id string | null Optional
body.ai_search_model string | null Optional A Workers AI model ID or an AI Gateway model ID compatible with the OpenAI Chat Completions API. An empty string uses the configured or default model.
body.cache boolean Optional default: true
body.cache_threshold string Optional enum: ["super_strict_match","close_enough","flexible_friend","anything_goes"]; default: "close_enough"
body.cache_ttl — Optional Cache entry TTL in seconds. Allowed values: 600 (10min), 1800 (30min), 3600 (1h), 7200 (2h), 21600 (6h), 43200 (12h), 86400 (24h), 172800 (48h), 259200 (72h), 518400 (6d). default: 172800
body.cache_ttl number Optional anyOf[1]; enum: [600]
body.cache_ttl number Optional anyOf[2]; enum: [1800]
body.cache_ttl number Optional anyOf[3]; enum: [3600]
body.cache_ttl number Optional anyOf[4]; enum: [7200]
body.cache_ttl number Optional anyOf[5]; enum: [21600]
body.cache_ttl number Optional anyOf[6]; enum: [43200]
body.cache_ttl number Optional anyOf[7]; enum: [86400]
body.cache_ttl number Optional anyOf[8]; enum: [172800]
body.cache_ttl number Optional anyOf[9]; enum: [259200]
body.cache_ttl number Optional anyOf[10]; enum: [518400]
body.chunk boolean Optional default: true
body.chunk_overlap integer Optional default: 10; minimum: 0; maximum: 30
body.chunk_size integer Optional minimum: 64
body.custom_metadata array Optional maxItems: 5
body.custom_metadata[] object Optional
body.custom_metadata[].data_type string Required enum: ["text","number","boolean","datetime"]
body.custom_metadata[].field_name string Required minLength: 1; maxLength: 64
body.embedding_model string | null Optional
body.fusion_method string Optional enum: ["max","rrf"]; default: "rrf"
body.hybrid_search_enabled boolean Optional Deprecated — use index_method instead. Defaults to true for new instances; set false to create a vector-only instance.
body.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
body.index_method object Optional Controls which storage backends indexing uses. Defaults to vector and keyword indexing for new instances. When set, both vector and keyword are required.
body.index_method.keyword boolean Required Enable keyword (BM25) storage backend.
body.index_method.vector boolean Required Enable vector (embedding) storage backend.
body.indexing_options object | null Optional
body.indexing_options.keyword_tokenizer string Optional Tokenizer used for keyword search indexing. porter provides word-level tokenization with Porter stemming (good for natural language queries). trigram enables character-level substring matching (good for partial matches, code, identifiers). Changing this triggers a full re-index. Defaults to porter. enum: ["porter","trigram"]; default: "porter"
body.indexing_options.use_ocr boolean Optional Enables OCR ingestion for PDFs and images. Changing this triggers a full re-index. Defaults to false. default: false
body.max_num_results integer Optional default: 10; minimum: 1; maximum: 50
body.metadata object Optional
body.metadata.created_from_aisearch_wizard boolean Optional
body.metadata.created_from_emdash_plugin object Optional additionalProperties: true
body.metadata.created_from_emdash_plugin.type string Required enum: ["native","rest"]
body.metadata.created_from_emdash_plugin.version string Required
body.metadata.worker_domain string Optional
body.public_endpoint_params object Optional
body.public_endpoint_params.authorized_hosts array Optional
body.public_endpoint_params.authorized_hosts[] string Optional
body.public_endpoint_params.chat_completions_endpoint object Optional
body.public_endpoint_params.chat_completions_endpoint.disabled boolean Optional Disable chat completions endpoint for this public endpoint. default: false
body.public_endpoint_params.custom_domains array | null Optional Custom domain hostnames that alias this public endpoint. GET and create responses return the current set; on update (PUT) this field is only echoed back when supplied in the request body, otherwise it is null (omit it to leave domains unchanged). maxItems: 1
body.public_endpoint_params.custom_domains[] string Optional Custom domain hostname. Must belong to a Verified zone on this account. minLength: 1; maxLength: 253
body.public_endpoint_params.default_domain_enabled boolean Optional When false, the instance is reachable only via a registered custom domain and the default <public_endpoint_id>.search.ai.cloudflare.com host returns 404. Requires at least one custom domain. Defaults to true. public_endpoint_params is replaced wholesale on update, so resend default_domain_enabled on every update to keep the default host off — omitting it resets to true. default: true
body.public_endpoint_params.enabled boolean Optional default: false
body.public_endpoint_params.mcp object Optional
body.public_endpoint_params.mcp.description string Optional default: "Finds exactly what you're looking for"
body.public_endpoint_params.mcp.disabled boolean Optional Disable MCP endpoint for this public endpoint. default: false
body.public_endpoint_params.rate_limit object Optional
body.public_endpoint_params.rate_limit.period_ms integer Optional minimum: 60000; maximum: 3600000
body.public_endpoint_params.rate_limit.requests integer Optional minimum: 1
body.public_endpoint_params.rate_limit.technique string Optional enum: ["fixed","sliding"]
body.public_endpoint_params.search_endpoint object Optional
body.public_endpoint_params.search_endpoint.disabled boolean Optional Disable search endpoint for this public endpoint. default: false
body.reranking boolean Optional default: false
body.reranking_model string | null Optional
body.retrieval_options object | null Optional
body.retrieval_options.boost_by array Optional Metadata fields to boost search results by. Each entry specifies a metadata field and an optional direction. Direction defaults to 'asc' for numeric/datetime fields and 'exists' for text/boolean fields. Fields must match 'timestamp' or a defined custom_metadata field. maxItems: 3
body.retrieval_options.boost_by[] object Optional
body.retrieval_options.boost_by[].direction string Optional Boost direction. 'desc' = higher values rank higher (e.g. newer timestamps). 'asc' = lower values rank higher. 'exists' = boost chunks that have the field. 'not_exists' = boost chunks that lack the field. Optional — defaults to 'asc' for numeric/datetime fields, 'exists' for text/boolean fields. enum: ["asc","desc","exists","not_exists"]
body.retrieval_options.boost_by[].field string Required Metadata field name to boost by. Use 'timestamp' for document freshness, or any custom_metadata field. Numeric and datetime fields support all four directions (asc, desc, exists, not_exists); text/boolean fields only support exists/not_exists. minLength: 1; maxLength: 64
body.retrieval_options.keyword_match_mode string Optional Controls which documents become candidates for BM25 scoring. 'and' restricts candidates to documents containing all query terms; 'or' includes any document containing at least one term and ranks results according to BM25 relevance. When omitted on an update, the existing stored value stays unchanged; when never set, search falls back to 'and'. enum: ["and","or"]
body.rewrite_model string | null Optional A Workers AI model ID or an AI Gateway model ID compatible with the OpenAI Chat Completions API. An empty string uses the configured or default model.
body.rewrite_query boolean Optional default: false
body.score_threshold number Optional Minimum similarity score a chunk must reach to be returned. Defaults to 0.4. minimum: 0; maximum: 1
body.source string | null Optional
body.source_params object | null Optional
body.source_params.exclude_items array Optional List of path patterns to exclude. Uses micromatch glob syntax: * matches within a path segment, ** matches across path segments (e.g., /admin/** matches /admin/users and /admin/settings/advanced). Most accounts have a limit of 10 rules; contact support to raise it. maxItems: 10
body.source_params.exclude_items[] string Optional maxLength: 500; pattern: "^[*/\\\\]?[\\w\\-/.\\\\?*:=&%]+$"
body.source_params.include_items array Optional List of path patterns to include. Uses micromatch glob syntax: * matches within a path segment, ** matches across path segments (e.g., /blog/** matches /blog/post and /blog/2024/post). Most accounts have a limit of 10 rules; contact support to raise it. maxItems: 10
body.source_params.include_items[] string Optional maxLength: 500; pattern: "^[*/\\\\]?[\\w\\-/.\\\\?*:=&%]+$"
body.source_params.prefix string Optional
body.source_params.r2_jurisdiction string Optional default: "default"
body.source_params.web_crawler object Optional default: {"parse_type":"sitemap"}
body.source_params.web_crawler.discover_options object Optional Options for parse_type 'discover', where Browser Run discovers URLs through link following and sitemaps. Ignored for 'sitemap'.
body.source_params.web_crawler.discover_options.depth number Optional Maximum link-follow depth from the seed URL. default: 5; minimum: 1; maximum: 100000
body.source_params.web_crawler.discover_options.include_external_links boolean Optional Follow links that point outside the source domain. Must stay false because discover crawls only cover the zone you own. default: false
body.source_params.web_crawler.discover_options.include_subdomains boolean Optional Follow links to subdomains of the source host. default: false
body.source_params.web_crawler.discover_options.limit number Optional Maximum number of pages to crawl (1-100000). default: 100000; minimum: 1; maximum: 100000
body.source_params.web_crawler.discover_options.max_age number Optional Maximum content age in seconds to accept (0–604800). default: 86400; minimum: 0; maximum: 604800
body.source_params.web_crawler.discover_options.source string Optional Where the crawler looks for URLs: 'sitemaps' reads sitemap XML only, 'links' follows page links only, 'all' does both. enum: ["all","sitemaps","links"]; default: "all"
body.source_params.web_crawler.parse_options object Optional
body.source_params.web_crawler.parse_options.content_selector array Optional List of path-to-selector mappings for extracting specific content from crawled pages. Each entry pairs a URL glob pattern with a CSS selector. The first matching path wins. The crawler stores and indexes only the matched HTML fragment. Omit the field to disable content selection; the API rejects empty arrays. minItems: 1; maxItems: 10
body.source_params.web_crawler.parse_options.content_selector[] object Optional
body.source_params.web_crawler.parse_options.content_selector[].path string Required Glob pattern to match against the page URL path. Uses standard glob syntax: * matches within a segment, ** crosses directories. minLength: 1; maxLength: 200
body.source_params.web_crawler.parse_options.content_selector[].selector string Required CSS selector to extract content from pages matching the path pattern. Disallowed characters: ;, `, $, {, }, . Must target a single element; if multiple elements match, the crawler ignores the selector and uses the full page. minLength: 1; maxLength: 200
body.source_params.web_crawler.parse_options.include_headers object Optional Up to 5 custom HTTP headers sent with each crawl request. Names must use RFC-7230 token characters, excluding spaces, colons, and control characters. Values must use HTAB and printable ASCII only, excluding CR and LF. additionalProperties: {"maxLength":8192,"pattern":"^[\\t\\x20-\\x7E]*$","type":"string"}
body.source_params.web_crawler.parse_options.include_images boolean Optional default: false
body.source_params.web_crawler.parse_options.specific_sitemaps array Optional List of specific sitemap URLs to use for crawling. Only valid when parse_type is 'sitemap'. maxItems: 10
body.source_params.web_crawler.parse_options.specific_sitemaps[] string Optional format: "uri"
body.source_params.web_crawler.parse_options.use_browser_rendering boolean Optional default: true
body.source_params.web_crawler.parse_type string Optional How the crawler finds URLs. 'sitemap' reads XML sitemaps; 'discover' follows links recursively and requires the source to belong to a Verified zone on this account. enum: ["sitemap","discover"]; default: "sitemap"
body.sync_interval — Optional Interval between automatic syncs, in seconds. Allowed values: 900 (15min), 1800 (30min), 3600 (1h), 7200 (2h), 14400 (4h), 21600 (6h), 43200 (12h), 86400 (24h). Defaults to 86400 (24h).
body.sync_interval number Optional anyOf[1]; enum: [900]
body.sync_interval number Optional anyOf[2]; enum: [1800]
body.sync_interval number Optional anyOf[3]; enum: [3600]
body.sync_interval number Optional anyOf[4]; enum: [7200]
body.sync_interval number Optional anyOf[5]; enum: [14400]
body.sync_interval number Optional anyOf[6]; enum: [21600]
body.sync_interval number Optional anyOf[7]; enum: [43200]
body.sync_interval number Optional anyOf[8]; enum: [86400]
body.token_id string Optional format: "uuid"
body.type string | null Optional Source type. When omitted or null with a non-blank source, HTTP(S) URLs infer web-crawler and existing R2 bucket names infer r2. A missing or blank source without a type uses managed upload-only storage. enum: ["r2","web-crawler",null]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an AI Search instance. — cloudflare.ai-search-namespace-delete-instance

Run Delete an AI Search instance. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required
path.namespace string Required Namespace name. default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "id": "my-ai-search",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an AI Search instance. — cloudflare.ai-search-namespace-fetch-instance

Run Get an AI Search instance. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required
path.namespace string Required Namespace name. default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "id": "my-ai-search",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Move an instance to a different namespace. — cloudflare.ai-search-move-instance

Run Move an instance to a different namespace. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.namespace string Required Current namespace of the instance.
path.id string Required Instance id.
body object Optional
body.new_namespace string Required Target namespace to move the instance into. pattern: "^[a-z0-9]([a-z0-9-]{0,26}[a-z0-9])?$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "production",
    "id": "my-blog"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an AI Search instance. — cloudflare.ai-search-namespace-update-instance

Run Update an AI Search instance. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required
path.namespace string Required Namespace name. default: "default"
body object Optional
body.ai_gateway_id string | null Optional
body.ai_search_model string | null Optional A Workers AI model ID or an AI Gateway model ID compatible with the OpenAI Chat Completions API. An empty string uses the configured or default model.
body.cache boolean Optional default: true
body.cache_threshold string Optional enum: ["super_strict_match","close_enough","flexible_friend","anything_goes"]; default: "close_enough"
body.cache_ttl — Optional Cache entry TTL in seconds. Allowed values: 600 (10min), 1800 (30min), 3600 (1h), 7200 (2h), 21600 (6h), 43200 (12h), 86400 (24h), 172800 (48h), 259200 (72h), 518400 (6d). default: 172800
body.cache_ttl number Optional anyOf[1]; enum: [600]
body.cache_ttl number Optional anyOf[2]; enum: [1800]
body.cache_ttl number Optional anyOf[3]; enum: [3600]
body.cache_ttl number Optional anyOf[4]; enum: [7200]
body.cache_ttl number Optional anyOf[5]; enum: [21600]
body.cache_ttl number Optional anyOf[6]; enum: [43200]
body.cache_ttl number Optional anyOf[7]; enum: [86400]
body.cache_ttl number Optional anyOf[8]; enum: [172800]
body.cache_ttl number Optional anyOf[9]; enum: [259200]
body.cache_ttl number Optional anyOf[10]; enum: [518400]
body.chunk boolean Optional default: true
body.chunk_overlap integer Optional default: 10; minimum: 0; maximum: 30
body.chunk_size integer Optional minimum: 64
body.custom_metadata array Optional maxItems: 5
body.custom_metadata[] object Optional
body.custom_metadata[].data_type string Required enum: ["text","number","boolean","datetime"]
body.custom_metadata[].field_name string Required minLength: 1; maxLength: 64
body.embedding_model string | null Optional
body.fusion_method string Optional enum: ["max","rrf"]; default: "rrf"
body.index_method object Optional Controls which storage backends indexing uses. Defaults to vector and keyword indexing for new instances. When set, both vector and keyword are required.
body.index_method.keyword boolean Required Enable keyword (BM25) storage backend.
body.index_method.vector boolean Required Enable vector (embedding) storage backend.
body.indexing_options object | null Optional
body.indexing_options.keyword_tokenizer string Optional Tokenizer used for keyword search indexing. porter provides word-level tokenization with Porter stemming (good for natural language queries). trigram enables character-level substring matching (good for partial matches, code, identifiers). Changing this triggers a full re-index. Defaults to porter. enum: ["porter","trigram"]; default: "porter"
body.indexing_options.use_ocr boolean Optional Enables OCR ingestion for PDFs and images. Changing this triggers a full re-index. Defaults to false. default: false
body.max_num_results integer Optional default: 10; minimum: 1; maximum: 50
body.metadata object Optional
body.metadata.created_from_aisearch_wizard boolean Optional
body.metadata.created_from_emdash_plugin object Optional additionalProperties: true
body.metadata.created_from_emdash_plugin.type string Required enum: ["native","rest"]
body.metadata.created_from_emdash_plugin.version string Required
body.metadata.worker_domain string Optional
body.paused boolean Optional
body.public_endpoint_params object Optional
body.public_endpoint_params.authorized_hosts array Optional
body.public_endpoint_params.authorized_hosts[] string Optional
body.public_endpoint_params.chat_completions_endpoint object Optional
body.public_endpoint_params.chat_completions_endpoint.disabled boolean Optional Disable chat completions endpoint for this public endpoint. default: false
body.public_endpoint_params.custom_domains array | null Optional Custom domain hostnames that alias this public endpoint. GET and create responses return the current set; on update (PUT) this field is only echoed back when supplied in the request body, otherwise it is null (omit it to leave domains unchanged). maxItems: 1
body.public_endpoint_params.custom_domains[] string Optional Custom domain hostname. Must belong to a Verified zone on this account. minLength: 1; maxLength: 253
body.public_endpoint_params.default_domain_enabled boolean Optional When false, the instance is reachable only via a registered custom domain and the default <public_endpoint_id>.search.ai.cloudflare.com host returns 404. Requires at least one custom domain. Defaults to true. public_endpoint_params is replaced wholesale on update, so resend default_domain_enabled on every update to keep the default host off — omitting it resets to true. default: true
body.public_endpoint_params.enabled boolean Optional default: false
body.public_endpoint_params.mcp object Optional
body.public_endpoint_params.mcp.description string Optional default: "Finds exactly what you're looking for"
body.public_endpoint_params.mcp.disabled boolean Optional Disable MCP endpoint for this public endpoint. default: false
body.public_endpoint_params.rate_limit object Optional
body.public_endpoint_params.rate_limit.period_ms integer Optional minimum: 60000; maximum: 3600000
body.public_endpoint_params.rate_limit.requests integer Optional minimum: 1
body.public_endpoint_params.rate_limit.technique string Optional enum: ["fixed","sliding"]
body.public_endpoint_params.search_endpoint object Optional
body.public_endpoint_params.search_endpoint.disabled boolean Optional Disable search endpoint for this public endpoint. default: false
body.reranking boolean Optional default: false
body.reranking_model string | null Optional
body.retrieval_options object | null Optional
body.retrieval_options.boost_by array Optional Metadata fields to boost search results by. Each entry specifies a metadata field and an optional direction. Direction defaults to 'asc' for numeric/datetime fields and 'exists' for text/boolean fields. Fields must match 'timestamp' or a defined custom_metadata field. maxItems: 3
body.retrieval_options.boost_by[] object Optional
body.retrieval_options.boost_by[].direction string Optional Boost direction. 'desc' = higher values rank higher (e.g. newer timestamps). 'asc' = lower values rank higher. 'exists' = boost chunks that have the field. 'not_exists' = boost chunks that lack the field. Optional — defaults to 'asc' for numeric/datetime fields, 'exists' for text/boolean fields. enum: ["asc","desc","exists","not_exists"]
body.retrieval_options.boost_by[].field string Required Metadata field name to boost by. Use 'timestamp' for document freshness, or any custom_metadata field. Numeric and datetime fields support all four directions (asc, desc, exists, not_exists); text/boolean fields only support exists/not_exists. minLength: 1; maxLength: 64
body.retrieval_options.keyword_match_mode string Optional Controls which documents become candidates for BM25 scoring. 'and' restricts candidates to documents containing all query terms; 'or' includes any document containing at least one term and ranks results according to BM25 relevance. When omitted on an update, the existing stored value stays unchanged; when never set, search falls back to 'and'. enum: ["and","or"]
body.rewrite_model string | null Optional A Workers AI model ID or an AI Gateway model ID compatible with the OpenAI Chat Completions API. An empty string uses the configured or default model.
body.rewrite_query boolean Optional default: false
body.score_threshold number Optional Minimum similarity score a chunk must reach to be returned. Defaults to 0.4. minimum: 0; maximum: 1
body.source string | null Optional
body.source_params object | null Optional
body.source_params.exclude_items array Optional List of path patterns to exclude. Uses micromatch glob syntax: * matches within a path segment, ** matches across path segments (e.g., /admin/** matches /admin/users and /admin/settings/advanced). Most accounts have a limit of 10 rules; contact support to raise it. maxItems: 10
body.source_params.exclude_items[] string Optional maxLength: 500; pattern: "^[*/\\\\]?[\\w\\-/.\\\\?*:=&%]+$"
body.source_params.include_items array Optional List of path patterns to include. Uses micromatch glob syntax: * matches within a path segment, ** matches across path segments (e.g., /blog/** matches /blog/post and /blog/2024/post). Most accounts have a limit of 10 rules; contact support to raise it. maxItems: 10
body.source_params.include_items[] string Optional maxLength: 500; pattern: "^[*/\\\\]?[\\w\\-/.\\\\?*:=&%]+$"
body.source_params.prefix string Optional
body.source_params.r2_jurisdiction string Optional default: "default"
body.source_params.web_crawler object Optional default: {"parse_type":"sitemap"}
body.source_params.web_crawler.discover_options object Optional Options for parse_type 'discover', where Browser Run discovers URLs through link following and sitemaps. Ignored for 'sitemap'.
body.source_params.web_crawler.discover_options.depth number Optional Maximum link-follow depth from the seed URL. default: 5; minimum: 1; maximum: 100000
body.source_params.web_crawler.discover_options.include_external_links boolean Optional Follow links that point outside the source domain. Must stay false because discover crawls only cover the zone you own. default: false
body.source_params.web_crawler.discover_options.include_subdomains boolean Optional Follow links to subdomains of the source host. default: false
body.source_params.web_crawler.discover_options.limit number Optional Maximum number of pages to crawl (1-100000). default: 100000; minimum: 1; maximum: 100000
body.source_params.web_crawler.discover_options.max_age number Optional Maximum content age in seconds to accept (0–604800). default: 86400; minimum: 0; maximum: 604800
body.source_params.web_crawler.discover_options.source string Optional Where the crawler looks for URLs: 'sitemaps' reads sitemap XML only, 'links' follows page links only, 'all' does both. enum: ["all","sitemaps","links"]; default: "all"
body.source_params.web_crawler.parse_options object Optional
body.source_params.web_crawler.parse_options.content_selector array Optional List of path-to-selector mappings for extracting specific content from crawled pages. Each entry pairs a URL glob pattern with a CSS selector. The first matching path wins. The crawler stores and indexes only the matched HTML fragment. Omit the field to disable content selection; the API rejects empty arrays. minItems: 1; maxItems: 10
body.source_params.web_crawler.parse_options.content_selector[] object Optional
body.source_params.web_crawler.parse_options.content_selector[].path string Required Glob pattern to match against the page URL path. Uses standard glob syntax: * matches within a segment, ** crosses directories. minLength: 1; maxLength: 200
body.source_params.web_crawler.parse_options.content_selector[].selector string Required CSS selector to extract content from pages matching the path pattern. Disallowed characters: ;, `, $, {, }, . Must target a single element; if multiple elements match, the crawler ignores the selector and uses the full page. minLength: 1; maxLength: 200
body.source_params.web_crawler.parse_options.include_headers object Optional Up to 5 custom HTTP headers sent with each crawl request. Names must use RFC-7230 token characters, excluding spaces, colons, and control characters. Values must use HTAB and printable ASCII only, excluding CR and LF. additionalProperties: {"maxLength":8192,"pattern":"^[\\t\\x20-\\x7E]*$","type":"string"}
body.source_params.web_crawler.parse_options.include_images boolean Optional default: false
body.source_params.web_crawler.parse_options.specific_sitemaps array Optional List of specific sitemap URLs to use for crawling. Only valid when parse_type is 'sitemap'. maxItems: 10
body.source_params.web_crawler.parse_options.specific_sitemaps[] string Optional format: "uri"
body.source_params.web_crawler.parse_options.use_browser_rendering boolean Optional default: true
body.source_params.web_crawler.parse_type string Optional How the crawler finds URLs. 'sitemap' reads XML sitemaps; 'discover' follows links recursively and requires the source to belong to a Verified zone on this account. enum: ["sitemap","discover"]; default: "sitemap"
body.summarization boolean Optional default: false
body.summarization_model string | null Optional
body.sync_interval — Optional Interval between automatic syncs, in seconds. Allowed values: 900 (15min), 1800 (30min), 3600 (1h), 7200 (2h), 14400 (4h), 21600 (6h), 43200 (12h), 86400 (24h). Defaults to 86400 (24h).
body.sync_interval number Optional anyOf[1]; enum: [900]
body.sync_interval number Optional anyOf[2]; enum: [1800]
body.sync_interval number Optional anyOf[3]; enum: [3600]
body.sync_interval number Optional anyOf[4]; enum: [7200]
body.sync_interval number Optional anyOf[5]; enum: [14400]
body.sync_interval number Optional anyOf[6]; enum: [21600]
body.sync_interval number Optional anyOf[7]; enum: [43200]
body.sync_interval number Optional anyOf[8]; enum: [86400]
body.system_prompt_ai_search string | null Optional
body.system_prompt_index_summarization string | null Optional
body.system_prompt_rewrite_query string | null Optional
body.token_id string Optional format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "id": "my-ai-search",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Chat Completions — cloudflare.ai-search-namespace-instance-chat-completion

Run Chat Completions with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
body object Optional additionalProperties: true
body.ai_search_options object Optional
body.ai_search_options.cache object Optional
body.ai_search_options.cache.cache_threshold string Optional enum: ["super_strict_match","close_enough","flexible_friend","anything_goes"]
body.ai_search_options.cache.enabled boolean Optional
body.ai_search_options.custom_metadata object Optional Metadata added to AI Gateway logs for requests this operation triggers. Accepts up to 2 string, number, or boolean entries. Reserved keys: 'ai-search', 'task', 'origin', and any key beginning with 'cf.'. maxProperties: 2; additionalProperties: {"anyOf":[{"type":"string"},{"type":"number"},{"type":"boolean"}]}
body.ai_search_options.query_rewrite object Optional
body.ai_search_options.query_rewrite.enabled boolean Optional
body.ai_search_options.query_rewrite.model string Optional A Workers AI model ID or an AI Gateway model ID compatible with the OpenAI Chat Completions API. An empty string uses the configured or default model.
body.ai_search_options.query_rewrite.rewrite_prompt string Optional
body.ai_search_options.reranking object Optional
body.ai_search_options.reranking.enabled boolean Optional
body.ai_search_options.reranking.match_threshold number Optional default: 0.4; minimum: 0; maximum: 1
body.ai_search_options.reranking.model string Optional
body.ai_search_options.retrieval object Optional
body.ai_search_options.retrieval.boost_by array Optional Metadata fields to boost search results by. Overrides the instance-level boost_by config. Direction defaults to 'asc' for numeric/datetime fields, 'exists' for text/boolean fields. Fields must match 'timestamp' or a defined custom_metadata field. maxItems: 3
body.ai_search_options.retrieval.boost_by[] object Optional
body.ai_search_options.retrieval.boost_by[].direction string Optional Boost direction. 'desc' = higher values rank higher (e.g. newer timestamps). 'asc' = lower values rank higher. 'exists' = boost chunks that have the field. 'not_exists' = boost chunks that lack the field. Optional — defaults to 'asc' for numeric/datetime fields, 'exists' for text/boolean fields. enum: ["asc","desc","exists","not_exists"]
body.ai_search_options.retrieval.boost_by[].field string Required Metadata field name to boost by. Use 'timestamp' for document freshness, or any custom_metadata field. Numeric and datetime fields support all four directions (asc, desc, exists, not_exists); text/boolean fields only support exists/not_exists. minLength: 1; maxLength: 64
body.ai_search_options.retrieval.context_expansion integer Optional default: 0; minimum: 0; maximum: 3
body.ai_search_options.retrieval.filters object Optional additionalProperties: true
body.ai_search_options.retrieval.fusion_method string Optional enum: ["max","rrf"]
body.ai_search_options.retrieval.keyword_match_mode string Optional Controls which documents become candidates for BM25 scoring. 'and' restricts candidates to documents containing all query terms; 'or' includes any document containing at least one term and ranks results according to BM25 relevance. When omitted, falls back to the instance-level retrieval_options.keyword_match_mode, then to 'and'. enum: ["and","or"]
body.ai_search_options.retrieval.match_threshold number Optional Minimum similarity score a chunk must reach to be returned. When omitted, falls back to the instance-level score_threshold, then to 0.4. minimum: 0; maximum: 1
body.ai_search_options.retrieval.max_num_results integer Optional Maximum number of results to return. When omitted, falls back to the instance-level max_num_results, then to 10. minimum: 1; maximum: 50
body.ai_search_options.retrieval.retrieval_type string Optional enum: ["vector","keyword","hybrid"]
body.ai_search_options.retrieval.return_on_failure boolean Optional default: true
body.messages array Required minItems: 1
body.messages[] object Optional additionalProperties: true
body.messages[].content — Required
body.messages[].content string Required anyOf[1]
body.messages[].content array Required anyOf[2]; minItems: 1
body.messages[].content[] — Optional anyOf[2]
body.messages[].content[] object Optional anyOf[2]; oneOf[1]
body.messages[].content[].text string Required anyOf[2]; oneOf[1]; minLength: 1
body.messages[].content[].type string Required anyOf[2]; oneOf[1]; enum: ["text"]
body.messages[].content[] object Optional anyOf[2]; oneOf[2]
body.messages[].content[].image_url object Required anyOf[2]; oneOf[2]
body.messages[].content[].image_url.url string Required anyOf[2]; oneOf[2]; minLength: 1; maxLength: 20971520
body.messages[].content[].type string Required anyOf[2]; oneOf[2]; enum: ["image_url"]
body.messages[].content[] object Optional anyOf[2]; oneOf[3]
body.messages[].content[].file object Required anyOf[2]; oneOf[3]
body.messages[].content[].file.file_data string Optional anyOf[2]; oneOf[3]; minLength: 1; maxLength: 13981144
body.messages[].content[].file.file_id string Optional anyOf[2]; oneOf[3]
body.messages[].content[].file.filename string Required anyOf[2]; oneOf[3]; minLength: 1; maxLength: 255
body.messages[].content[].type string Required anyOf[2]; oneOf[3]; enum: ["file"]
body.messages[].content string | null Required anyOf[3]; enum: [null]
body.messages[].role string Required enum: ["system","developer","user","assistant","tool"]
body.model string Optional A Workers AI model ID or an AI Gateway model ID compatible with the OpenAI Chat Completions API. An empty string uses the configured or default model.
body.stream boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Items List. — cloudflare.ai-search-namespace-instance-list-items

Run Items List. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 0; maximum: 50
query.search string Optional maxLength: 256
query.sort_by string Optional Sort order for items. "status" (default) sorts items according to status priority, then last_seen_at. "modified_at" sorts items according to file modification time (most recent first), falling back to created_at. enum: ["status","modified_at"]; default: "status"
query.status string Optional enum: ["queued","running","completed","error","skipped","outdated"]
query.source string Optional Return only items with this source_id. Use "builtin" for uploaded files, or a source identifier like "web-crawler:https://example.com". maxLength: 512
query.metadata_filter string Optional JSON-encoded metadata filter using Vectorize filter syntax. Examples: {"folder":"reports/"}, {"timestamp":{"$gte":1700000000000}}, {"folder":{"$in":["docs/","reports/"]}}. maxLength: 2048
query.item_id string Optional Return only the item with this unique ID. Returns at most one item. maxLength: 64
query.key string Optional Return only items with this exact key (object key / filename). Each key is unique within a source, so combine with source to disambiguate across data sources. maxLength: 1024

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create or Update Item. — cloudflare.ai-search-namespace-instance-create-or-update-item

Run Create or Update Item. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
body object Optional
body.key string Required Item key / filename. Must not exceed 128 characters.
body.next_action string Required enum: ["INDEX"]
body.wait_for_completion boolean Optional Wait for indexing before responding. After processing, vector-indexed instances use any time remaining in a 25s wait budget to confirm Vectorize ingestion. Processing itself continues uninterrupted and can exceed that budget. If confirmation times out, the response returns the current item state and background indexing continues. Defaults to false. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Item. — cloudflare.ai-search-namespace-instance-delete-item

Run Delete Item. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.item_id string Required
path.account_id string Required
path.namespace string Required Namespace name. default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "item_id": "example",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Item. — cloudflare.ai-search-namespace-instance-get-item

Run Get Item. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.item_id string Required
path.account_id string Required
path.namespace string Required Namespace name. default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "item_id": "example",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Sync Item. — cloudflare.ai-search-namespace-instance-sync-item

Run Sync Item. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.item_id string Required
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
body object Optional
body.next_action string Required enum: ["INDEX"]
body.wait_for_completion boolean Optional Wait for indexing before responding. After processing, vector-indexed instances use any time remaining in a 25s wait budget to confirm Vectorize ingestion. Processing itself continues uninterrupted and can exceed that budget. If confirmation times out, the response returns the current item state and background indexing continues. Defaults to false. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "item_id": "example",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Item Chunks. — cloudflare.ai-search-namespace-instance-list-item-chunks

Run List Item Chunks. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.item_id string Required
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
query object Optional additionalProperties: false
query.limit integer Optional default: 20; minimum: 1; maximum: 100
query.offset integer Optional default: 0; minimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "item_id": "example",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Item Logs. — cloudflare.ai-search-namespace-instance-logs-item

Run Item Logs. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.item_id string Required
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
query object Optional additionalProperties: false
query.limit integer Optional default: 50; minimum: 1; maximum: 100
query.cursor string Optional maxLength: 512

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "item_id": "example",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Jobs — cloudflare.ai-search-namespace-instance-list-jobs

Run List Jobs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 0; maximum: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create new job — cloudflare.ai-search-namespace-instance-create-job

Run Create new job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
body object Optional
body.description string Optional maxLength: 255

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Job Details — cloudflare.ai-search-namespace-instance-get-job

Run Get a Job Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.job_id string Required
path.account_id string Required
path.namespace string Required Namespace name. default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "job_id": "example",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Cancel an indexing job. — cloudflare.ai-search-namespace-instance-change-job-status

Run Cancel an indexing job. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.job_id string Required
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
body object Optional
body.action string Required enum: ["cancel"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "job_id": "example",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Job Logs — cloudflare.ai-search-namespace-instance-list-job-logs

Run List Job Logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.job_id string Required
path.account_id string Required
path.namespace string Required Namespace name. default: "default"
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 0; maximum: 500

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "job_id": "example",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Purge search cache. — cloudflare.ai-search-namespace-purge-instance-cache

Run Purge search cache. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.namespace string Required Namespace name. default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "id": "my-ai-search",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get instance statistics. — cloudflare.ai-search-namespace-stats

Run Get instance statistics. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
path.namespace string Required Namespace name. default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-ai-search",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "namespace": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a namespace — cloudflare.ai-search-delete-namespace

Run Delete a namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.name string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "name": "production"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a namespace — cloudflare.ai-search-fetch-namespace

Run Get a namespace with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.name string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "name": "production"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a namespace — cloudflare.ai-search-update-namespace

Run Update a namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.name string Required
body object Optional
body.description string | null Optional Optional description for the namespace. Max 256 characters. maxLength: 256
body.public_endpoint_params object | null Optional
body.public_endpoint_params.authorized_hosts array Optional
body.public_endpoint_params.authorized_hosts[] string Optional
body.public_endpoint_params.chat_completions_endpoint object Optional
body.public_endpoint_params.chat_completions_endpoint.disabled boolean Optional Disable chat completions endpoint for this public endpoint. default: false
body.public_endpoint_params.custom_domains array | null Optional Custom domain hostnames that alias this public endpoint. GET and create responses return the current set; on update (PUT) this field is only echoed back when supplied in the request body, otherwise it is null (omit it to leave domains unchanged). maxItems: 1
body.public_endpoint_params.custom_domains[] string Optional Custom domain hostname. Must belong to a Verified zone on this account. minLength: 1; maxLength: 253
body.public_endpoint_params.default_domain_enabled boolean Optional When false, the instance is reachable only via a registered custom domain and the default <public_endpoint_id>.search.ai.cloudflare.com host returns 404. Requires at least one custom domain. Defaults to true. public_endpoint_params is replaced wholesale on update, so resend default_domain_enabled on every update to keep the default host off — omitting it resets to true. default: true
body.public_endpoint_params.enabled boolean Optional default: false
body.public_endpoint_params.instances_allowed array Optional Instance IDs exposed through the namespace public endpoint. Empty means nothing is searchable. Every ID must reference an existing instance in this namespace, and the list must stay within the account's multi-instance search limit. default: []; maxItems: 10
body.public_endpoint_params.instances_allowed[] string Optional AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
body.public_endpoint_params.mcp object Optional
body.public_endpoint_params.mcp.description string Optional default: "Finds exactly what you're looking for"
body.public_endpoint_params.mcp.disabled boolean Optional Disable MCP endpoint for this public endpoint. default: false
body.public_endpoint_params.rate_limit object Optional
body.public_endpoint_params.rate_limit.period_ms integer Optional minimum: 60000; maximum: 3600000
body.public_endpoint_params.rate_limit.requests integer Optional minimum: 1
body.public_endpoint_params.rate_limit.technique string Optional enum: ["fixed","sliding"]
body.public_endpoint_params.search_endpoint object Optional
body.public_endpoint_params.search_endpoint.disabled boolean Optional Disable search endpoint for this public endpoint. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "name": "production"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Multi-Instance Chat Completions — cloudflare.ai-search-namespace-multi-instance-chat-completion

Run Multi-Instance Chat Completions with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.name string Required Namespace name.
body object Optional additionalProperties: true
body.ai_search_options object Required
body.ai_search_options.cache object Optional
body.ai_search_options.cache.cache_threshold string Optional enum: ["super_strict_match","close_enough","flexible_friend","anything_goes"]
body.ai_search_options.cache.enabled boolean Optional
body.ai_search_options.custom_metadata object Optional Metadata added to AI Gateway logs for requests this operation triggers. Accepts up to 2 string, number, or boolean entries. Reserved keys: 'ai-search', 'task', 'origin', and any key beginning with 'cf.'. maxProperties: 2; additionalProperties: {"anyOf":[{"type":"string"},{"type":"number"},{"type":"boolean"}]}
body.ai_search_options.instance_ids array Required minItems: 1
body.ai_search_options.instance_ids[] string Optional AI Search instance ID. Lowercase alphanumeric, hyphens, and underscores. minLength: 1; maxLength: 64; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
body.ai_search_options.query_rewrite object Optional
body.ai_search_options.query_rewrite.enabled boolean Optional
body.ai_search_options.query_rewrite.model string Optional A Workers AI model ID or an AI Gateway model ID compatible with the OpenAI Chat Completions API. An empty string uses the configured or default model.
body.ai_search_options.query_rewrite.rewrite_prompt string Optional
body.ai_search_options.reranking object Optional
body.ai_search_options.reranking.enabled boolean Optional
body.ai_search_options.reranking.match_threshold number Optional default: 0.4; minimum: 0; maximum: 1
body.ai_search_options.reranking.model string Optional
body.ai_search_options.retrieval object Optional
body.ai_search_options.retrieval.boost_by array Optional Metadata fields to boost search results by. Overrides the instance-level boost_by config. Direction defaults to 'asc' for numeric/datetime fields, 'exists' for text/boolean fields. Fields must match 'timestamp' or a defined custom_metadata field. maxItems: 3
body.ai_search_options.retrieval.boost_by[] object Optional
body.ai_search_options.retrieval.boost_by[].direction string Optional Boost direction. 'desc' = higher values rank higher (e.g. newer timestamps). 'asc' = lower values rank higher. 'exists' = boost chunks that have the field. 'not_exists' = boost chunks that lack the field. Optional — defaults to 'asc' for numeric/datetime fields, 'exists' for text/boolean fields. enum: ["asc","desc","exists","not_exists"]
body.ai_search_options.retrieval.boost_by[].field string Required Metadata field name to boost by. Use 'timestamp' for document freshness, or any custom_metadata field. Numeric and datetime fields support all four directions (asc, desc, exists, not_exists); text/boolean fields only support exists/not_exists. minLength: 1; maxLength: 64
body.ai_search_options.retrieval.context_expansion integer Optional default: 0; minimum: 0; maximum: 3
body.ai_search_options.retrieval.filters object Optional additionalProperties: true
body.ai_search_options.retrieval.fusion_method string Optional enum: ["max","rrf"]
body.ai_search_options.retrieval.keyword_match_mode string Optional Controls which documents become candidates for BM25 scoring. 'and' restricts candidates to documents containing all query terms; 'or' includes any document containing at least one term and ranks results according to BM25 relevance. When omitted, falls back to the instance-level retrieval_options.keyword_match_mode, then to 'and'. enum: ["and","or"]
body.ai_search_options.retrieval.match_threshold number Optional Minimum score a chunk must reach to be returned. When omitted, each instance's chunks are filtered by that instance's score_threshold, capped at the lower of the first instance's score_threshold and 0.4. minimum: 0; maximum: 1
body.ai_search_options.retrieval.max_num_results integer Optional Maximum number of merged results to return. When omitted, defaults to the first instance's max_num_results, then 10. minimum: 1; maximum: 50
body.ai_search_options.retrieval.retrieval_type string Optional enum: ["vector","keyword","hybrid"]
body.ai_search_options.retrieval.return_on_failure boolean Optional default: true
body.messages array Required minItems: 1
body.messages[] object Optional additionalProperties: true
body.messages[].content — Required
body.messages[].content string Required anyOf[1]
body.messages[].content array Required anyOf[2]; minItems: 1
body.messages[].content[] — Optional anyOf[2]
body.messages[].content[] object Optional anyOf[2]; oneOf[1]
body.messages[].content[].text string Required anyOf[2]; oneOf[1]; minLength: 1
body.messages[].content[].type string Required anyOf[2]; oneOf[1]; enum: ["text"]
body.messages[].content[] object Optional anyOf[2]; oneOf[2]
body.messages[].content[].image_url object Required anyOf[2]; oneOf[2]
body.messages[].content[].image_url.url string Required anyOf[2]; oneOf[2]; minLength: 1; maxLength: 20971520
body.messages[].content[].type string Required anyOf[2]; oneOf[2]; enum: ["image_url"]
body.messages[].content[] object Optional anyOf[2]; oneOf[3]
body.messages[].content[].file object Required anyOf[2]; oneOf[3]
body.messages[].content[].file.file_data string Optional anyOf[2]; oneOf[3]; minLength: 1; maxLength: 13981144
body.messages[].content[].file.file_id string Optional anyOf[2]; oneOf[3]
body.messages[].content[].file.filename string Required anyOf[2]; oneOf[3]; minLength: 1; maxLength: 255
body.messages[].content[].type string Required anyOf[2]; oneOf[3]; enum: ["file"]
body.messages[].content string | null Required anyOf[3]; enum: [null]
body.messages[].role string Required enum: ["system","developer","user","assistant","tool"]
body.model string Optional A Workers AI model ID or an AI Gateway model ID compatible with the OpenAI Chat Completions API. An empty string uses the configured or default model.
body.stream boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "name": "my-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tokens — cloudflare.ai-search-list-tokens

Run List tokens with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional Page number (1-indexed). default: 1; minimum: 1; maximum: 100
query.per_page integer Optional Number of results per page. default: 20; minimum: 1; maximum: 100
query.search string Optional Filter tokens whose name contains this string (case-insensitive). maxLength: 256

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a token — cloudflare.ai-search-create-tokens

Run Create a token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Optional
body.cf_api_id string Required
body.cf_api_key string Required
body.legacy boolean Optional default: true
body.name string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a token — cloudflare.ai-search-delete-tokens

Run Delete a token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "id": "62af0db3-c410-40b2-9ee3-0e93f6dd1de0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a token — cloudflare.ai-search-fetch-tokens

Run Get a token with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "id": "62af0db3-c410-40b2-9ee3-0e93f6dd1de0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a token — cloudflare.ai-search-update-tokens

Run Update a token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.id string Required format: "uuid"
body object Optional
body.cf_api_id string Required
body.cf_api_key string Required
body.legacy boolean Optional default: true
body.name string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22",
    "id": "62af0db3-c410-40b2-9ee3-0e93f6dd1de0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Author Search — cloudflare.workers-ai-search-author

Run Author Search with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Finetunes — cloudflare.workers-ai-list-finetunes

Run List Finetunes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new Finetune — cloudflare.workers-ai-create-finetune

Run Create a new Finetune with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Optional
body.description string Optional
body.model string Required
body.name string Required
body.public boolean Optional default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Public Finetunes — cloudflare.workers-ai-list-public-finetunes

Run List Public Finetunes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.limit number Optional Pagination Limit. default: 20
query.offset number Optional Pagination Offset. default: 0
query.orderBy string Optional Order By Column Name.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Finetune — cloudflare.workers-ai-delete-finetune

Run Delete a Finetune with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.finetune_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "finetune_id": "bc451aef-f723-4b26-a6b2-901afd2e7a8a"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Download a Finetune Asset — cloudflare.workers-ai-download-finetune-asset

Run Download a Finetune Asset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.finetune_id string Required
path.file_name string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "finetune_id": "bc451aef-f723-4b26-a6b2-901afd2e7a8a",
    "file_name": "adapter_model.safetensors"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an AI model's input and output schemas — cloudflare.workers-ai-get-model-schema

Run Get an AI model's input and output schemas with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID used for this AI model request.
query object Required additionalProperties: false
query.model string Required AI model identifier, including its namespace and model name.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "model": "@cf/meta/llama-3.1-8b-instruct"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Model Search — cloudflare.workers-ai-search-model

Run Model Search with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.per_page integer Optional default: 100
query.page integer Optional default: 1
query.task string Optional Filter by Task Name. default: ""
query.author string Optional Filter by Author. default: ""
query.source number Optional Filter by Source Id.
query.hide_experimental boolean Optional Filter to hide experimental models. default: false
query.search string Optional Search. default: ""
query.include_deprecated boolean Optional If true, include models for up to three months after their deprecation date. Defaults to false. default: false
query.format string Optional If set, return models in the requested marketplace format instead of the default response. enum: ["openrouter"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Run an AI model with request options — cloudflare.workers-ai-post-run-generic

Run Run an AI model with request options with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID used for this AI model request.
body object Optional
body.input object Required JSON object containing the selected model's input fields, such as prompt or messages. Do not include model or options inside this object.
body.model string Required The AI model to execute (e.g., @cf/google/gemma-4-26b-a4b-it, openai/gpt-5.5, anthropic/claude-opus-4.7)
body.options object Optional
body.options.extraHeaders object Optional Additional headers to pass to the AI provider additionalProperties: {"type":"string"}
body.options.gateway object Optional
body.options.gateway.cacheTtl number Optional Cache TTL in seconds
body.options.gateway.id string Optional AI Gateway ID for caching and logging
body.options.gateway.skipCache boolean Optional Skip cache lookup for this request

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Task Search — cloudflare.workers-ai-search-task

Run Task Search with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List supported Markdown conversion formats — cloudflare.workers-ai-get-to-markdown-supported

Run List supported Markdown conversion formats with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID used for this AI model request.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Alert Types — cloudflare.notification-alert-types-get-alert-types

Run Get Alert Types with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get delivery mechanism eligibility — cloudflare.notification-mechanism-eligibility-get-delivery-mechanism-eligibility

Run Get delivery mechanism eligibility with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete PagerDuty Services — cloudflare.notification-destinations-with-pager-duty-delete-pager-duty-services

Run Delete PagerDuty Services with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List PagerDuty services — cloudflare.notification-destinations-with-pager-duty-list-pager-duty-services

Run List PagerDuty services with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create PagerDuty integration token — cloudflare.notification-destinations-with-pager-duty-connect-pager-duty

Run Create PagerDuty integration token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Connect PagerDuty — cloudflare.notification-destinations-with-pager-duty-connect-pager-duty-token

Run Connect PagerDuty with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
path.token_id — Required $ref: "#/definitions/aaa_integration-token"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "token_id": "8c71e667571b4f61b94d9e4b12158038"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List webhooks — cloudflare.notification-webhooks-list-webhooks

Run List webhooks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a webhook — cloudflare.notification-webhooks-create-a-webhook

Run Create a webhook with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
body object Required
body.name — Required $ref: "#/definitions/aaa_components-schemas-name"
body.secret — Optional $ref: "#/definitions/aaa_secret"
body.url — Required $ref: "#/definitions/aaa_url"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Slack Webhook",
    "url": "https://hooks.slack.com/services/Ds3fdBFbV/456464Gdd"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a webhook — cloudflare.notification-webhooks-delete-a-webhook

Run Delete a webhook with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.webhook_id — Required $ref: "#/definitions/aaa_webhook-id"
path.account_id — Required $ref: "#/definitions/aaa_account-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "webhook_id": "b115d5ec15c641ee8b7692c449b5227b",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a webhook — cloudflare.notification-webhooks-get-a-webhook

Run Get a webhook with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
path.webhook_id — Required $ref: "#/definitions/aaa_webhook-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "webhook_id": "b115d5ec15c641ee8b7692c449b5227b"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a webhook — cloudflare.notification-webhooks-update-a-webhook

Run Update a webhook with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.webhook_id — Required $ref: "#/definitions/aaa_webhook-id"
path.account_id — Required $ref: "#/definitions/aaa_account-id"
body object Required
body.name — Required $ref: "#/definitions/aaa_components-schemas-name"
body.secret — Optional $ref: "#/definitions/aaa_secret"
body.url — Required $ref: "#/definitions/aaa_url"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "webhook_id": "b115d5ec15c641ee8b7692c449b5227b",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Slack Webhook",
    "url": "https://hooks.slack.com/services/Ds3fdBFbV/456464Gdd"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List History — cloudflare.notification-history-list-history

Run List History with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
query object Optional additionalProperties: false
query.per_page — Optional $ref: "#/definitions/aaa_per_page"
query.before — Optional $ref: "#/definitions/aaa_before"
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.since string Optional Limit the returned results to history records newer than the specified date. This must be a timestamp that conforms to RFC3339. format: "date-time"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Notification policies — cloudflare.notification-policies-list-notification-policies

Run List Notification policies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Notification policy — cloudflare.notification-policies-delete-a-notification-policy

Run Delete a Notification policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
path.policy_id — Required $ref: "#/definitions/aaa_policy-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "0da2b59ef118439d8097bdfb215203c9"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Notification policy — cloudflare.notification-policies-get-a-notification-policy

Run Get a Notification policy with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
path.policy_id — Required $ref: "#/definitions/aaa_policy-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "0da2b59ef118439d8097bdfb215203c9"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Notification policy — cloudflare.notification-policies-update-a-notification-policy

Run Update a Notification policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
path.policy_id — Required $ref: "#/definitions/aaa_policy-id"
body object Required
body.alert_interval — Optional $ref: "#/definitions/aaa_alert_interval"
body.alert_type — Optional $ref: "#/definitions/aaa_alert_type"
body.description — Optional $ref: "#/definitions/aaa_schemas-description"
body.enabled — Optional $ref: "#/definitions/aaa_enabled"
body.filters — Optional $ref: "#/definitions/aaa_filters"
body.mechanisms — Optional $ref: "#/definitions/aaa_mechanisms"
body.name — Optional $ref: "#/definitions/aaa_schemas-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "0da2b59ef118439d8097bdfb215203c9"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Show email unsubscribe details — cloudflare.notification-policies-show-email-unsubscribe-details

Run Show email unsubscribe details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
path.policy_id — Required $ref: "#/definitions/aaa_policy-id"
query object Required additionalProperties: false
query.email string Required format: "email"
query.token string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "0da2b59ef118439d8097bdfb215203c9"
  },
  "query": {
    "email": "developer@example.com",
    "token": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Unsubscribe email from a Notification policy — cloudflare.notification-policies-unsubscribe-email-from-notification-policy

Run Unsubscribe email from a Notification policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
path.policy_id — Required $ref: "#/definitions/aaa_policy-id"
query object Required additionalProperties: false
query.email string Required format: "email"
query.token string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "0da2b59ef118439d8097bdfb215203c9"
  },
  "query": {
    "email": "developer@example.com",
    "token": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Test a Notification policy — cloudflare.notification-policies-test-a-notification-policy

Run Test a Notification policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
path.policy_id — Required $ref: "#/definitions/aaa_policy-id"
body object Optional
body.severity integer Optional Severity level for the test alert. Defaults to INFO (1) if omitted. enum: [0,1,2,3,4]
body.source string Optional Source identifier for the test alert.
body.state_correlation_id string Optional Correlation ID for stateful test alerts. Required when state_event is set.
body.state_event integer Optional State event type for stateful test alerts. Use with state_correlation_id. enum: [0,1,2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "0da2b59ef118439d8097bdfb215203c9"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Silences — cloudflare.notification-silences-list-silences

Run List Silences with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Silences — cloudflare.notification-silences-create-silences

Run Create Silences with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
body array Required
body[] — Optional $ref: "#/definitions/aaa_silence_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Silences — cloudflare.notification-silences-update-silences

Run Update Silences with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
body array Required
body[] — Optional $ref: "#/definitions/aaa_silence_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Silence — cloudflare.notification-silences-delete-silences

Run Delete Silence with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
path.silence_id — Required $ref: "#/definitions/aaa_silence-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "silence_id": "f878e90c23f44126ae3cfc399f646977"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Silence — cloudflare.notification-silences-get-silence

Run Get Silence with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_account-id"
path.silence_id — Required $ref: "#/definitions/aaa_silence-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "silence_id": "f878e90c23f44126ae3cfc399f646977"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Top integrations by content findings — cloudflare.data-security-content-findings-top-n

Run Top integrations by content findings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier. maxLength: 32; pattern: "^[0-9a-f]{32}$"
body — Required $ref: "#/definitions/art_DataSecurityContentFindingsTopNQuery"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "from": "2024-11-01T00:00:00Z",
    "to": "2024-11-08T00:00:00Z",
    "n": 10,
    "filters": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Data security findings summary — cloudflare.data-security-findings-summary

Run Data security findings summary with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier. maxLength: 32; pattern: "^[0-9a-f]{32}$"
body — Required $ref: "#/definitions/art_DataSecurityFindingsSummaryQuery"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "from": "2024-11-01T00:00:00Z",
    "to": "2024-11-08T00:00:00Z",
    "filters": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Data security findings timeseries — cloudflare.data-security-findings-timeseries

Run Data security findings timeseries with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier. maxLength: 32; pattern: "^[0-9a-f]{32}$"
body — Required $ref: "#/definitions/art_DataSecurityFindingsTimeseriesQuery"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "from": "2024-11-01T00:00:00Z",
    "to": "2024-11-08T00:00:00Z",
    "filters": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query analytics summary — cloudflare.art-analytics-query-summary

Run Query analytics summary with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier. maxLength: 32; pattern: "^[0-9a-f]{32}$"
path.dataset string Required Dataset name to query. Examples: access-logins, gateway-http, gateway-dns, gateway-http, shadow-it.
body — Required $ref: "#/definitions/art_QuerySummary"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dataset": "access-logins"
  },
  "body": {
    "from": "2024-11-05T00:00:00Z",
    "to": "2024-11-06T00:00:00Z",
    "groupBy": [
      "country",
      "allowed"
    ],
    "stats": [
      "attemptsTotal"
    ],
    "filters": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query analytics timeseries — cloudflare.art-analytics-query-timeseries

Run Query analytics timeseries with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier. maxLength: 32; pattern: "^[0-9a-f]{32}$"
path.dataset string Required Dataset name to query. Examples: access-logins, gateway-http, gateway-dns, gateway-http, shadow-it.
body — Required $ref: "#/definitions/art_QueryTimeseries"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dataset": "shadow_it"
  },
  "body": {
    "from": "2024-11-05T00:00:00Z",
    "to": "2024-11-06T00:00:00Z",
    "groupBy": [
      "country",
      "allowed"
    ],
    "stats": [
      "attemptsTotal"
    ],
    "filters": [],
    "resolution": "hour"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query analytics top-N — cloudflare.art-analytics-query-top-n

Run Query analytics top-N with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier. maxLength: 32; pattern: "^[0-9a-f]{32}$"
path.dataset string Required Dataset name to query. Examples: access-logins, gateway-http, gateway-dns, gateway-http, shadow-it.
body — Required $ref: "#/definitions/art_QueryTopN"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dataset": "gateway-http"
  },
  "body": {
    "from": "2024-11-05T00:00:00Z",
    "to": "2024-11-06T00:00:00Z",
    "groupBy": [
      "country",
      "allowed"
    ],
    "stats": [
      "attemptsTotal"
    ],
    "filters": [],
    "n": 10,
    "orderBy": "attemptsTotal"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query analytics datasets — cloudflare.sql-api-query-get-account-scoped

Run Query analytics datasets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account that authorizes and scopes the request. pattern: "^[a-f0-9]{32}$"
query object Required additionalProperties: false
query.query string Required SQL query to execute. A trailing FORMAT selects JSON, JSONEachRow, TabSeparated, or TSV output on any dataset.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef"
  },
  "query": {
    "query": "SELECT edgeResponseStatus FROM events.httpRequests WHERE datetime > '2026-01-01' LIMIT 10"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query analytics datasets — cloudflare.sql-api-query-post-account-scoped

Run Query analytics datasets with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account that authorizes and scopes the request. pattern: "^[a-f0-9]{32}$"
body — Required $ref: "#/definitions/analytics-sql_SqlQueryRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef"
  },
  "body": {
    "params": {
      "status": 404
    },
    "query": "SELECT edgeResponseStatus FROM events.httpRequests WHERE edgeResponseStatus = $status LIMIT 10",
    "scope": {
      "accountTag": "0123456789abcdef0123456789abcdef"
    },
    "time_range": {
      "end": "2026-01-02T00:00:00Z",
      "start": "2026-01-01T00:00:00Z"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List available analytics datasets — cloudflare.sql-api-introspection-account-scoped

Run List available analytics datasets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account that authorizes and scopes the request. pattern: "^[a-f0-9]{32}$"
query object Optional additionalProperties: false
query.include_columns boolean Optional Include column metadata for each returned dataset. default: false
query.include_custom_attributes boolean Optional Include a capped set of custom attribute names and types observed during the preceding seven days, as custom_attributes. Requires a nonempty dataset_name. Deprecated in favor of include_attributes. default: false
query.include_attributes boolean Optional Include a capped set of attribute names and types observed during the preceding seven days, as attributes. Requires a nonempty dataset_name. Replaces include_custom_attributes, which is deprecated. default: false
query.include_wae boolean Optional Include Workers Analytics Engine datasets, which are discovered from the account's own data. Set to false to return only datasets described from the static catalogue, which avoids that lookup. default: true
query.include_lex boolean Optional Include Log Explorer datasets, which are listed only where the account has them. Set to false to return only datasets described from the static catalogue, which avoids that lookup. default: true
query.dataset_name string Optional Return only the dataset with this exact name. An empty value is treated as if the parameter had been omitted, and does not filter the catalogue. A name that matches no dataset in this deployment's catalogue is rejected with 422; a dataset that exists but is not describable here is rejected identically, so the two cases cannot be told apart. A Workers Analytics Engine dataset is named in full, as events.analyticsEngine.&lt;dataset_name&gt;; the namespace on its own returns every such dataset the account has. A dataset_name the account does not have is rejected with 422 like any other unknown name.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Execute an Analytics Engine SQL query via query parameter — cloudflare.analytics-engine-sql-query-get

Run Execute an Analytics Engine SQL query via query parameter with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
query object Required additionalProperties: false
query.query string Required Supply a SQL query to run against your Analytics Engine datasets. Use only SELECT statements. The service validates the query against a restricted SQL grammar before execution.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "query": "SELECT blob1, count() FROM my_dataset WHERE timestamp > NOW() - INTERVAL '1' DAY GROUP BY blob1 ORDER BY count() DESC LIMIT 10"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get count of zones with Argo Smart Routing enabled for account — cloudflare.argo-smart-routing-get-count-zones-enabled-for-account

Run Get count of zones with Argo Smart Routing enabled for account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifier of the account. $ref: "#/definitions/argo-config_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List namespaces — cloudflare.artifacts_namespaces_list

Run List namespaces with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
query object Optional additionalProperties: false
query.limit integer Optional default: 100; minimum: 1; maximum: 200
query.cursor string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a namespace — cloudflare.artifacts_namespaces_create

Run Create a namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body object Required
body.jurisdiction string Optional enum: ["unrestricted","us","eu","fedramp"]; default: "unrestricted"
body.namespace string Required minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "namespace": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a namespace — cloudflare.artifacts_namespaces_delete

Run Delete a namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a namespace — cloudflare.artifacts_namespaces_get

Run Get a namespace with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List repositories — cloudflare.artifacts_repos_list

Run List repositories with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
query object Optional additionalProperties: false
query.limit integer Optional default: 50; minimum: 1; maximum: 200
query.cursor string Optional
query.search string Optional
query.sort string Optional enum: ["created_at","updated_at","last_push_at","name"]; default: "created_at"
query.direction string Optional enum: ["asc","desc"]; default: "desc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a repository — cloudflare.artifacts_repos_create

Run Create a repository with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
body object Required
body.default_branch string Optional Git branch name. Must match /^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/, must not contain '..', and must not end with '/' or '.'. minLength: 1; maxLength: 256; pattern: "^[a-zA-Z0-9][a-zA-Z0-9._/-]*$"
body.description string Optional maxLength: 1024
body.name string Required pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"
body.read_only boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a repository — cloudflare.artifacts_repos_delete

Run Delete a repository with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
path.name string Required Repository name. pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example",
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a repository — cloudflare.artifacts_repos_get

Run Get a repository with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
path.name string Required Repository name. pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example",
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Read a Git commit — cloudflare.artifacts_repos_commit_get

Run Read a Git commit with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
path.name string Required Repository name. pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"
path.hash string Required 40-character lowercase hexadecimal Git object hash. pattern: "^[0-9a-f]{40}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example",
    "name": "example",
    "hash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fork a repository — cloudflare.artifacts_repos_fork

Run Fork a repository with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
path.name string Required Repository name. pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"
body object Required
body.default_branch_only boolean Optional
body.description string Optional maxLength: 1024
body.name string Required pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"
body.read_only boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example",
    "name": "example"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Import a repository — cloudflare.artifacts_repos_import

Run Import a repository with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
path.name string Required Repository name. pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"
body object Required
body.branch string Optional Git branch name. Must match /^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/, must not contain '..', and must not end with '/' or '.'. minLength: 1; maxLength: 256; pattern: "^[a-zA-Z0-9][a-zA-Z0-9._/-]*$"
body.depth integer Optional minimum: 1; maximum: 9007199254740991
body.read_only boolean Optional
body.url string Required format: "uri"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example",
    "name": "example"
  },
  "body": {
    "url": "https://example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Read commit history — cloudflare.artifacts_repos_log_get

Run Read commit history with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
path.name string Required Repository name. pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"
query object Optional additionalProperties: false
query.ref string Optional Git ref, branch, tag, or commit hash. Defaults to HEAD. minLength: 1
query.limit integer Optional minimum: 1; maximum: 1000
query.offset integer Optional minimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example",
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Read a raw file with content type — cloudflare.artifacts_repos_raw_get

Run Read a raw file with content type with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
path.name string Required Repository name. pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"
path.ref string Required Git ref, branch, tag, or 40-character commit hash. minLength: 1
path.path string Required File path. May contain slashes. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example",
    "name": "example",
    "ref": "heads/main",
    "path": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List repository tokens — cloudflare.artifacts_repo_tokens_list

Run List repository tokens with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
path.name string Required Repository name. pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"
query object Optional additionalProperties: false
query.state string Optional enum: ["active","expired","revoked","all"]; default: "active"
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 30; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example",
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Read a Git tree — cloudflare.artifacts_repos_tree_get

Run Read a Git tree with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
path.name string Required Repository name. pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"
path.hash string Required 40-character lowercase hexadecimal Git object hash. pattern: "^[0-9a-f]{40}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example",
    "name": "example",
    "hash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a repository token — cloudflare.artifacts_tokens_create

Run Create a repository token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.namespace string Required Artifacts namespace name. minLength: 2; maxLength: 63; pattern: "^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9._])?$"
body object Required
body.repo string Required pattern: "^[a-zA-Z0-9][a-zA-Z0-9._-]*$"
body.scope string Optional enum: ["read","write"]
body.ttl integer Optional minimum: 60; maximum: 31536000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "namespace": "example"
  },
  "body": {
    "repo": "hello-world"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account audit logs — cloudflare.audit-logs-get-account-audit-logs

Run Get account audit logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/aaa_identifier"
query object Optional additionalProperties: false
query.id string Optional Finds a specific log by its ID.
query.export boolean Optional Indicates that this request is an export of logs in CSV format.
query.action.type string Optional Filters by the action type.
query.actor.ip string Optional Filters by the IP address of the request that made the change by specific IP address or valid CIDR Range.
query.actor.email string Optional Filters by the email address of the actor that made the change. format: "email"
query.since — Optional
query.since string Optional Limits the returned results to logs newer than the specified date. A full-date that conforms to RFC3339. oneOf[1]; format: "date"
query.since string Optional Limits the returned results to logs newer than the specified date. A date-time that conforms to RFC3339. oneOf[2]; format: "date-time"
query.before — Optional
query.before string Optional Limits the returned results to logs older than the specified date. A full-date that conforms to RFC3339. oneOf[1]; format: "date"
query.before string Optional Limits the returned results to logs older than the specified date. A date-time that conforms to RFC3339. oneOf[2]; format: "date-time"
query.zone.name string Optional Filters by the name of the zone associated to the change.
query.direction string Optional Changes the direction of the chronological sorting. enum: ["desc","asc"]; default: "desc"
query.per_page number Optional Sets the number of results to return per page. default: 100; minimum: 1; maximum: 1000
query.page number Optional Defines which page of results to return. default: 1; minimum: 1
query.hide_user_logs boolean Optional Indicates whether or not to hide user level audit logs. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Files — cloudflare.autorag-config-files

Run Files with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required rag id minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 0; maximum: 50
query.search string Optional
query.status string Optional enum: ["completed","queued","running","error"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-rag",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Jobs — cloudflare.autorag-config-list-jobs

Run List Jobs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required rag id minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 0; maximum: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-rag",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Job Details — cloudflare.autorag-config-get-job

Run Get a Job Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required rag id minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.job_id string Required
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-rag",
    "job_id": "example",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Job Logs — cloudflare.autorag-config-list-job-logs

Run List Job Logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required rag id minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.job_id string Required
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 0; maximum: 500

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-rag",
    "job_id": "example",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Sync — cloudflare.autorag-config-sync

Run Sync with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required rag id minLength: 1; maxLength: 32; pattern: "^[a-z0-9_]+(?:-[a-z0-9_]+)*$"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "my-rag",
    "account_id": "c3dc5f0b34a14ff8e1b3ec04895e1b22"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Basin Catalogs — cloudflare.basin-list-catalogs

Run List Basin Catalogs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Basin Catalog details — cloudflare.basin-get-catalog-details

Run Get Basin Catalog details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name. $ref: "#/definitions/r2-data-catalog_bucket-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Store catalog credentials — cloudflare.basin-store-credentials

Run Store catalog credentials with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name. $ref: "#/definitions/r2-data-catalog_bucket-name"
body — Required $ref: "#/definitions/r2-data-catalog_catalog-credential-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket"
  },
  "body": {
    "token": "your-cloudflare-api-token-here"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Basin Catalog credential status — cloudflare.basin-get-credential-status

Run Get Basin Catalog credential status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name. $ref: "#/definitions/r2-data-catalog_bucket-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Basin Catalog metadata — cloudflare.basin-delete-catalog

Run Delete Basin Catalog metadata with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required $ref: "#/definitions/r2-data-catalog_bucket-name"
query object Optional additionalProperties: false
query.force boolean Optional Remove child metadata before deleting the catalog. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Disable Basin Catalog — cloudflare.basin-disable-catalog

Run Disable Basin Catalog with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name to disable as catalog. $ref: "#/definitions/r2-data-catalog_bucket-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Enable R2 bucket as a catalog — cloudflare.basin-enable-catalog

Run Enable R2 bucket as a catalog with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name to enable as catalog. $ref: "#/definitions/r2-data-catalog_bucket-name"
body — Optional $ref: "#/definitions/r2-data-catalog_catalog-activation-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get catalog maintenance configuration — cloudflare.basin-get-maintenance-config

Run Get catalog maintenance configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name. $ref: "#/definitions/r2-data-catalog_bucket-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update catalog maintenance configuration — cloudflare.basin-update-maintenance-config

Run Update catalog maintenance configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name. $ref: "#/definitions/r2-data-catalog_bucket-name"
body — Required $ref: "#/definitions/r2-data-catalog_catalog-maintenance-update-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List namespaces in catalog — cloudflare.basin-list-namespaces

Run List namespaces in catalog with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name. $ref: "#/definitions/r2-data-catalog_bucket-name"
query object Optional additionalProperties: false
query.page_token string Optional Opaque pagination token from a previous response. Use this to fetch the next page of results.
query.page_size integer Optional Maximum number of namespaces to return per page. Defaults to 100, maximum 1000. default: 100; minimum: 1; maximum: 1000
query.parent string Optional Parent namespace to filter by. Only returns direct children of this namespace. For nested namespaces, use %1F as separator (e.g., "bronze%1Fanalytics"). Omit this parameter to list top-level namespaces.
query.return_uuids boolean Optional Whether to include namespace UUIDs in the response. Set to true to receive the namespace_uuids array. default: false
query.return_details boolean Optional Whether to include additional metadata (timestamps). When true, response includes created_at and updated_at arrays. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tables in namespace — cloudflare.basin-list-tables

Run List tables in namespace with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name. $ref: "#/definitions/r2-data-catalog_bucket-name"
path.namespace string Required The namespace identifier. For nested namespaces, use %1F as separator (e.g., "bronze%1Fanalytics").
query object Optional additionalProperties: false
query.page_token string Optional Opaque pagination token from a previous response. Use this to fetch the next page of results.
query.page_size integer Optional Maximum number of tables to return per page. Defaults to 100, maximum 1000. default: 100; minimum: 1; maximum: 1000
query.return_uuids boolean Optional Whether to include table UUIDs in the response. Set to true to receive the table_uuids array. default: false
query.return_details boolean Optional Whether to include additional metadata (timestamps, locations). When true, response includes created_at, updated_at, metadata_locations, and locations arrays. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket",
    "namespace": "bronze"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get table details — cloudflare.basin-get-table

Run Get table details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name. $ref: "#/definitions/r2-data-catalog_bucket-name"
path.namespace string Required The namespace identifier. For nested namespaces, use %1F as separator (e.g., "bronze%1Fanalytics").
path.table_name string Required The table name within the given namespace.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket",
    "namespace": "bronze",
    "table_name": "events"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get table maintenance configuration — cloudflare.basin-get-table-maintenance-config

Run Get table maintenance configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name. $ref: "#/definitions/r2-data-catalog_bucket-name"
path.namespace string Required The namespace identifier (use %1F as separator for nested namespaces).
path.table_name string Required The table name.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket",
    "namespace": "example",
    "table_name": "my_table"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update table maintenance configuration — cloudflare.basin-update-table-maintenance-config

Run Update table maintenance configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the account. $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required Specifies the R2 bucket name. $ref: "#/definitions/r2-data-catalog_bucket-name"
path.namespace string Required The namespace identifier (use %1F as separator for nested namespaces).
path.table_name string Required The table name.
body — Required $ref: "#/definitions/r2-data-catalog_table-maintenance-update-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket",
    "namespace": "example",
    "table_name": "my_table"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Queue table maintenance — cloudflare.basin-queue-table-maintenance

Run Queue table maintenance with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required $ref: "#/definitions/r2-data-catalog_bucket-name"
path.namespace string Required
path.table_name string Required
path.configuration_type string Required enum: ["compaction","snapshot_expiration"]
body — Required $ref: "#/definitions/r2-data-catalog_queue-maintenance-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket",
    "namespace": "example",
    "table_name": "example",
    "configuration_type": "compaction"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List table maintenance runs — cloudflare.basin-list-table-maintenance-runs

Run List table maintenance runs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2-data-catalog_account-id"
path.bucket_name — Required $ref: "#/definitions/r2-data-catalog_bucket-name"
path.namespace string Required
path.table_name string Required
query object Optional additionalProperties: false
query.page_size integer Optional minimum: 1; maximum: 100
query.page_token string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123456789abcdef0123456789abcdef",
    "bucket_name": "my-data-bucket",
    "namespace": "example",
    "table_name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Account Billable Usage (Version 1, Alpha) — cloudflare.billable-usage-get-v1-account-usage

Run Get Account Billable Usage (Version 1, Alpha) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account. $ref: "#/definitions/billable-usage-api_identifier"
query object Optional additionalProperties: false
query.from string Optional Start date for the usage query (ISO 8601). The provided time range must include the subscription billing cycle anchor day, otherwise no usage data is returned. Use the info endpoint to retrieve the subscription anchor day. format: "date"
query.to string Optional End date for the usage query (ISO 8601). format: "date"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Account Billable Usage Info (Version 1, Alpha) — cloudflare.billable-usage-get-v1-account-usage-info

Run Get Account Billable Usage Info (Version 1, Alpha) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account. $ref: "#/definitions/billable-usage-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Account Usage (Version 2, Alpha, Restricted) — cloudflare.billable-usage-v2-get-account-usage

Run Get Account Usage (Version 2, Alpha, Restricted) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account. $ref: "#/definitions/billable-usage-api_identifier"
query object Optional additionalProperties: false
query.from string Optional Start date for the usage query (ISO 8601). Required if to is set. When omitted along with to, defaults to the start of the current month. Filters by charge period (when consumption happened), not billing period. The maximum date range is 31 days. format: "date"
query.to string Optional End date for the usage query (ISO 8601). Required if from is set. When omitted along with from, defaults to today. Filters by charge period (when consumption happened), not billing period. The maximum date range is 31 days. format: "date"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query Account Usage (Version 2, Alpha, Restricted) — cloudflare.billable-usage-v2-query-account-usage

Run Query Account Usage (Version 2, Alpha, Restricted) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account. $ref: "#/definitions/billable-usage-api_identifier"
body — Optional $ref: "#/definitions/billable-usage-api_v2_usage_query"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Account Billable Metrics (Version 2, Alpha, Restricted) — cloudflare.billable-usage-v2-get-account-billable-metrics

Run List Account Billable Metrics (Version 2, Alpha, Restricted) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account. $ref: "#/definitions/billable-usage-api_identifier"
query object Optional additionalProperties: false
query.from string Optional Start date for the usage query (ISO 8601). Required if to is set. When omitted along with to, defaults to the start of the current month. Filters by charge period (when consumption happened), not billing period. The maximum date range is 31 days. format: "date"
query.to string Optional End date for the usage query (ISO 8601). Required if from is set. When omitted along with from, defaults to today. Filters by charge period (when consumption happened), not billing period. The maximum date range is 31 days. format: "date"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Account Bad Debt — cloudflare.account-billing-get-bad-debt

Run Get Account Bad Debt with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Account Credits — cloudflare.account-billing-get-credits

Run Get Account Credits with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Account Billing History — cloudflare.account-billing-history-get-billing-history

Run Get Account Billing History with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Number of items per page. default: 20; minimum: 1
query.status string Optional Filter billing history by status.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Billing Profile — cloudflare.account-billing-profile-delete-billing-profile

Run Delete Billing Profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Billing Profile — cloudflare.account-billing-profile-get-billing-profile

Run Get Billing Profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Billing Email — cloudflare.account-billing-profile-update-billing-email

Run Update Billing Email with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body object Required
body.billing_email string Optional
body.preferred_locale string Optional
body.secondary_billing_email string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Billing Profile — cloudflare.account-billing-profile-create-billing-profile

Run Create Billing Profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_billing_profile_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Billing Profile — cloudflare.account-billing-profile-update-billing-profile

Run Update Billing Profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_billing_profile_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Payment Intent for Billing Profile — cloudflare.account-billing-create-payment-intent

Run Create Payment Intent for Billing Profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Spend Policies — cloudflare.spend-policies-list

Run List Spend Policies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account (account tag). $ref: "#/definitions/billing-spend-policies_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Spend Policy — cloudflare.spend-policies-create

Run Create Spend Policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account (account tag). $ref: "#/definitions/billing-spend-policies_identifier"
body — Required $ref: "#/definitions/billing-spend-policies_policy_input"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Workers cap",
    "product_id": "workers",
    "enabled": true,
    "threshold_cents": 100,
    "action": "notification"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Spend Policy Activity — cloudflare.spend-policies-activity

Run List Spend Policy Activity with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account (account tag). $ref: "#/definitions/billing-spend-policies_identifier"
query object Optional additionalProperties: false
query.limit integer Optional Maximum number of audit entries to return. Defaults to 50. Values above 100 are capped at 100 rather than rejected. default: 50; minimum: 1
query.cursor string Optional Opaque token from the preceding response's result_info.cursor. Pass it unchanged to retrieve older entries. maxLength: 1024

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Spend Policy — cloudflare.spend-policies-delete

Run Delete Spend Policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account (account tag). $ref: "#/definitions/billing-spend-policies_identifier"
path.policy_id — Required Identifies the spend policy. $ref: "#/definitions/billing-spend-policies_policy_id"
headers object Required additionalProperties: false
headers.If-Match string Required The policy version the change is based on, as returned in ETag. Quoted ("3") and bare (3) values are both accepted. Weak ETags (W/"3") and * are not. pattern: "^\"?[1-9][0-9]*\"?$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "6f1c2b8e-3d4a-4f5b-9c6d-7e8f9a0b1c2d"
  },
  "headers": {
    "If-Match": "\"3\""
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Spend Policy — cloudflare.spend-policies-get

Run Get Spend Policy with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account (account tag). $ref: "#/definitions/billing-spend-policies_identifier"
path.policy_id — Required Identifies the spend policy. $ref: "#/definitions/billing-spend-policies_policy_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "6f1c2b8e-3d4a-4f5b-9c6d-7e8f9a0b1c2d"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Spend Policy — cloudflare.spend-policies-update

Run Update Spend Policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account (account tag). $ref: "#/definitions/billing-spend-policies_identifier"
path.policy_id — Required Identifies the spend policy. $ref: "#/definitions/billing-spend-policies_policy_id"
headers object Required additionalProperties: false
headers.If-Match string Required The policy version the change is based on, as returned in ETag. Quoted ("3") and bare (3) values are both accepted. Weak ETags (W/"3") and * are not. pattern: "^\"?[1-9][0-9]*\"?$"
body — Required $ref: "#/definitions/billing-spend-policies_policy_input"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "6f1c2b8e-3d4a-4f5b-9c6d-7e8f9a0b1c2d"
  },
  "headers": {
    "If-Match": "\"3\""
  },
  "body": {
    "name": "Workers cap",
    "product_id": "workers",
    "enabled": true,
    "threshold_cents": 100,
    "action": "notification"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Spend Policy Audit Entries — cloudflare.spend-policies-list-audit

Run List Spend Policy Audit Entries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifies the Cloudflare account (account tag). $ref: "#/definitions/billing-spend-policies_identifier"
path.policy_id — Required Identifies the spend policy. $ref: "#/definitions/billing-spend-policies_policy_id"
query object Optional additionalProperties: false
query.limit integer Optional Maximum number of audit entries to return. Defaults to 50. Values above 100 are capped at 100 rather than rejected. default: 50; minimum: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "6f1c2b8e-3d4a-4f5b-9c6d-7e8f9a0b1c2d"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Unpaid Invoices — cloudflare.account-billing-get-unpaid-invoices

Run Get Unpaid Invoices with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account billing usage — cloudflare.usage-analytics-get-account-billing-usage

Run Get account billing usage with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Standard Cloudflare hex account identifier. The API gateway translates this to an internal numeric ID before forwarding to the backend service. $ref: "#/definitions/usage-analytics_identifier"
query object Optional additionalProperties: false
query.metrics string Optional Comma-separated list of metrics to include in the response. Available metrics depend on the endpoint. Billing usage supports: streamMinutesViewed, rateLimitingRequestsAllowed, loadBalancingQueries, argoAcceleratedBytes, workersRequests, workersKVReads, imageResizingRequests, spectrumBytesTransferred, mediaUniqueTransformations. Stream/media usage supports: streamMinutesViewed.
query.since string Optional Start of the time range for the query (inclusive). ISO 8601 timestamp. Defaults to 6 hours before the current time. format: "date-time"
query.until string Optional End of the time range for the query (inclusive). ISO 8601 timestamp. Defaults to the current time. format: "date-time"
query.time_delta string Optional Time unit to aggregate usage observations into. Data retention is approximately 18 months. The effective number of data points returned depends on the time range and granularity selected. For example, requesting hourly granularity over 18 months could produce up to ~13,000 data points; use the limit parameter to cap results and be aware that responses may be truncated. enum: ["hour","day","week","month","quarter","year"]; default: "hour"
query.limit integer Optional Maximum number of data points to return. The actual number of results depends on the interaction between the time range (since/until) and time_delta granularity. Results are truncated to this limit without error if the time range produces more data points than the limit allows. default: 100; minimum: 1; maximum: 10000
query.filters string Optional Filter expressions to apply to the query. Format: field==value. Multiple filters can be combined.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get daily report — cloudflare.botnet-threat-feed-get-day-report

Run Get daily report with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/botnet-feed-api_identifier"
path.asn_id — Required $ref: "#/definitions/botnet-feed-api_asn"
query object Optional additionalProperties: false
query.date — Optional $ref: "#/definitions/botnet-feed-api_timestamp"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "asn_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get full report — cloudflare.botnet-threat-feed-get-full-report

Run Get full report with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/botnet-feed-api_identifier"
path.asn_id — Required $ref: "#/definitions/botnet-feed-api_asn"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "asn_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get list of ASNs — cloudflare.botnet-threat-feed-list-asn

Run Get list of ASNs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/botnet-feed-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an ASN — cloudflare.botnet-threat-feed-delete-asn

Run Delete an ASN with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/botnet-feed-api_identifier"
path.asn_id — Required $ref: "#/definitions/botnet-feed-api_asn"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "asn_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Read matches for logo queries by ID — cloudflare.getaccountsaccountidbrandprotectionlogomatches

Run Read matches for logo queries by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Optional additionalProperties: false
query.logo_id array Optional
query.logo_id[] string Optional
query.offset string Optional
query.limit string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Download matches for logo queries by ID — cloudflare.getaccountsaccountidbrandprotectionlogomatchesdownload

Run Download matches for logo queries by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Optional additionalProperties: false
query.logo_id array Optional
query.logo_id[] string Optional
query.offset string Optional
query.limit string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete saved logo queries by ID — cloudflare.deleteaccountsaccountidbrandprotectionlogoslogoid

Run Delete saved logo queries by ID with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.logo_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "logo_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Read matches for string queries by ID — cloudflare.getaccountsaccountidbrandprotectionmatches

Run Read matches for string queries by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Optional additionalProperties: false
query.id string Optional
query.offset integer Optional
query.limit integer Optional
query.include_domain_id boolean Optional
query.include_dismissed boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Download matches for string queries by ID — cloudflare.getaccountsaccountidbrandprotectionmatchesdownload

Run Download matches for string queries by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Optional additionalProperties: false
query.id string Optional
query.offset integer Optional
query.limit integer Optional
query.include_domain_id boolean Optional
query.include_dismissed boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete saved string queries by ID — cloudflare.deleteaccountsaccountidbrandprotectionqueries

Run Delete saved string queries by ID with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Optional additionalProperties: false
query.id string Optional
query.tag string Optional
query.scan boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create new saved string queries — cloudflare.postaccountsaccountidbrandprotectionqueries

Run Create new saved string queries with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Optional additionalProperties: false
query.id string Optional
query.tag string Optional
query.scan boolean Optional
body — Required $ref: "#/definitions/brand-protection-api_Query"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create new saved string queries in bulk — cloudflare.postaccountsaccountidbrandprotectionqueriesbulk

Run Create new saved string queries in bulk with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body — Required $ref: "#/definitions/brand-protection-api_QueryBulk"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create new URL submissions — cloudflare.postaccountsaccountidbrandprotectionsubmit

Run Create new URL submissions with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Read submitted URLs by ID — cloudflare.getaccountsaccountidbrandprotectionurlinfo

Run Read submitted URLs by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete browser extension configuration — cloudflare.accounts-browser-extension-config-delete

Run Delete browser extension configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get browser extension configuration — cloudflare.accounts-browser-extension-config-get

Run Get browser extension configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create browser extension configuration — cloudflare.accounts-browser-extension-config-post

Run Create browser extension configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID. minLength: 1
body — Required $ref: "#/definitions/brex_CreateConfigRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "config": {
      "team_name": "example"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update browser extension configuration — cloudflare.accounts-browser-extension-config-put

Run Update browser extension configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID. minLength: 1
body — Required $ref: "#/definitions/brex_UpdateConfigRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "config": {
      "team_name": "example"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List browser extension inventories — cloudflare.accounts-browser-extension-inventories-list

Run List browser extension inventories with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID. minLength: 1
query object Optional additionalProperties: false
query.cursor string Optional Opaque cursor from a previous response to fetch the next page.
query.per_page integer Optional Number of results per page (default 50, max 200). default: 50; minimum: 1; maximum: 200

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a single browser extension inventory — cloudflare.accounts-browser-extension-inventories-get

Run Get a single browser extension inventory with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID. minLength: 1
path.registration_id string Required Browser extension registration ID. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "registration_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query browser extension event timeseries — cloudflare.accounts-browser-extension-config-extension-events-timeseries

Run Query browser extension event timeseries with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID. minLength: 1
body — Required $ref: "#/definitions/brex_ExtensionEventsTimeseriesRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "from": "2026-01-01T00:00:00Z",
    "to": "2026-01-01T00:00:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get accessibility tree page — cloudflare.brapi-post_accessibilitytree

Run Get accessibility tree page with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.cacheTTL number Optional Cache TTL default is 5s. Set to 0 to disable. default: 5; minimum: 0; maximum: 86400
query.browser string Optional Rendering backend. Set to kitesurf to use Kitesurf (beta). enum: ["kitesurf"]
body object Required additionalProperties: false
body.actionTimeout number Optional The maximum duration allowed for the browser action to complete after the page has loaded (such as taking screenshots, extracting content, or generating PDFs). If this time limit is exceeded, the action stops and returns a timeout error. maximum: 120000
body.addScriptTag array Optional Adds a script element into the page with the desired URL or content.
body.addScriptTag[] object Optional additionalProperties: false
body.addScriptTag[].content string Optional
body.addScriptTag[].id string Optional
body.addScriptTag[].type string Optional
body.addScriptTag[].url string Optional format: "uri"
body.addStyleTag array Optional Adds a &lt;link rel="stylesheet"&gt; tag into the page with the desired URL or a &lt;style type="text/css"&gt; tag with the content.
body.addStyleTag[] object Optional
body.addStyleTag[].content string Optional
body.addStyleTag[].url string Optional format: "uri"
body.allowRequestPattern array Optional Only allow requests that match the provided regex patterns, eg. '/^.*.(css)'. Reject rules are applied first.
body.allowRequestPattern[] string Optional
body.allowResourceTypes array Optional Only allow requests that match the provided resource types, eg. 'image' or 'script'. Reject rules are applied first.
body.allowResourceTypes[] — Optional
body.allowResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.allowResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.allowResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.allowResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.allowResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.allowResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.allowResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.allowResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.allowResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.allowResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.allowResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.allowResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.allowResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.allowResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.allowResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.allowResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.allowResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.allowResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.authenticate object Optional Provide credentials for HTTP authentication.
body.authenticate.password string Required minLength: 1
body.authenticate.username string Required minLength: 1
body.bestAttempt boolean Optional Attempt to proceed when 'awaited' events fail or timeout.
body.cookies array Optional Check options.
body.cookies[] object Optional
body.cookies[].domain string Optional
body.cookies[].expires number Optional
body.cookies[].httpOnly boolean Optional
body.cookies[].name string Required Cookie name.
body.cookies[].partitionKey string Optional
body.cookies[].path string Optional
body.cookies[].priority — Optional
body.cookies[].priority string Optional anyOf[1]; enum: ["Low"]
body.cookies[].priority string Optional anyOf[2]; enum: ["Medium"]
body.cookies[].priority string Optional anyOf[3]; enum: ["High"]
body.cookies[].sameParty boolean Optional
body.cookies[].sameSite — Optional
body.cookies[].sameSite string Optional anyOf[1]; enum: ["Strict"]
body.cookies[].sameSite string Optional anyOf[2]; enum: ["Lax"]
body.cookies[].sameSite string Optional anyOf[3]; enum: ["None"]
body.cookies[].secure boolean Optional
body.cookies[].sourcePort number Optional
body.cookies[].sourceScheme — Optional
body.cookies[].sourceScheme string Optional anyOf[1]; enum: ["Unset"]
body.cookies[].sourceScheme string Optional anyOf[2]; enum: ["NonSecure"]
body.cookies[].sourceScheme string Optional anyOf[3]; enum: ["Secure"]
body.cookies[].url string Optional
body.cookies[].value string Required
body.emulateMediaType string Optional
body.gotoOptions object Optional Check options. default: {}
body.gotoOptions.referer string Optional
body.gotoOptions.referrerPolicy string Optional
body.gotoOptions.timeout number Optional default: 30000; maximum: 60000
body.gotoOptions.waitUntil — Optional default: "domcontentloaded"
body.gotoOptions.waitUntil string Optional anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil string Optional anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil string Optional anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil string Optional anyOf[4]; enum: ["networkidle2"]
body.gotoOptions.waitUntil array Optional anyOf[5]
body.gotoOptions.waitUntil[] — Optional anyOf[5]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[4]; enum: ["networkidle2"]
body.html string Optional Set the content of the page, eg: &lt;h1&gt;Hello World!!&lt;/h1&gt;. Either html or url must be set. minLength: 1
body.interestingOnly boolean Optional
body.rejectRequestPattern array Optional Block undesired requests that match the provided regex patterns, eg. '/^.*.(css)'.
body.rejectRequestPattern[] string Optional
body.rejectResourceTypes array Optional Block undesired requests that match the provided resource types, eg. 'image' or 'script'.
body.rejectResourceTypes[] — Optional
body.rejectResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.rejectResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.rejectResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.rejectResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.rejectResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.rejectResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.rejectResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.rejectResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.rejectResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.rejectResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.rejectResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.rejectResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.rejectResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.rejectResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.rejectResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.rejectResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.rejectResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.rejectResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.root string Optional
body.setExtraHTTPHeaders object Optional additionalProperties: {"type":"string"}
body.setJavaScriptEnabled boolean Optional
body.url string Optional URL to navigate to, eg. https://example.com. format: "uri"
body.userAgent string Optional default: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
body.viewport object Optional Check options. default: {"height":1080,"width":1920}
body.viewport.deviceScaleFactor number Optional
body.viewport.hasTouch boolean Optional
body.viewport.height number Required
body.viewport.isLandscape boolean Optional
body.viewport.isMobile boolean Optional
body.viewport.width number Required
body.waitForSelector object Optional Wait for the selector to appear in page. Check options.
body.waitForSelector.hidden boolean Optional enum: [true]
body.waitForSelector.selector string Required
body.waitForSelector.timeout number Optional maximum: 120000
body.waitForSelector.visible boolean Optional enum: [true]
body.waitForTimeout number Optional Waits for a specified timeout before continuing. maximum: 120000
body object Required oneOf[1]
body.html string Optional oneOf[1]
body.url string Required oneOf[1]
body object Required oneOf[2]
body.html string Required oneOf[2]
body.url string Optional oneOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "url": "https://www.example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get HTML content. — cloudflare.brapi-post_content

Run Get HTML content. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.cacheTTL number Optional Cache TTL default is 5s. Set to 0 to disable. default: 5; minimum: 0; maximum: 86400
query.browser string Optional Rendering backend. Set to kitesurf to use Kitesurf (beta). enum: ["kitesurf"]
body object Required additionalProperties: false
body.actionTimeout number Optional The maximum duration allowed for the browser action to complete after the page has loaded (such as taking screenshots, extracting content, or generating PDFs). If this time limit is exceeded, the action stops and returns a timeout error. maximum: 120000
body.addScriptTag array Optional Adds a script element into the page with the desired URL or content.
body.addScriptTag[] object Optional additionalProperties: false
body.addScriptTag[].content string Optional
body.addScriptTag[].id string Optional
body.addScriptTag[].type string Optional
body.addScriptTag[].url string Optional format: "uri"
body.addStyleTag array Optional Adds a &lt;link rel="stylesheet"&gt; tag into the page with the desired URL or a &lt;style type="text/css"&gt; tag with the content.
body.addStyleTag[] object Optional
body.addStyleTag[].content string Optional
body.addStyleTag[].url string Optional format: "uri"
body.allowRequestPattern array Optional Only allow requests that match the provided regex patterns, eg. '/^.*.(css)'. Reject rules are applied first.
body.allowRequestPattern[] string Optional
body.allowResourceTypes array Optional Only allow requests that match the provided resource types, eg. 'image' or 'script'. Reject rules are applied first.
body.allowResourceTypes[] — Optional
body.allowResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.allowResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.allowResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.allowResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.allowResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.allowResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.allowResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.allowResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.allowResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.allowResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.allowResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.allowResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.allowResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.allowResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.allowResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.allowResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.allowResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.allowResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.authenticate object Optional Provide credentials for HTTP authentication.
body.authenticate.password string Required minLength: 1
body.authenticate.username string Required minLength: 1
body.bestAttempt boolean Optional Attempt to proceed when 'awaited' events fail or timeout.
body.cookies array Optional Check options.
body.cookies[] object Optional
body.cookies[].domain string Optional
body.cookies[].expires number Optional
body.cookies[].httpOnly boolean Optional
body.cookies[].name string Required Cookie name.
body.cookies[].partitionKey string Optional
body.cookies[].path string Optional
body.cookies[].priority — Optional
body.cookies[].priority string Optional anyOf[1]; enum: ["Low"]
body.cookies[].priority string Optional anyOf[2]; enum: ["Medium"]
body.cookies[].priority string Optional anyOf[3]; enum: ["High"]
body.cookies[].sameParty boolean Optional
body.cookies[].sameSite — Optional
body.cookies[].sameSite string Optional anyOf[1]; enum: ["Strict"]
body.cookies[].sameSite string Optional anyOf[2]; enum: ["Lax"]
body.cookies[].sameSite string Optional anyOf[3]; enum: ["None"]
body.cookies[].secure boolean Optional
body.cookies[].sourcePort number Optional
body.cookies[].sourceScheme — Optional
body.cookies[].sourceScheme string Optional anyOf[1]; enum: ["Unset"]
body.cookies[].sourceScheme string Optional anyOf[2]; enum: ["NonSecure"]
body.cookies[].sourceScheme string Optional anyOf[3]; enum: ["Secure"]
body.cookies[].url string Optional
body.cookies[].value string Required
body.emulateMediaType string Optional
body.gotoOptions object Optional Check options. default: {}
body.gotoOptions.referer string Optional
body.gotoOptions.referrerPolicy string Optional
body.gotoOptions.timeout number Optional default: 30000; maximum: 60000
body.gotoOptions.waitUntil — Optional default: "domcontentloaded"
body.gotoOptions.waitUntil string Optional anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil string Optional anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil string Optional anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil string Optional anyOf[4]; enum: ["networkidle2"]
body.gotoOptions.waitUntil array Optional anyOf[5]
body.gotoOptions.waitUntil[] — Optional anyOf[5]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[4]; enum: ["networkidle2"]
body.html string Optional Set the content of the page, eg: &lt;h1&gt;Hello World!!&lt;/h1&gt;. Either html or url must be set. minLength: 1
body.rejectRequestPattern array Optional Block undesired requests that match the provided regex patterns, eg. '/^.*.(css)'.
body.rejectRequestPattern[] string Optional
body.rejectResourceTypes array Optional Block undesired requests that match the provided resource types, eg. 'image' or 'script'.
body.rejectResourceTypes[] — Optional
body.rejectResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.rejectResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.rejectResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.rejectResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.rejectResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.rejectResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.rejectResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.rejectResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.rejectResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.rejectResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.rejectResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.rejectResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.rejectResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.rejectResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.rejectResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.rejectResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.rejectResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.rejectResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.setExtraHTTPHeaders object Optional additionalProperties: {"type":"string"}
body.setJavaScriptEnabled boolean Optional
body.url string Optional URL to navigate to, eg. https://example.com. format: "uri"
body.userAgent string Optional default: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
body.viewport object Optional Check options. default: {"height":1080,"width":1920}
body.viewport.deviceScaleFactor number Optional
body.viewport.hasTouch boolean Optional
body.viewport.height number Required
body.viewport.isLandscape boolean Optional
body.viewport.isMobile boolean Optional
body.viewport.width number Required
body.waitForSelector object Optional Wait for the selector to appear in page. Check options.
body.waitForSelector.hidden boolean Optional enum: [true]
body.waitForSelector.selector string Required
body.waitForSelector.timeout number Optional maximum: 120000
body.waitForSelector.visible boolean Optional enum: [true]
body.waitForTimeout number Optional Waits for a specified timeout before continuing. maximum: 120000
body object Required oneOf[1]
body.html string Optional oneOf[1]
body.url string Required oneOf[1]
body object Required oneOf[2]
body.html string Required oneOf[2]
body.url string Optional oneOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "url": "https://www.example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Crawl websites. — cloudflare.brapi-post_crawl

Run Crawl websites. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.cacheTTL number Optional Cache TTL default is 5s. Set to 0 to disable. default: 5; minimum: 0; maximum: 86400
body — Required
body object Required anyOf[1]; additionalProperties: false
body.actionTimeout number Optional The maximum duration allowed for the browser action to complete after the page has loaded (such as taking screenshots, extracting content, or generating PDFs). If this time limit is exceeded, the action stops and returns a timeout error. anyOf[1]; maximum: 120000
body.addScriptTag array Optional Adds a script element into the page with the desired URL or content. anyOf[1]
body.addScriptTag[] object Optional anyOf[1]; additionalProperties: false
body.addScriptTag[].content string Optional anyOf[1]
body.addScriptTag[].id string Optional anyOf[1]
body.addScriptTag[].type string Optional anyOf[1]
body.addScriptTag[].url string Optional anyOf[1]; format: "uri"
body.addStyleTag array Optional Adds a &lt;link rel="stylesheet"&gt; tag into the page with the desired URL or a &lt;style type="text/css"&gt; tag with the content. anyOf[1]
body.addStyleTag[] object Optional anyOf[1]
body.addStyleTag[].content string Optional anyOf[1]
body.addStyleTag[].url string Optional anyOf[1]; format: "uri"
body.allowRequestPattern array Optional Only allow requests that match the provided regex patterns, eg. '/^.*.(css)'. Reject rules are applied first. anyOf[1]
body.allowRequestPattern[] string Optional anyOf[1]
body.allowResourceTypes array Optional Only allow requests that match the provided resource types, eg. 'image' or 'script'. Reject rules are applied first. anyOf[1]
body.allowResourceTypes[] — Optional anyOf[1]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[1]; enum: ["document"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[2]; enum: ["stylesheet"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[3]; enum: ["image"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[4]; enum: ["media"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[5]; enum: ["font"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[6]; enum: ["script"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[7]; enum: ["texttrack"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[8]; enum: ["xhr"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[9]; enum: ["fetch"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[10]; enum: ["prefetch"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[11]; enum: ["eventsource"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[12]; enum: ["websocket"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[13]; enum: ["manifest"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[14]; enum: ["signedexchange"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[15]; enum: ["ping"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[16]; enum: ["cspviolationreport"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[17]; enum: ["preflight"]
body.allowResourceTypes[] string Optional anyOf[1]; anyOf[18]; enum: ["other"]
body.authenticate object Optional Provide credentials for HTTP authentication. anyOf[1]
body.authenticate.password string Required anyOf[1]; minLength: 1
body.authenticate.username string Required anyOf[1]; minLength: 1
body.bestAttempt boolean Optional Attempt to proceed when 'awaited' events fail or timeout. anyOf[1]
body.browser string Optional Rendering backend for this crawl. Set to kitesurf to render pages with Kitesurf (beta). Only valid when render is true. anyOf[1]; enum: ["kitesurf"]
body.contentUse — Optional Intended content use level to respect the use Content-Signal directive in robots.txt. Levels (least to most permissive): 'reference', 'full'. A URL is disallowed when the publisher's declared use level is lower than this intent. Learn more: https://contentsignals.org/. Default: 'full'. anyOf[1]; default: "full"
body.contentUse string Optional anyOf[1]; anyOf[1]; enum: ["reference"]
body.contentUse string Optional anyOf[1]; anyOf[2]; enum: ["full"]
body.cookies array Optional Check options. anyOf[1]
body.cookies[] object Optional anyOf[1]
body.cookies[].domain string Optional anyOf[1]
body.cookies[].expires number Optional anyOf[1]
body.cookies[].httpOnly boolean Optional anyOf[1]
body.cookies[].name string Required Cookie name. anyOf[1]
body.cookies[].partitionKey string Optional anyOf[1]
body.cookies[].path string Optional anyOf[1]
body.cookies[].priority — Optional anyOf[1]
body.cookies[].priority string Optional anyOf[1]; anyOf[1]; enum: ["Low"]
body.cookies[].priority string Optional anyOf[1]; anyOf[2]; enum: ["Medium"]
body.cookies[].priority string Optional anyOf[1]; anyOf[3]; enum: ["High"]
body.cookies[].sameParty boolean Optional anyOf[1]
body.cookies[].sameSite — Optional anyOf[1]
body.cookies[].sameSite string Optional anyOf[1]; anyOf[1]; enum: ["Strict"]
body.cookies[].sameSite string Optional anyOf[1]; anyOf[2]; enum: ["Lax"]
body.cookies[].sameSite string Optional anyOf[1]; anyOf[3]; enum: ["None"]
body.cookies[].secure boolean Optional anyOf[1]
body.cookies[].sourcePort number Optional anyOf[1]
body.cookies[].sourceScheme — Optional anyOf[1]
body.cookies[].sourceScheme string Optional anyOf[1]; anyOf[1]; enum: ["Unset"]
body.cookies[].sourceScheme string Optional anyOf[1]; anyOf[2]; enum: ["NonSecure"]
body.cookies[].sourceScheme string Optional anyOf[1]; anyOf[3]; enum: ["Secure"]
body.cookies[].url string Optional anyOf[1]
body.cookies[].value string Required anyOf[1]
body.crawlPurposes array Optional List of crawl purposes to respect Content-Signal directives in robots.txt. Allowed values: 'search', 'ai-input', 'ai-train'. Learn more: https://contentsignals.org/. Default: ['search', 'ai-input', 'ai-train']. anyOf[1]; default: ["search","ai-input","ai-train"]; minItems: 1; maxItems: 3
body.crawlPurposes[] — Optional anyOf[1]
body.crawlPurposes[] string Optional anyOf[1]; anyOf[1]; enum: ["search"]
body.crawlPurposes[] string Optional anyOf[1]; anyOf[2]; enum: ["ai-input"]
body.crawlPurposes[] string Optional anyOf[1]; anyOf[3]; enum: ["ai-train"]
body.depth number Optional Maximum number of levels deep the crawler will traverse from the starting URL. anyOf[1]; default: 100000; minimum: 1; maximum: 100000
body.emulateMediaType string Optional anyOf[1]
body.formats array Optional Formats to return. Default is html. anyOf[1]; default: ["html"]
body.formats[] — Optional anyOf[1]
body.formats[] string Optional anyOf[1]; anyOf[1]; enum: ["html"]
body.formats[] string Optional anyOf[1]; anyOf[2]; enum: ["markdown"]
body.formats[] string Optional anyOf[1]; anyOf[3]; enum: ["json"]
body.gotoOptions object Optional Check options. anyOf[1]; default: {}
body.gotoOptions.referer string Optional anyOf[1]
body.gotoOptions.referrerPolicy string Optional anyOf[1]
body.gotoOptions.timeout number Optional anyOf[1]; default: 30000; maximum: 60000
body.gotoOptions.waitUntil — Optional anyOf[1]; default: "domcontentloaded"
body.gotoOptions.waitUntil string Optional anyOf[1]; anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil string Optional anyOf[1]; anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil string Optional anyOf[1]; anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil string Optional anyOf[1]; anyOf[4]; enum: ["networkidle2"]
body.gotoOptions.waitUntil array Optional anyOf[1]; anyOf[5]
body.gotoOptions.waitUntil[] — Optional anyOf[1]; anyOf[5]
body.gotoOptions.waitUntil[] string Optional anyOf[1]; anyOf[5]; anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil[] string Optional anyOf[1]; anyOf[5]; anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil[] string Optional anyOf[1]; anyOf[5]; anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil[] string Optional anyOf[1]; anyOf[5]; anyOf[4]; enum: ["networkidle2"]
body.jsonOptions object Optional Options for JSON extraction. anyOf[1]; additionalProperties: false
body.jsonOptions.custom_ai array Optional Optional list of custom AI models to use for the request. The models will be tried in the order provided, and in case a model returns an error, the next one will be used as fallback. anyOf[1]
body.jsonOptions.custom_ai[] object Optional anyOf[1]
body.jsonOptions.custom_ai[].authorization string Optional Authorization token for the AI model: Bearer &lt;token&gt;. Not needed for workers-ai models. anyOf[1]
body.jsonOptions.custom_ai[].model string Required AI model to use for the request. Must be formed as &lt;provider&gt;/&lt;model_name&gt;, e.g. workers-ai/@cf/meta/llama-3.3-70b-instruct-fp8-fast. anyOf[1]
body.jsonOptions.prompt string Optional anyOf[1]
body.jsonOptions.response_format object Optional anyOf[1]
body.jsonOptions.response_format.json_schema object | null Optional Schema for the response format. More information here: https://developers.cloudflare.com/workers-ai/json-mode/ anyOf[1]; additionalProperties: true
body.jsonOptions.response_format.type string Required anyOf[1]
body.limit number Optional Maximum number of URLs to crawl. anyOf[1]; default: 10; minimum: 1; maximum: 100000
body.maxAge number Optional Maximum age of a resource that can be returned from cache in seconds. Default is 1 day. anyOf[1]; default: 86400; minimum: 0; maximum: 604800
body.modifiedSince integer Optional Unix timestamp (seconds since epoch) indicating to only crawl pages that were modified since this time. For sitemap URLs with a lastmod field, this is compared directly. For other URLs, the crawler will use If-Modified-Since header when fetching. URLs without modification information (no lastmod in sitemap and no Last-Modified header support) will be crawled. Note: This works in conjunction with maxAge - both filters must pass for a cached resource to be used. Must be within the last year and not in the future. anyOf[1]; exclusiveMinimum: 0
body.options object Optional Additional options for the crawler. anyOf[1]; default: {"includeExternalLinks":false,"includeSubdomains":false}
body.options.excludePatterns array Optional Exclude links matching the provided wildcard patterns in the crawl job. Example: 'https://example.com/privacy/**'. anyOf[1]; maxItems: 100
body.options.excludePatterns[] string Optional anyOf[1]; minLength: 1; maxLength: 500
body.options.includeExternalLinks boolean Optional Include external links in the crawl job. If set to true, includeSubdomains is ignored. anyOf[1]; default: false
body.options.includePatterns array Optional Include only links matching the provided wildcard patterns in the crawl job. Include patterns are evaluated before exclude patterns. URLs that match any of the specified include patterns will be included in the crawl job. Example: 'https://example.com/blog/**'. anyOf[1]; maxItems: 100
body.options.includePatterns[] string Optional anyOf[1]; minLength: 1; maxLength: 500
body.options.includeSubdomains boolean Optional Include links to subdomains in the crawl job. This option is ignored if includeExternalLinks is true. anyOf[1]; default: false
body.rejectRequestPattern array Optional Block undesired requests that match the provided regex patterns, eg. '/^.*.(css)'. anyOf[1]
body.rejectRequestPattern[] string Optional anyOf[1]
body.rejectResourceTypes array Optional Block undesired requests that match the provided resource types, eg. 'image' or 'script'. anyOf[1]
body.rejectResourceTypes[] — Optional anyOf[1]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[1]; enum: ["document"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[2]; enum: ["stylesheet"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[3]; enum: ["image"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[4]; enum: ["media"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[5]; enum: ["font"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[6]; enum: ["script"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[7]; enum: ["texttrack"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[8]; enum: ["xhr"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[9]; enum: ["fetch"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[10]; enum: ["prefetch"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[11]; enum: ["eventsource"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[12]; enum: ["websocket"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[13]; enum: ["manifest"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[14]; enum: ["signedexchange"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[15]; enum: ["ping"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[16]; enum: ["cspviolationreport"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[17]; enum: ["preflight"]
body.rejectResourceTypes[] string Optional anyOf[1]; anyOf[18]; enum: ["other"]
body.render boolean Optional Whether to render the page or fetch static content. True by default. anyOf[1]; enum: [true]; default: true
body.setExtraHTTPHeaders object Optional anyOf[1]; additionalProperties: {"type":"string"}
body.setJavaScriptEnabled boolean Optional anyOf[1]
body.source — Optional Source of links to crawl. 'sitemaps' - only crawl URLs from sitemaps, 'links' - only crawl URLs scraped from pages, 'all' - crawl both sitemap and scraped links (default). anyOf[1]; default: "all"
body.source string Optional anyOf[1]; anyOf[1]; enum: ["sitemaps"]
body.source string Optional anyOf[1]; anyOf[2]; enum: ["links"]
body.source string Optional anyOf[1]; anyOf[3]; enum: ["all"]
body.url string Required URL to navigate to, eg. https://example.com. anyOf[1]; format: "uri"
body.viewport object Optional Check options. anyOf[1]; default: {"height":1080,"width":1920}
body.viewport.deviceScaleFactor number Optional anyOf[1]
body.viewport.hasTouch boolean Optional anyOf[1]
body.viewport.height number Required anyOf[1]
body.viewport.isLandscape boolean Optional anyOf[1]
body.viewport.isMobile boolean Optional anyOf[1]
body.viewport.width number Required anyOf[1]
body.waitForSelector object Optional Wait for the selector to appear in page. Check options. anyOf[1]
body.waitForSelector.hidden boolean Optional anyOf[1]; enum: [true]
body.waitForSelector.selector string Required anyOf[1]
body.waitForSelector.timeout number Optional anyOf[1]; maximum: 120000
body.waitForSelector.visible boolean Optional anyOf[1]; enum: [true]
body.waitForTimeout number Optional Waits for a specified timeout before continuing. anyOf[1]; maximum: 120000
body object Required anyOf[2]; additionalProperties: false
body.contentUse — Optional Intended content use level to respect the use Content-Signal directive in robots.txt. Levels (least to most permissive): 'reference', 'full'. A URL is disallowed when the publisher's declared use level is lower than this intent. Learn more: https://contentsignals.org/. Default: 'full'. anyOf[2]; default: "full"
body.contentUse string Optional anyOf[2]; anyOf[1]; enum: ["reference"]
body.contentUse string Optional anyOf[2]; anyOf[2]; enum: ["full"]
body.crawlPurposes array Optional List of crawl purposes to respect Content-Signal directives in robots.txt. Allowed values: 'search', 'ai-input', 'ai-train'. Learn more: https://contentsignals.org/. Default: ['search', 'ai-input', 'ai-train']. anyOf[2]; default: ["search","ai-input","ai-train"]; minItems: 1; maxItems: 3
body.crawlPurposes[] — Optional anyOf[2]
body.crawlPurposes[] string Optional anyOf[2]; anyOf[1]; enum: ["search"]
body.crawlPurposes[] string Optional anyOf[2]; anyOf[2]; enum: ["ai-input"]
body.crawlPurposes[] string Optional anyOf[2]; anyOf[3]; enum: ["ai-train"]
body.depth number Optional Maximum number of levels deep the crawler will traverse from the starting URL. anyOf[2]; default: 100000; minimum: 1; maximum: 100000
body.formats array Optional Formats to return. Default is html. anyOf[2]; default: ["html"]
body.formats[] — Optional anyOf[2]
body.formats[] string Optional anyOf[2]; anyOf[1]; enum: ["html"]
body.formats[] string Optional anyOf[2]; anyOf[2]; enum: ["markdown"]
body.formats[] string Optional anyOf[2]; anyOf[3]; enum: ["json"]
body.jsonOptions object Optional Options for JSON extraction. anyOf[2]; additionalProperties: false
body.jsonOptions.custom_ai array Optional Optional list of custom AI models to use for the request. The models will be tried in the order provided, and in case a model returns an error, the next one will be used as fallback. anyOf[2]
body.jsonOptions.custom_ai[] object Optional anyOf[2]
body.jsonOptions.custom_ai[].authorization string Optional Authorization token for the AI model: Bearer &lt;token&gt;. Not needed for workers-ai models. anyOf[2]
body.jsonOptions.custom_ai[].model string Required AI model to use for the request. Must be formed as &lt;provider&gt;/&lt;model_name&gt;, e.g. workers-ai/@cf/meta/llama-3.3-70b-instruct-fp8-fast. anyOf[2]
body.jsonOptions.prompt string Optional anyOf[2]
body.jsonOptions.response_format object Optional anyOf[2]
body.jsonOptions.response_format.json_schema object | null Optional Schema for the response format. More information here: https://developers.cloudflare.com/workers-ai/json-mode/ anyOf[2]; additionalProperties: true
body.jsonOptions.response_format.type string Required anyOf[2]
body.limit number Optional Maximum number of URLs to crawl. anyOf[2]; default: 10; minimum: 1; maximum: 100000
body.maxAge number Optional Maximum age of a resource that can be returned from cache in seconds. Default is 1 day. anyOf[2]; default: 86400; minimum: 0; maximum: 604800
body.modifiedSince integer Optional Unix timestamp (seconds since epoch) indicating to only crawl pages that were modified since this time. For sitemap URLs with a lastmod field, this is compared directly. For other URLs, the crawler will use If-Modified-Since header when fetching. URLs without modification information (no lastmod in sitemap and no Last-Modified header support) will be crawled. Note: This works in conjunction with maxAge - both filters must pass for a cached resource to be used. Must be within the last year and not in the future. anyOf[2]; exclusiveMinimum: 0
body.options object Optional Additional options for the crawler. anyOf[2]; default: {"includeExternalLinks":false,"includeSubdomains":false}
body.options.excludePatterns array Optional Exclude links matching the provided wildcard patterns in the crawl job. Example: 'https://example.com/privacy/**'. anyOf[2]; maxItems: 100
body.options.excludePatterns[] string Optional anyOf[2]; minLength: 1; maxLength: 500
body.options.includeExternalLinks boolean Optional Include external links in the crawl job. If set to true, includeSubdomains is ignored. anyOf[2]; default: false
body.options.includePatterns array Optional Include only links matching the provided wildcard patterns in the crawl job. Include patterns are evaluated before exclude patterns. URLs that match any of the specified include patterns will be included in the crawl job. Example: 'https://example.com/blog/**'. anyOf[2]; maxItems: 100
body.options.includePatterns[] string Optional anyOf[2]; minLength: 1; maxLength: 500
body.options.includeSubdomains boolean Optional Include links to subdomains in the crawl job. This option is ignored if includeExternalLinks is true. anyOf[2]; default: false
body.render boolean Required Whether to render the page or fetch static content. True by default. anyOf[2]; enum: [false]
body.source — Optional Source of links to crawl. 'sitemaps' - only crawl URLs from sitemaps, 'links' - only crawl URLs scraped from pages, 'all' - crawl both sitemap and scraped links (default). anyOf[2]; default: "all"
body.source string Optional anyOf[2]; anyOf[1]; enum: ["sitemaps"]
body.source string Optional anyOf[2]; anyOf[2]; enum: ["links"]
body.source string Optional anyOf[2]; anyOf[3]; enum: ["all"]
body.url string Required URL to navigate to, eg. https://example.com. anyOf[2]; format: "uri"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "url": "https://www.example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Cancel a crawl job. — cloudflare.brapi-delete_cancelcrawl

Run Cancel a crawl job. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.job_id string Required The ID of the crawl job to cancel.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "job_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get crawl result. — cloudflare.brapi-get_crawlresult

Run Get crawl result. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.job_id string Required Crawl job ID. minLength: 1
query object Optional additionalProperties: false
query.cacheTTL number Optional Cache TTL default is 5s. Set to 0 to disable. default: 5; minimum: 0; maximum: 86400
query.status string Optional Filter by URL status. enum: ["queued","errored","completed","disallowed","skipped","cancelled"]
query.cursor number Optional Cursor for pagination. default: 0
query.limit number Optional Limit for pagination. default: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "job_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a browser session ID. — cloudflare.brapi-post_devtoolsacquire

Run Get a browser session ID. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.keep_alive number Optional Keep-alive time in milliseconds. default: 60000; minimum: 10000; maximum: 1200000
query.lab boolean Optional Use experimental browser. default: false
query.targets boolean Optional Include browser targets in response. default: false
query.liveViewUrlExpiresInMs number Optional How long the live view URL remains valid, in milliseconds (max 60 minutes). Only used when targets is true. default: 300000; minimum: 60000; maximum: 3600000
query.recording boolean Optional default: false
body object Optional additionalProperties: false
body.guardrails object Optional additionalProperties: false
body.guardrails.allowedDomainSets array Optional Max 4 entries: curated preset names (common-cdns) and/or https URLs of newline-separated hostname lists. maxItems: 4
body.guardrails.allowedDomainSets[] string Optional
body.guardrails.allowedDomains array Optional Hostname patterns, max 50. Supports exact hosts (example.com) or a single * wildcard anywhere. Prefer *.example.com (subdomain wildcard) over *example.com (prefix wildcard) to avoid matching overbroad lookalikes like evilexample.com. maxItems: 50
body.guardrails.allowedDomains[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Close browser session. — cloudflare.brapi-delete_devtoolsbrowserdelete

Run Close browser session. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.session_id string Required Browser session ID to close. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List targets. — cloudflare.brapi-get_devtoolsjson

Run List targets. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.session_id string Required Browser session ID. format: "uuid"
query object Optional additionalProperties: false
query.liveViewUrlExpiresInMs number Optional How long the live view URLs remain valid, in milliseconds (max 60 minutes) default: 300000; minimum: 60000; maximum: 3600000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Activate a browser target. — cloudflare.brapi-get_devtoolsjsonactivate

Run Activate a browser target. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.session_id string Required Browser session ID. format: "uuid"
path.account_id string Required Account ID.
path.target_id string Required Target ID to activate. pattern: "^[a-zA-Z0-9]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "session_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example",
    "target_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Close a browser target. — cloudflare.brapi-get_devtoolsjsonclose

Run Close a browser target. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.session_id string Required Browser session ID. format: "uuid"
path.account_id string Required Account ID.
path.target_id string Required Target ID to close. pattern: "^[a-zA-Z0-9]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "session_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example",
    "target_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List targets. — cloudflare.brapi-get_devtoolsjsonlist

Run List targets. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.session_id string Required Browser session ID. format: "uuid"
query object Optional additionalProperties: false
query.liveViewUrlExpiresInMs number Optional How long the live view URLs remain valid, in milliseconds (max 60 minutes) default: 300000; minimum: 60000; maximum: 3600000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a target by ID. — cloudflare.brapi-get_devtoolsjsontarget

Run Get a target by ID. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.session_id string Required Browser session ID. format: "uuid"
path.target_id string Required Target ID. pattern: "^[a-zA-Z0-9]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "session_id": "00000000-0000-4000-8000-000000000000",
    "target_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Open a new browser tab. — cloudflare.brapi-put_devtoolsjsonnew

Run Open a new browser tab. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.session_id string Required Browser session ID. format: "uuid"
query object Optional additionalProperties: false
query.url string Optional format: "uri"
query.liveViewUrlExpiresInMs number Optional How long the live view URL remains valid, in milliseconds (max 60 minutes) default: 300000; minimum: 60000; maximum: 3600000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Chrome DevTools Protocol schema. — cloudflare.brapi-get_devtoolsjsonprotocol

Run Get Chrome DevTools Protocol schema. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.session_id string Required Browser session ID. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get browser version metadata. — cloudflare.brapi-get_devtoolsjsonversion

Run Get browser version metadata. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.session_id string Required Browser session ID. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Mint live view URLs for a browser session — cloudflare.brapi-post_devtoolsliveview

Run Mint live view URLs for a browser session with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.session_id string Required Browser session ID format: "uuid"
body object Optional
body.expiresInMs number Optional How long the live view URLs remain valid, in milliseconds. Default: 5 minutes. Max: 60 minutes. default: 300000; minimum: 60000; maximum: 3600000
body.guardrails object Optional Connection guardrails. Use { mode: 'readonly' } to generate a view-only link. additionalProperties: false
body.guardrails.mode string Required enum: ["readonly"]
body.mode string Optional UI mode: 'devtools' (Chrome DevTools), 'tab' (single tab view), 'full' (multi-tab browser) enum: ["devtools","tab","full"]; default: "devtools"
body.targetId string Optional Target ID (page) to connect to. If omitted, auto-resolves to the first active page. pattern: "^[a-fA-F0-9]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List sessions. — cloudflare.brapi-get_devtoolssessionlist

Run List sessions. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.limit number Optional default: 200; minimum: 1; maximum: 200
query.offset number Optional default: 0; minimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get session details. — cloudflare.brapi-get_devtoolssessiondetails

Run Get session details. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.session_id string Required Session ID. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get json. — cloudflare.brapi-post_json

Run Get json. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.cacheTTL number Optional Cache TTL default is 5s. Set to 0 to disable. default: 5; minimum: 0; maximum: 86400
query.browser string Optional Rendering backend. Set to kitesurf to use Kitesurf (beta). enum: ["kitesurf"]
body object Required additionalProperties: false
body.actionTimeout number Optional The maximum duration allowed for the browser action to complete after the page has loaded (such as taking screenshots, extracting content, or generating PDFs). If this time limit is exceeded, the action stops and returns a timeout error. maximum: 120000
body.addScriptTag array Optional Adds a script element into the page with the desired URL or content.
body.addScriptTag[] object Optional additionalProperties: false
body.addScriptTag[].content string Optional
body.addScriptTag[].id string Optional
body.addScriptTag[].type string Optional
body.addScriptTag[].url string Optional format: "uri"
body.addStyleTag array Optional Adds a &lt;link rel="stylesheet"&gt; tag into the page with the desired URL or a &lt;style type="text/css"&gt; tag with the content.
body.addStyleTag[] object Optional
body.addStyleTag[].content string Optional
body.addStyleTag[].url string Optional format: "uri"
body.allowRequestPattern array Optional Only allow requests that match the provided regex patterns, eg. '/^.*.(css)'. Reject rules are applied first.
body.allowRequestPattern[] string Optional
body.allowResourceTypes array Optional Only allow requests that match the provided resource types, eg. 'image' or 'script'. Reject rules are applied first.
body.allowResourceTypes[] — Optional
body.allowResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.allowResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.allowResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.allowResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.allowResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.allowResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.allowResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.allowResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.allowResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.allowResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.allowResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.allowResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.allowResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.allowResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.allowResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.allowResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.allowResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.allowResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.authenticate object Optional Provide credentials for HTTP authentication.
body.authenticate.password string Required minLength: 1
body.authenticate.username string Required minLength: 1
body.bestAttempt boolean Optional Attempt to proceed when 'awaited' events fail or timeout.
body.cookies array Optional Check options.
body.cookies[] object Optional
body.cookies[].domain string Optional
body.cookies[].expires number Optional
body.cookies[].httpOnly boolean Optional
body.cookies[].name string Required Cookie name.
body.cookies[].partitionKey string Optional
body.cookies[].path string Optional
body.cookies[].priority — Optional
body.cookies[].priority string Optional anyOf[1]; enum: ["Low"]
body.cookies[].priority string Optional anyOf[2]; enum: ["Medium"]
body.cookies[].priority string Optional anyOf[3]; enum: ["High"]
body.cookies[].sameParty boolean Optional
body.cookies[].sameSite — Optional
body.cookies[].sameSite string Optional anyOf[1]; enum: ["Strict"]
body.cookies[].sameSite string Optional anyOf[2]; enum: ["Lax"]
body.cookies[].sameSite string Optional anyOf[3]; enum: ["None"]
body.cookies[].secure boolean Optional
body.cookies[].sourcePort number Optional
body.cookies[].sourceScheme — Optional
body.cookies[].sourceScheme string Optional anyOf[1]; enum: ["Unset"]
body.cookies[].sourceScheme string Optional anyOf[2]; enum: ["NonSecure"]
body.cookies[].sourceScheme string Optional anyOf[3]; enum: ["Secure"]
body.cookies[].url string Optional
body.cookies[].value string Required
body.custom_ai array Optional Optional list of custom AI models to use for the request. The models will be tried in the order provided, and in case a model returns an error, the next one will be used as fallback.
body.custom_ai[] object Optional
body.custom_ai[].authorization string Optional Authorization token for the AI model: Bearer &lt;token&gt;. Not needed for workers-ai models.
body.custom_ai[].model string Required AI model to use for the request. Must be formed as &lt;provider&gt;/&lt;model_name&gt;, e.g. workers-ai/@cf/meta/llama-3.3-70b-instruct-fp8-fast.
body.emulateMediaType string Optional
body.gotoOptions object Optional Check options. default: {}
body.gotoOptions.referer string Optional
body.gotoOptions.referrerPolicy string Optional
body.gotoOptions.timeout number Optional default: 30000; maximum: 60000
body.gotoOptions.waitUntil — Optional default: "domcontentloaded"
body.gotoOptions.waitUntil string Optional anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil string Optional anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil string Optional anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil string Optional anyOf[4]; enum: ["networkidle2"]
body.gotoOptions.waitUntil array Optional anyOf[5]
body.gotoOptions.waitUntil[] — Optional anyOf[5]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[4]; enum: ["networkidle2"]
body.html string Optional Set the content of the page, eg: &lt;h1&gt;Hello World!!&lt;/h1&gt;. Either html or url must be set. minLength: 1
body.prompt string Optional
body.rejectRequestPattern array Optional Block undesired requests that match the provided regex patterns, eg. '/^.*.(css)'.
body.rejectRequestPattern[] string Optional
body.rejectResourceTypes array Optional Block undesired requests that match the provided resource types, eg. 'image' or 'script'.
body.rejectResourceTypes[] — Optional
body.rejectResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.rejectResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.rejectResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.rejectResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.rejectResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.rejectResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.rejectResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.rejectResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.rejectResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.rejectResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.rejectResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.rejectResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.rejectResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.rejectResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.rejectResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.rejectResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.rejectResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.rejectResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.response_format object Optional
body.response_format.json_schema object | null Optional Schema for the response format. More information here: https://developers.cloudflare.com/workers-ai/json-mode/ additionalProperties: true
body.response_format.type string Required
body.setExtraHTTPHeaders object Optional additionalProperties: {"type":"string"}
body.setJavaScriptEnabled boolean Optional
body.url string Optional URL to navigate to, eg. https://example.com. format: "uri"
body.userAgent string Optional default: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
body.viewport object Optional Check options. default: {"height":1080,"width":1920}
body.viewport.deviceScaleFactor number Optional
body.viewport.hasTouch boolean Optional
body.viewport.height number Required
body.viewport.isLandscape boolean Optional
body.viewport.isMobile boolean Optional
body.viewport.width number Required
body.waitForSelector object Optional Wait for the selector to appear in page. Check options.
body.waitForSelector.hidden boolean Optional enum: [true]
body.waitForSelector.selector string Required
body.waitForSelector.timeout number Optional maximum: 120000
body.waitForSelector.visible boolean Optional enum: [true]
body.waitForTimeout number Optional Waits for a specified timeout before continuing. maximum: 120000
body object Required oneOf[1]
body.html string Optional oneOf[1]
body.url string Required oneOf[1]
body object Required oneOf[2]
body.html string Required oneOf[2]
body.url string Optional oneOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "url": "https://www.example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Links. — cloudflare.brapi-post_links

Run Get Links. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.cacheTTL number Optional Cache TTL default is 5s. Set to 0 to disable. default: 5; minimum: 0; maximum: 86400
query.browser string Optional Rendering backend. Set to kitesurf to use Kitesurf (beta). enum: ["kitesurf"]
body object Required additionalProperties: false
body.actionTimeout number Optional The maximum duration allowed for the browser action to complete after the page has loaded (such as taking screenshots, extracting content, or generating PDFs). If this time limit is exceeded, the action stops and returns a timeout error. maximum: 120000
body.addScriptTag array Optional Adds a script element into the page with the desired URL or content.
body.addScriptTag[] object Optional additionalProperties: false
body.addScriptTag[].content string Optional
body.addScriptTag[].id string Optional
body.addScriptTag[].type string Optional
body.addScriptTag[].url string Optional format: "uri"
body.addStyleTag array Optional Adds a &lt;link rel="stylesheet"&gt; tag into the page with the desired URL or a &lt;style type="text/css"&gt; tag with the content.
body.addStyleTag[] object Optional
body.addStyleTag[].content string Optional
body.addStyleTag[].url string Optional format: "uri"
body.allowRequestPattern array Optional Only allow requests that match the provided regex patterns, eg. '/^.*.(css)'. Reject rules are applied first.
body.allowRequestPattern[] string Optional
body.allowResourceTypes array Optional Only allow requests that match the provided resource types, eg. 'image' or 'script'. Reject rules are applied first.
body.allowResourceTypes[] — Optional
body.allowResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.allowResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.allowResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.allowResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.allowResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.allowResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.allowResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.allowResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.allowResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.allowResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.allowResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.allowResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.allowResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.allowResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.allowResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.allowResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.allowResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.allowResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.authenticate object Optional Provide credentials for HTTP authentication.
body.authenticate.password string Required minLength: 1
body.authenticate.username string Required minLength: 1
body.bestAttempt boolean Optional Attempt to proceed when 'awaited' events fail or timeout.
body.cookies array Optional Check options.
body.cookies[] object Optional
body.cookies[].domain string Optional
body.cookies[].expires number Optional
body.cookies[].httpOnly boolean Optional
body.cookies[].name string Required Cookie name.
body.cookies[].partitionKey string Optional
body.cookies[].path string Optional
body.cookies[].priority — Optional
body.cookies[].priority string Optional anyOf[1]; enum: ["Low"]
body.cookies[].priority string Optional anyOf[2]; enum: ["Medium"]
body.cookies[].priority string Optional anyOf[3]; enum: ["High"]
body.cookies[].sameParty boolean Optional
body.cookies[].sameSite — Optional
body.cookies[].sameSite string Optional anyOf[1]; enum: ["Strict"]
body.cookies[].sameSite string Optional anyOf[2]; enum: ["Lax"]
body.cookies[].sameSite string Optional anyOf[3]; enum: ["None"]
body.cookies[].secure boolean Optional
body.cookies[].sourcePort number Optional
body.cookies[].sourceScheme — Optional
body.cookies[].sourceScheme string Optional anyOf[1]; enum: ["Unset"]
body.cookies[].sourceScheme string Optional anyOf[2]; enum: ["NonSecure"]
body.cookies[].sourceScheme string Optional anyOf[3]; enum: ["Secure"]
body.cookies[].url string Optional
body.cookies[].value string Required
body.emulateMediaType string Optional
body.excludeExternalLinks boolean Optional default: false
body.gotoOptions object Optional Check options. default: {}
body.gotoOptions.referer string Optional
body.gotoOptions.referrerPolicy string Optional
body.gotoOptions.timeout number Optional default: 30000; maximum: 60000
body.gotoOptions.waitUntil — Optional default: "domcontentloaded"
body.gotoOptions.waitUntil string Optional anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil string Optional anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil string Optional anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil string Optional anyOf[4]; enum: ["networkidle2"]
body.gotoOptions.waitUntil array Optional anyOf[5]
body.gotoOptions.waitUntil[] — Optional anyOf[5]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[4]; enum: ["networkidle2"]
body.html string Optional Set the content of the page, eg: &lt;h1&gt;Hello World!!&lt;/h1&gt;. Either html or url must be set. minLength: 1
body.rejectRequestPattern array Optional Block undesired requests that match the provided regex patterns, eg. '/^.*.(css)'.
body.rejectRequestPattern[] string Optional
body.rejectResourceTypes array Optional Block undesired requests that match the provided resource types, eg. 'image' or 'script'.
body.rejectResourceTypes[] — Optional
body.rejectResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.rejectResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.rejectResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.rejectResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.rejectResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.rejectResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.rejectResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.rejectResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.rejectResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.rejectResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.rejectResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.rejectResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.rejectResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.rejectResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.rejectResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.rejectResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.rejectResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.rejectResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.setExtraHTTPHeaders object Optional additionalProperties: {"type":"string"}
body.setJavaScriptEnabled boolean Optional
body.url string Optional URL to navigate to, eg. https://example.com. format: "uri"
body.userAgent string Optional default: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
body.viewport object Optional Check options. default: {"height":1080,"width":1920}
body.viewport.deviceScaleFactor number Optional
body.viewport.hasTouch boolean Optional
body.viewport.height number Required
body.viewport.isLandscape boolean Optional
body.viewport.isMobile boolean Optional
body.viewport.width number Required
body.visibleLinksOnly boolean Optional default: false
body.waitForSelector object Optional Wait for the selector to appear in page. Check options.
body.waitForSelector.hidden boolean Optional enum: [true]
body.waitForSelector.selector string Required
body.waitForSelector.timeout number Optional maximum: 120000
body.waitForSelector.visible boolean Optional enum: [true]
body.waitForTimeout number Optional Waits for a specified timeout before continuing. maximum: 120000
body object Required oneOf[1]
body.html string Optional oneOf[1]
body.url string Required oneOf[1]
body object Required oneOf[2]
body.html string Required oneOf[2]
body.url string Optional oneOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "url": "https://www.example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get markdown. — cloudflare.brapi-post_markdown

Run Get markdown. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.cacheTTL number Optional Cache TTL default is 5s. Set to 0 to disable. default: 5; minimum: 0; maximum: 86400
query.browser string Optional Rendering backend. Set to kitesurf to use Kitesurf (beta). enum: ["kitesurf"]
body object Required additionalProperties: false
body.actionTimeout number Optional The maximum duration allowed for the browser action to complete after the page has loaded (such as taking screenshots, extracting content, or generating PDFs). If this time limit is exceeded, the action stops and returns a timeout error. maximum: 120000
body.addScriptTag array Optional Adds a script element into the page with the desired URL or content.
body.addScriptTag[] object Optional additionalProperties: false
body.addScriptTag[].content string Optional
body.addScriptTag[].id string Optional
body.addScriptTag[].type string Optional
body.addScriptTag[].url string Optional format: "uri"
body.addStyleTag array Optional Adds a &lt;link rel="stylesheet"&gt; tag into the page with the desired URL or a &lt;style type="text/css"&gt; tag with the content.
body.addStyleTag[] object Optional
body.addStyleTag[].content string Optional
body.addStyleTag[].url string Optional format: "uri"
body.allowRequestPattern array Optional Only allow requests that match the provided regex patterns, eg. '/^.*.(css)'. Reject rules are applied first.
body.allowRequestPattern[] string Optional
body.allowResourceTypes array Optional Only allow requests that match the provided resource types, eg. 'image' or 'script'. Reject rules are applied first.
body.allowResourceTypes[] — Optional
body.allowResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.allowResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.allowResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.allowResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.allowResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.allowResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.allowResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.allowResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.allowResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.allowResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.allowResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.allowResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.allowResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.allowResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.allowResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.allowResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.allowResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.allowResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.authenticate object Optional Provide credentials for HTTP authentication.
body.authenticate.password string Required minLength: 1
body.authenticate.username string Required minLength: 1
body.bestAttempt boolean Optional Attempt to proceed when 'awaited' events fail or timeout.
body.cookies array Optional Check options.
body.cookies[] object Optional
body.cookies[].domain string Optional
body.cookies[].expires number Optional
body.cookies[].httpOnly boolean Optional
body.cookies[].name string Required Cookie name.
body.cookies[].partitionKey string Optional
body.cookies[].path string Optional
body.cookies[].priority — Optional
body.cookies[].priority string Optional anyOf[1]; enum: ["Low"]
body.cookies[].priority string Optional anyOf[2]; enum: ["Medium"]
body.cookies[].priority string Optional anyOf[3]; enum: ["High"]
body.cookies[].sameParty boolean Optional
body.cookies[].sameSite — Optional
body.cookies[].sameSite string Optional anyOf[1]; enum: ["Strict"]
body.cookies[].sameSite string Optional anyOf[2]; enum: ["Lax"]
body.cookies[].sameSite string Optional anyOf[3]; enum: ["None"]
body.cookies[].secure boolean Optional
body.cookies[].sourcePort number Optional
body.cookies[].sourceScheme — Optional
body.cookies[].sourceScheme string Optional anyOf[1]; enum: ["Unset"]
body.cookies[].sourceScheme string Optional anyOf[2]; enum: ["NonSecure"]
body.cookies[].sourceScheme string Optional anyOf[3]; enum: ["Secure"]
body.cookies[].url string Optional
body.cookies[].value string Required
body.emulateMediaType string Optional
body.gotoOptions object Optional Check options. default: {}
body.gotoOptions.referer string Optional
body.gotoOptions.referrerPolicy string Optional
body.gotoOptions.timeout number Optional default: 30000; maximum: 60000
body.gotoOptions.waitUntil — Optional default: "domcontentloaded"
body.gotoOptions.waitUntil string Optional anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil string Optional anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil string Optional anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil string Optional anyOf[4]; enum: ["networkidle2"]
body.gotoOptions.waitUntil array Optional anyOf[5]
body.gotoOptions.waitUntil[] — Optional anyOf[5]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[4]; enum: ["networkidle2"]
body.html string Optional Set the content of the page, eg: &lt;h1&gt;Hello World!!&lt;/h1&gt;. Either html or url must be set. minLength: 1
body.rejectRequestPattern array Optional Block undesired requests that match the provided regex patterns, eg. '/^.*.(css)'.
body.rejectRequestPattern[] string Optional
body.rejectResourceTypes array Optional Block undesired requests that match the provided resource types, eg. 'image' or 'script'.
body.rejectResourceTypes[] — Optional
body.rejectResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.rejectResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.rejectResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.rejectResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.rejectResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.rejectResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.rejectResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.rejectResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.rejectResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.rejectResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.rejectResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.rejectResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.rejectResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.rejectResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.rejectResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.rejectResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.rejectResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.rejectResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.setExtraHTTPHeaders object Optional additionalProperties: {"type":"string"}
body.setJavaScriptEnabled boolean Optional
body.url string Optional URL to navigate to, eg. https://example.com. format: "uri"
body.userAgent string Optional default: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
body.viewport object Optional Check options. default: {"height":1080,"width":1920}
body.viewport.deviceScaleFactor number Optional
body.viewport.hasTouch boolean Optional
body.viewport.height number Required
body.viewport.isLandscape boolean Optional
body.viewport.isMobile boolean Optional
body.viewport.width number Required
body.waitForSelector object Optional Wait for the selector to appear in page. Check options.
body.waitForSelector.hidden boolean Optional enum: [true]
body.waitForSelector.selector string Required
body.waitForSelector.timeout number Optional maximum: 120000
body.waitForSelector.visible boolean Optional enum: [true]
body.waitForTimeout number Optional Waits for a specified timeout before continuing. maximum: 120000
body object Required oneOf[1]
body.html string Optional oneOf[1]
body.url string Required oneOf[1]
body object Required oneOf[2]
body.html string Required oneOf[2]
body.url string Optional oneOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "url": "https://www.example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get PDF. — cloudflare.brapi-post_pdf

Run Get PDF. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.cacheTTL number Optional Cache TTL default is 5s. Set to 0 to disable. default: 5; minimum: 0; maximum: 86400
query.browser string Optional Rendering backend. Set to kitesurf to use Kitesurf (beta). enum: ["kitesurf"]
body object Required additionalProperties: false
body.actionTimeout number Optional The maximum duration allowed for the browser action to complete after the page has loaded (such as taking screenshots, extracting content, or generating PDFs). If this time limit is exceeded, the action stops and returns a timeout error. maximum: 120000
body.addScriptTag array Optional Adds a script element into the page with the desired URL or content.
body.addScriptTag[] object Optional additionalProperties: false
body.addScriptTag[].content string Optional
body.addScriptTag[].id string Optional
body.addScriptTag[].type string Optional
body.addScriptTag[].url string Optional format: "uri"
body.addStyleTag array Optional Adds a &lt;link rel="stylesheet"&gt; tag into the page with the desired URL or a &lt;style type="text/css"&gt; tag with the content.
body.addStyleTag[] object Optional
body.addStyleTag[].content string Optional
body.addStyleTag[].url string Optional format: "uri"
body.allowRequestPattern array Optional Only allow requests that match the provided regex patterns, eg. '/^.*.(css)'. Reject rules are applied first.
body.allowRequestPattern[] string Optional
body.allowResourceTypes array Optional Only allow requests that match the provided resource types, eg. 'image' or 'script'. Reject rules are applied first.
body.allowResourceTypes[] — Optional
body.allowResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.allowResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.allowResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.allowResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.allowResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.allowResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.allowResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.allowResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.allowResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.allowResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.allowResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.allowResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.allowResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.allowResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.allowResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.allowResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.allowResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.allowResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.authenticate object Optional Provide credentials for HTTP authentication.
body.authenticate.password string Required minLength: 1
body.authenticate.username string Required minLength: 1
body.bestAttempt boolean Optional Attempt to proceed when 'awaited' events fail or timeout.
body.cookies array Optional Check options.
body.cookies[] object Optional
body.cookies[].domain string Optional
body.cookies[].expires number Optional
body.cookies[].httpOnly boolean Optional
body.cookies[].name string Required Cookie name.
body.cookies[].partitionKey string Optional
body.cookies[].path string Optional
body.cookies[].priority — Optional
body.cookies[].priority string Optional anyOf[1]; enum: ["Low"]
body.cookies[].priority string Optional anyOf[2]; enum: ["Medium"]
body.cookies[].priority string Optional anyOf[3]; enum: ["High"]
body.cookies[].sameParty boolean Optional
body.cookies[].sameSite — Optional
body.cookies[].sameSite string Optional anyOf[1]; enum: ["Strict"]
body.cookies[].sameSite string Optional anyOf[2]; enum: ["Lax"]
body.cookies[].sameSite string Optional anyOf[3]; enum: ["None"]
body.cookies[].secure boolean Optional
body.cookies[].sourcePort number Optional
body.cookies[].sourceScheme — Optional
body.cookies[].sourceScheme string Optional anyOf[1]; enum: ["Unset"]
body.cookies[].sourceScheme string Optional anyOf[2]; enum: ["NonSecure"]
body.cookies[].sourceScheme string Optional anyOf[3]; enum: ["Secure"]
body.cookies[].url string Optional
body.cookies[].value string Required
body.emulateMediaType string Optional
body.gotoOptions object Optional Check options. default: {}
body.gotoOptions.referer string Optional
body.gotoOptions.referrerPolicy string Optional
body.gotoOptions.timeout number Optional default: 30000; maximum: 60000
body.gotoOptions.waitUntil — Optional default: "domcontentloaded"
body.gotoOptions.waitUntil string Optional anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil string Optional anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil string Optional anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil string Optional anyOf[4]; enum: ["networkidle2"]
body.gotoOptions.waitUntil array Optional anyOf[5]
body.gotoOptions.waitUntil[] — Optional anyOf[5]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[4]; enum: ["networkidle2"]
body.html string Optional Set the content of the page, eg: &lt;h1&gt;Hello World!!&lt;/h1&gt;. Either html or url must be set. minLength: 1
body.pdfOptions object Optional Check options. default: {}; additionalProperties: false
body.pdfOptions.displayHeaderFooter boolean Optional Whether to show the header and footer. default: false
body.pdfOptions.footerTemplate string Optional HTML template for the print footer.
body.pdfOptions.format string Optional Paper format. Takes priority over width and height if set. enum: ["letter","legal","tabloid","ledger","a0","a1","a2","a3","a4","a5","a6"]; default: "letter"
body.pdfOptions.headerTemplate string Optional HTML template for the print header.
body.pdfOptions.height — Optional Sets the height of paper. Can be a number or string with unit.
body.pdfOptions.height string Optional anyOf[1]
body.pdfOptions.height number Optional anyOf[2]
body.pdfOptions.landscape boolean Optional Whether to print in landscape orientation. default: false
body.pdfOptions.margin object Optional Set the PDF margins. Useful when setting header and footer.
body.pdfOptions.margin.bottom — Optional
body.pdfOptions.margin.bottom string Optional anyOf[1]
body.pdfOptions.margin.bottom number Optional anyOf[2]
body.pdfOptions.margin.left — Optional
body.pdfOptions.margin.left string Optional anyOf[1]
body.pdfOptions.margin.left number Optional anyOf[2]
body.pdfOptions.margin.right — Optional
body.pdfOptions.margin.right string Optional anyOf[1]
body.pdfOptions.margin.right number Optional anyOf[2]
body.pdfOptions.margin.top — Optional
body.pdfOptions.margin.top string Optional anyOf[1]
body.pdfOptions.margin.top number Optional anyOf[2]
body.pdfOptions.omitBackground boolean Optional Hides default white background and allows generating pdfs with transparency. default: false
body.pdfOptions.outline boolean Optional Generate document outline. default: false
body.pdfOptions.pageRanges string Optional Paper ranges to print, e.g. '1-5, 8, 11-13'.
body.pdfOptions.preferCSSPageSize boolean Optional Give CSS @page size priority over other size declarations. default: false
body.pdfOptions.printBackground boolean Optional Set to true to print background graphics. default: false
body.pdfOptions.scale number Optional Scales the rendering of the web page. Amount must be between 0.1 and 2. default: 1; minimum: 0.1; maximum: 2
body.pdfOptions.tagged boolean Optional Generate tagged (accessible) PDF. default: true
body.pdfOptions.timeout number Optional Timeout in milliseconds. default: 30000
body.pdfOptions.width — Optional Sets the width of paper. Can be a number or string with unit.
body.pdfOptions.width string Optional anyOf[1]
body.pdfOptions.width number Optional anyOf[2]
body.rejectRequestPattern array Optional Block undesired requests that match the provided regex patterns, eg. '/^.*.(css)'.
body.rejectRequestPattern[] string Optional
body.rejectResourceTypes array Optional Block undesired requests that match the provided resource types, eg. 'image' or 'script'.
body.rejectResourceTypes[] — Optional
body.rejectResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.rejectResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.rejectResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.rejectResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.rejectResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.rejectResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.rejectResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.rejectResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.rejectResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.rejectResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.rejectResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.rejectResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.rejectResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.rejectResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.rejectResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.rejectResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.rejectResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.rejectResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.setExtraHTTPHeaders object Optional additionalProperties: {"type":"string"}
body.setJavaScriptEnabled boolean Optional
body.url string Optional URL to navigate to, eg. https://example.com. format: "uri"
body.userAgent string Optional default: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
body.viewport object Optional Check options. default: {"height":1080,"width":1920}
body.viewport.deviceScaleFactor number Optional
body.viewport.hasTouch boolean Optional
body.viewport.height number Required
body.viewport.isLandscape boolean Optional
body.viewport.isMobile boolean Optional
body.viewport.width number Required
body.waitForSelector object Optional Wait for the selector to appear in page. Check options.
body.waitForSelector.hidden boolean Optional enum: [true]
body.waitForSelector.selector string Required
body.waitForSelector.timeout number Optional maximum: 120000
body.waitForSelector.visible boolean Optional enum: [true]
body.waitForTimeout number Optional Waits for a specified timeout before continuing. maximum: 120000
body object Required oneOf[1]
body.html string Optional oneOf[1]
body.url string Required oneOf[1]
body object Required oneOf[2]
body.html string Required oneOf[2]
body.url string Optional oneOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "url": "https://www.example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get recording data. — cloudflare.brapi-get_recording

Run Get recording data. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.session_id string Required Session ID. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "session_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get network recording data. — cloudflare.brapi-get_recordingnetwork

Run Get network recording data. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.session_id string Required Session ID. minLength: 1
query object Required additionalProperties: false
query.format string Optional Set to har to return a HAR JSON document.
query.target string Required Target ID to include in the response. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "session_id": "example"
  },
  "query": {
    "target": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Scrape elements. — cloudflare.brapi-post_scrape

Run Scrape elements. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.cacheTTL number Optional Cache TTL default is 5s. Set to 0 to disable. default: 5; minimum: 0; maximum: 86400
query.browser string Optional Rendering backend. Set to kitesurf to use Kitesurf (beta). enum: ["kitesurf"]
body object Required additionalProperties: false
body.actionTimeout number Optional The maximum duration allowed for the browser action to complete after the page has loaded (such as taking screenshots, extracting content, or generating PDFs). If this time limit is exceeded, the action stops and returns a timeout error. maximum: 120000
body.addScriptTag array Optional Adds a script element into the page with the desired URL or content.
body.addScriptTag[] object Optional additionalProperties: false
body.addScriptTag[].content string Optional
body.addScriptTag[].id string Optional
body.addScriptTag[].type string Optional
body.addScriptTag[].url string Optional format: "uri"
body.addStyleTag array Optional Adds a &lt;link rel="stylesheet"&gt; tag into the page with the desired URL or a &lt;style type="text/css"&gt; tag with the content.
body.addStyleTag[] object Optional
body.addStyleTag[].content string Optional
body.addStyleTag[].url string Optional format: "uri"
body.allowRequestPattern array Optional Only allow requests that match the provided regex patterns, eg. '/^.*.(css)'. Reject rules are applied first.
body.allowRequestPattern[] string Optional
body.allowResourceTypes array Optional Only allow requests that match the provided resource types, eg. 'image' or 'script'. Reject rules are applied first.
body.allowResourceTypes[] — Optional
body.allowResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.allowResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.allowResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.allowResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.allowResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.allowResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.allowResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.allowResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.allowResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.allowResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.allowResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.allowResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.allowResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.allowResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.allowResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.allowResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.allowResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.allowResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.authenticate object Optional Provide credentials for HTTP authentication.
body.authenticate.password string Required minLength: 1
body.authenticate.username string Required minLength: 1
body.bestAttempt boolean Optional Attempt to proceed when 'awaited' events fail or timeout.
body.cookies array Optional Check options.
body.cookies[] object Optional
body.cookies[].domain string Optional
body.cookies[].expires number Optional
body.cookies[].httpOnly boolean Optional
body.cookies[].name string Required Cookie name.
body.cookies[].partitionKey string Optional
body.cookies[].path string Optional
body.cookies[].priority — Optional
body.cookies[].priority string Optional anyOf[1]; enum: ["Low"]
body.cookies[].priority string Optional anyOf[2]; enum: ["Medium"]
body.cookies[].priority string Optional anyOf[3]; enum: ["High"]
body.cookies[].sameParty boolean Optional
body.cookies[].sameSite — Optional
body.cookies[].sameSite string Optional anyOf[1]; enum: ["Strict"]
body.cookies[].sameSite string Optional anyOf[2]; enum: ["Lax"]
body.cookies[].sameSite string Optional anyOf[3]; enum: ["None"]
body.cookies[].secure boolean Optional
body.cookies[].sourcePort number Optional
body.cookies[].sourceScheme — Optional
body.cookies[].sourceScheme string Optional anyOf[1]; enum: ["Unset"]
body.cookies[].sourceScheme string Optional anyOf[2]; enum: ["NonSecure"]
body.cookies[].sourceScheme string Optional anyOf[3]; enum: ["Secure"]
body.cookies[].url string Optional
body.cookies[].value string Required
body.elements array Required minItems: 1
body.elements[] object Optional
body.elements[].selector string Required
body.emulateMediaType string Optional
body.gotoOptions object Optional Check options. default: {}
body.gotoOptions.referer string Optional
body.gotoOptions.referrerPolicy string Optional
body.gotoOptions.timeout number Optional default: 30000; maximum: 60000
body.gotoOptions.waitUntil — Optional default: "domcontentloaded"
body.gotoOptions.waitUntil string Optional anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil string Optional anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil string Optional anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil string Optional anyOf[4]; enum: ["networkidle2"]
body.gotoOptions.waitUntil array Optional anyOf[5]
body.gotoOptions.waitUntil[] — Optional anyOf[5]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[4]; enum: ["networkidle2"]
body.html string Optional Set the content of the page, eg: &lt;h1&gt;Hello World!!&lt;/h1&gt;. Either html or url must be set. minLength: 1
body.rejectRequestPattern array Optional Block undesired requests that match the provided regex patterns, eg. '/^.*.(css)'.
body.rejectRequestPattern[] string Optional
body.rejectResourceTypes array Optional Block undesired requests that match the provided resource types, eg. 'image' or 'script'.
body.rejectResourceTypes[] — Optional
body.rejectResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.rejectResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.rejectResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.rejectResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.rejectResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.rejectResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.rejectResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.rejectResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.rejectResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.rejectResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.rejectResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.rejectResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.rejectResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.rejectResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.rejectResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.rejectResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.rejectResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.rejectResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.setExtraHTTPHeaders object Optional additionalProperties: {"type":"string"}
body.setJavaScriptEnabled boolean Optional
body.url string Optional URL to navigate to, eg. https://example.com. format: "uri"
body.userAgent string Optional default: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
body.viewport object Optional Check options. default: {"height":1080,"width":1920}
body.viewport.deviceScaleFactor number Optional
body.viewport.hasTouch boolean Optional
body.viewport.height number Required
body.viewport.isLandscape boolean Optional
body.viewport.isMobile boolean Optional
body.viewport.width number Required
body.waitForSelector object Optional Wait for the selector to appear in page. Check options.
body.waitForSelector.hidden boolean Optional enum: [true]
body.waitForSelector.selector string Required
body.waitForSelector.timeout number Optional maximum: 120000
body.waitForSelector.visible boolean Optional enum: [true]
body.waitForTimeout number Optional Waits for a specified timeout before continuing. maximum: 120000
body object Required oneOf[1]
body.html string Optional oneOf[1]
body.url string Required oneOf[1]
body object Required oneOf[2]
body.html string Required oneOf[2]
body.url string Optional oneOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "elements": [
      {
        "selector": "h1"
      }
    ],
    "url": "https://www.example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get screenshot. — cloudflare.brapi-post_screenshot

Run Get screenshot. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.cacheTTL number Optional Cache TTL default is 5s. Set to 0 to disable. default: 5; minimum: 0; maximum: 86400
query.browser string Optional Rendering backend. Set to kitesurf to use Kitesurf (beta). enum: ["kitesurf"]
body object Required additionalProperties: false
body.actionTimeout number Optional The maximum duration allowed for the browser action to complete after the page has loaded (such as taking screenshots, extracting content, or generating PDFs). If this time limit is exceeded, the action stops and returns a timeout error. maximum: 120000
body.addScriptTag array Optional Adds a script element into the page with the desired URL or content.
body.addScriptTag[] object Optional additionalProperties: false
body.addScriptTag[].content string Optional
body.addScriptTag[].id string Optional
body.addScriptTag[].type string Optional
body.addScriptTag[].url string Optional format: "uri"
body.addStyleTag array Optional Adds a &lt;link rel="stylesheet"&gt; tag into the page with the desired URL or a &lt;style type="text/css"&gt; tag with the content.
body.addStyleTag[] object Optional
body.addStyleTag[].content string Optional
body.addStyleTag[].url string Optional format: "uri"
body.allowRequestPattern array Optional Only allow requests that match the provided regex patterns, eg. '/^.*.(css)'. Reject rules are applied first.
body.allowRequestPattern[] string Optional
body.allowResourceTypes array Optional Only allow requests that match the provided resource types, eg. 'image' or 'script'. Reject rules are applied first.
body.allowResourceTypes[] — Optional
body.allowResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.allowResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.allowResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.allowResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.allowResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.allowResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.allowResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.allowResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.allowResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.allowResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.allowResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.allowResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.allowResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.allowResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.allowResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.allowResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.allowResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.allowResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.authenticate object Optional Provide credentials for HTTP authentication.
body.authenticate.password string Required minLength: 1
body.authenticate.username string Required minLength: 1
body.bestAttempt boolean Optional Attempt to proceed when 'awaited' events fail or timeout.
body.cookies array Optional Check options.
body.cookies[] object Optional
body.cookies[].domain string Optional
body.cookies[].expires number Optional
body.cookies[].httpOnly boolean Optional
body.cookies[].name string Required Cookie name.
body.cookies[].partitionKey string Optional
body.cookies[].path string Optional
body.cookies[].priority — Optional
body.cookies[].priority string Optional anyOf[1]; enum: ["Low"]
body.cookies[].priority string Optional anyOf[2]; enum: ["Medium"]
body.cookies[].priority string Optional anyOf[3]; enum: ["High"]
body.cookies[].sameParty boolean Optional
body.cookies[].sameSite — Optional
body.cookies[].sameSite string Optional anyOf[1]; enum: ["Strict"]
body.cookies[].sameSite string Optional anyOf[2]; enum: ["Lax"]
body.cookies[].sameSite string Optional anyOf[3]; enum: ["None"]
body.cookies[].secure boolean Optional
body.cookies[].sourcePort number Optional
body.cookies[].sourceScheme — Optional
body.cookies[].sourceScheme string Optional anyOf[1]; enum: ["Unset"]
body.cookies[].sourceScheme string Optional anyOf[2]; enum: ["NonSecure"]
body.cookies[].sourceScheme string Optional anyOf[3]; enum: ["Secure"]
body.cookies[].url string Optional
body.cookies[].value string Required
body.emulateMediaType string Optional
body.gotoOptions object Optional Check options. default: {}
body.gotoOptions.referer string Optional
body.gotoOptions.referrerPolicy string Optional
body.gotoOptions.timeout number Optional default: 30000; maximum: 60000
body.gotoOptions.waitUntil — Optional default: "domcontentloaded"
body.gotoOptions.waitUntil string Optional anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil string Optional anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil string Optional anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil string Optional anyOf[4]; enum: ["networkidle2"]
body.gotoOptions.waitUntil array Optional anyOf[5]
body.gotoOptions.waitUntil[] — Optional anyOf[5]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[4]; enum: ["networkidle2"]
body.html string Optional Set the content of the page, eg: &lt;h1&gt;Hello World!!&lt;/h1&gt;. Either html or url must be set. minLength: 1
body.rejectRequestPattern array Optional Block undesired requests that match the provided regex patterns, eg. '/^.*.(css)'.
body.rejectRequestPattern[] string Optional
body.rejectResourceTypes array Optional Block undesired requests that match the provided resource types, eg. 'image' or 'script'.
body.rejectResourceTypes[] — Optional
body.rejectResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.rejectResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.rejectResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.rejectResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.rejectResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.rejectResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.rejectResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.rejectResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.rejectResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.rejectResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.rejectResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.rejectResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.rejectResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.rejectResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.rejectResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.rejectResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.rejectResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.rejectResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.screenshotOptions object Optional Check options. default: {}; additionalProperties: false
body.screenshotOptions.captureBeyondViewport boolean Optional
body.screenshotOptions.clip object Optional
body.screenshotOptions.clip.height number Required
body.screenshotOptions.clip.scale number Optional
body.screenshotOptions.clip.width number Required
body.screenshotOptions.clip.x number Required
body.screenshotOptions.clip.y number Required
body.screenshotOptions.encoding — Optional default: "binary"
body.screenshotOptions.encoding string Optional anyOf[1]; enum: ["binary"]
body.screenshotOptions.encoding string Optional anyOf[2]; enum: ["base64"]
body.screenshotOptions.fromSurface boolean Optional
body.screenshotOptions.fullPage boolean Optional
body.screenshotOptions.omitBackground boolean Optional
body.screenshotOptions.optimizeForSpeed boolean Optional
body.screenshotOptions.quality number Optional
body.screenshotOptions.type — Optional default: "png"
body.screenshotOptions.type string Optional anyOf[1]; enum: ["png"]
body.screenshotOptions.type string Optional anyOf[2]; enum: ["jpeg"]
body.screenshotOptions.type string Optional anyOf[3]; enum: ["webp"]
body.scrollPage boolean Optional
body.selector string Optional
body.setExtraHTTPHeaders object Optional additionalProperties: {"type":"string"}
body.setJavaScriptEnabled boolean Optional
body.url string Optional URL to navigate to, eg. https://example.com. format: "uri"
body.userAgent string Optional default: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
body.viewport object Optional Check options. default: {"height":1080,"width":1920}
body.viewport.deviceScaleFactor number Optional
body.viewport.hasTouch boolean Optional
body.viewport.height number Required
body.viewport.isLandscape boolean Optional
body.viewport.isMobile boolean Optional
body.viewport.width number Required
body.waitForSelector object Optional Wait for the selector to appear in page. Check options.
body.waitForSelector.hidden boolean Optional enum: [true]
body.waitForSelector.selector string Required
body.waitForSelector.timeout number Optional maximum: 120000
body.waitForSelector.visible boolean Optional enum: [true]
body.waitForTimeout number Optional Waits for a specified timeout before continuing. maximum: 120000
body object Required oneOf[1]
body.html string Optional oneOf[1]
body.url string Required oneOf[1]
body object Required oneOf[2]
body.html string Required oneOf[2]
body.url string Optional oneOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "url": "https://www.example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get HTML content and screenshot. — cloudflare.brapi-post_snapshot

Run Get HTML content and screenshot. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.cacheTTL number Optional Cache TTL default is 5s. Set to 0 to disable. default: 5; minimum: 0; maximum: 86400
query.browser string Optional Rendering backend. Set to kitesurf to use Kitesurf (beta). enum: ["kitesurf"]
body object Required additionalProperties: false
body.actionTimeout number Optional The maximum duration allowed for the browser action to complete after the page has loaded (such as taking screenshots, extracting content, or generating PDFs). If this time limit is exceeded, the action stops and returns a timeout error. maximum: 120000
body.addScriptTag array Optional Adds a script element into the page with the desired URL or content.
body.addScriptTag[] object Optional additionalProperties: false
body.addScriptTag[].content string Optional
body.addScriptTag[].id string Optional
body.addScriptTag[].type string Optional
body.addScriptTag[].url string Optional format: "uri"
body.addStyleTag array Optional Adds a &lt;link rel="stylesheet"&gt; tag into the page with the desired URL or a &lt;style type="text/css"&gt; tag with the content.
body.addStyleTag[] object Optional
body.addStyleTag[].content string Optional
body.addStyleTag[].url string Optional format: "uri"
body.allowRequestPattern array Optional Only allow requests that match the provided regex patterns, eg. '/^.*.(css)'. Reject rules are applied first.
body.allowRequestPattern[] string Optional
body.allowResourceTypes array Optional Only allow requests that match the provided resource types, eg. 'image' or 'script'. Reject rules are applied first.
body.allowResourceTypes[] — Optional
body.allowResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.allowResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.allowResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.allowResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.allowResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.allowResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.allowResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.allowResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.allowResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.allowResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.allowResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.allowResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.allowResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.allowResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.allowResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.allowResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.allowResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.allowResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.authenticate object Optional Provide credentials for HTTP authentication.
body.authenticate.password string Required minLength: 1
body.authenticate.username string Required minLength: 1
body.bestAttempt boolean Optional Attempt to proceed when 'awaited' events fail or timeout.
body.cookies array Optional Check options.
body.cookies[] object Optional
body.cookies[].domain string Optional
body.cookies[].expires number Optional
body.cookies[].httpOnly boolean Optional
body.cookies[].name string Required Cookie name.
body.cookies[].partitionKey string Optional
body.cookies[].path string Optional
body.cookies[].priority — Optional
body.cookies[].priority string Optional anyOf[1]; enum: ["Low"]
body.cookies[].priority string Optional anyOf[2]; enum: ["Medium"]
body.cookies[].priority string Optional anyOf[3]; enum: ["High"]
body.cookies[].sameParty boolean Optional
body.cookies[].sameSite — Optional
body.cookies[].sameSite string Optional anyOf[1]; enum: ["Strict"]
body.cookies[].sameSite string Optional anyOf[2]; enum: ["Lax"]
body.cookies[].sameSite string Optional anyOf[3]; enum: ["None"]
body.cookies[].secure boolean Optional
body.cookies[].sourcePort number Optional
body.cookies[].sourceScheme — Optional
body.cookies[].sourceScheme string Optional anyOf[1]; enum: ["Unset"]
body.cookies[].sourceScheme string Optional anyOf[2]; enum: ["NonSecure"]
body.cookies[].sourceScheme string Optional anyOf[3]; enum: ["Secure"]
body.cookies[].url string Optional
body.cookies[].value string Required
body.emulateMediaType string Optional
body.formats array Optional default: ["content","screenshot"]
body.formats[] string Optional enum: ["content","screenshot","markdown","accessibilityTree"]
body.gotoOptions object Optional Check options. default: {}
body.gotoOptions.referer string Optional
body.gotoOptions.referrerPolicy string Optional
body.gotoOptions.timeout number Optional default: 30000; maximum: 60000
body.gotoOptions.waitUntil — Optional default: "domcontentloaded"
body.gotoOptions.waitUntil string Optional anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil string Optional anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil string Optional anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil string Optional anyOf[4]; enum: ["networkidle2"]
body.gotoOptions.waitUntil array Optional anyOf[5]
body.gotoOptions.waitUntil[] — Optional anyOf[5]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[1]; enum: ["load"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[2]; enum: ["domcontentloaded"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[3]; enum: ["networkidle0"]
body.gotoOptions.waitUntil[] string Optional anyOf[5]; anyOf[4]; enum: ["networkidle2"]
body.html string Optional Set the content of the page, eg: &lt;h1&gt;Hello World!!&lt;/h1&gt;. Either html or url must be set. minLength: 1
body.rejectRequestPattern array Optional Block undesired requests that match the provided regex patterns, eg. '/^.*.(css)'.
body.rejectRequestPattern[] string Optional
body.rejectResourceTypes array Optional Block undesired requests that match the provided resource types, eg. 'image' or 'script'.
body.rejectResourceTypes[] — Optional
body.rejectResourceTypes[] string Optional anyOf[1]; enum: ["document"]
body.rejectResourceTypes[] string Optional anyOf[2]; enum: ["stylesheet"]
body.rejectResourceTypes[] string Optional anyOf[3]; enum: ["image"]
body.rejectResourceTypes[] string Optional anyOf[4]; enum: ["media"]
body.rejectResourceTypes[] string Optional anyOf[5]; enum: ["font"]
body.rejectResourceTypes[] string Optional anyOf[6]; enum: ["script"]
body.rejectResourceTypes[] string Optional anyOf[7]; enum: ["texttrack"]
body.rejectResourceTypes[] string Optional anyOf[8]; enum: ["xhr"]
body.rejectResourceTypes[] string Optional anyOf[9]; enum: ["fetch"]
body.rejectResourceTypes[] string Optional anyOf[10]; enum: ["prefetch"]
body.rejectResourceTypes[] string Optional anyOf[11]; enum: ["eventsource"]
body.rejectResourceTypes[] string Optional anyOf[12]; enum: ["websocket"]
body.rejectResourceTypes[] string Optional anyOf[13]; enum: ["manifest"]
body.rejectResourceTypes[] string Optional anyOf[14]; enum: ["signedexchange"]
body.rejectResourceTypes[] string Optional anyOf[15]; enum: ["ping"]
body.rejectResourceTypes[] string Optional anyOf[16]; enum: ["cspviolationreport"]
body.rejectResourceTypes[] string Optional anyOf[17]; enum: ["preflight"]
body.rejectResourceTypes[] string Optional anyOf[18]; enum: ["other"]
body.screenshotOptions object Optional default: {}; additionalProperties: false
body.screenshotOptions.captureBeyondViewport boolean Optional
body.screenshotOptions.clip object Optional
body.screenshotOptions.clip.height number Required
body.screenshotOptions.clip.scale number Optional
body.screenshotOptions.clip.width number Required
body.screenshotOptions.clip.x number Required
body.screenshotOptions.clip.y number Required
body.screenshotOptions.fromSurface boolean Optional
body.screenshotOptions.fullPage boolean Optional
body.screenshotOptions.omitBackground boolean Optional
body.screenshotOptions.optimizeForSpeed boolean Optional
body.screenshotOptions.quality number Optional
body.screenshotOptions.type — Optional default: "png"
body.screenshotOptions.type string Optional anyOf[1]; enum: ["png"]
body.screenshotOptions.type string Optional anyOf[2]; enum: ["jpeg"]
body.screenshotOptions.type string Optional anyOf[3]; enum: ["webp"]
body.setExtraHTTPHeaders object Optional additionalProperties: {"type":"string"}
body.setJavaScriptEnabled boolean Optional
body.url string Optional URL to navigate to, eg. https://example.com. format: "uri"
body.userAgent string Optional default: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
body.viewport object Optional Check options. default: {"height":1080,"width":1920}
body.viewport.deviceScaleFactor number Optional
body.viewport.hasTouch boolean Optional
body.viewport.height number Required
body.viewport.isLandscape boolean Optional
body.viewport.isMobile boolean Optional
body.viewport.width number Required
body.waitForSelector object Optional Wait for the selector to appear in page. Check options.
body.waitForSelector.hidden boolean Optional enum: [true]
body.waitForSelector.selector string Required
body.waitForSelector.timeout number Optional maximum: 120000
body.waitForSelector.visible boolean Optional enum: [true]
body.waitForTimeout number Optional Waits for a specified timeout before continuing. maximum: 120000
body object Required oneOf[1]
body.html string Optional oneOf[1]
body.url string Required oneOf[1]
body object Required oneOf[2]
body.html string Required oneOf[2]
body.url string Optional oneOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "formats": [
      "content",
      "screenshot"
    ],
    "url": "https://www.example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get build-minute availability — cloudflare.getaccountlimits

Run Get build-minute availability with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get builds by Worker version — cloudflare.getbuildsbyversionids

Run Get builds by Worker version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
query object Required additionalProperties: false
query.version_ids — Required $ref: "#/definitions/builds_version_ids"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  },
  "query": {
    "version_ids": "123e4567-e89b-12d3-a456-426614174000,223e4567-e89b-12d3-a456-426614174001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get latest builds by script IDs — cloudflare.getlatestbuildsbyscripts

Run Get latest builds by script IDs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
query object Required additionalProperties: false
query.external_script_ids — Required $ref: "#/definitions/builds_external_script_ids"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  },
  "query": {
    "external_script_ids": "dd7160bb9cef458093557736f4b9e75b,42fb14fe81df47139d3be684e4c637a6,ff7cf9a7582f4c0d90a4b95cb17d659e"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Workers build — cloudflare.getbuildbyuuid

Run Get a Workers build with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.build_uuid — Required $ref: "#/definitions/builds_build_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "build_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Cancel a Workers build — cloudflare.cancelbuildbyuuid

Run Cancel a Workers build with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.build_uuid — Required $ref: "#/definitions/builds_build_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "build_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workers build logs — cloudflare.getbuildlogs

Run Get Workers build logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.build_uuid — Required $ref: "#/definitions/builds_build_uuid"
query object Optional additionalProperties: false
query.cursor — Optional $ref: "#/definitions/builds_cursor"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "build_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create or update a repository connection — cloudflare.upsertrepoconnection

Run Create or update a repository connection with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
body — Required $ref: "#/definitions/builds_UpsertRepoConnectionRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  },
  "body": {
    "repo_id": "workers-sdk",
    "repo_name": "workers-sdk",
    "provider_type": "github",
    "provider_account_id": "cloudflare",
    "provider_account_name": "Cloudflare"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a repository connection — cloudflare.deleterepoconnection

Run Delete a repository connection with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.repo_connection_uuid — Required $ref: "#/definitions/builds_repo_connection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "repo_connection_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get repository configuration autofill — cloudflare.getworkerconfigautofill

Run Get repository configuration autofill with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.provider_type — Required SCM provider type $ref: "#/definitions/builds_SCMProviderType"
path.provider_account_id — Required $ref: "#/definitions/builds_provider_account_id"
path.repo_id — Required $ref: "#/definitions/builds_repo_id"
query object Required additionalProperties: false
query.branch — Required $ref: "#/definitions/builds_branch"
query.root_directory — Optional $ref: "#/definitions/builds_root_directory"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "provider_type": "github",
    "provider_account_id": "cloudflare",
    "repo_id": "workers-sdk"
  },
  "query": {
    "branch": "main"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List build tokens — cloudflare.listbuildtokens

Run List build tokens with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
query object Optional additionalProperties: false
query.page integer Optional Page number for pagination default: 1; minimum: 1
query.per_page integer Optional Number of items per page default: 50; minimum: 1; maximum: 200

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create build token — cloudflare.createbuildtoken

Run Create build token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
body — Required $ref: "#/definitions/builds_CreateBuildTokenRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  },
  "body": {
    "build_token_name": "My Build Token",
    "build_token_secret": "super-secret-token",
    "cloudflare_token_id": "cf-token-123"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a build token — cloudflare.deletebuildtoken

Run Delete a build token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.build_token_uuid — Required $ref: "#/definitions/builds_build_token_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "build_token_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a build trigger — cloudflare.createtrigger

Run Create a build trigger with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
body — Required $ref: "#/definitions/builds_CreateTriggerRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  },
  "body": {
    "external_script_id": "dd7160bb9cef458093557736f4b9e75b",
    "build_token_uuid": "00000000-0000-4000-8000-000000000000",
    "trigger_name": "Production Deploy",
    "build_command": "npm run build",
    "deploy_command": "npx wrangler deploy",
    "root_directory": "/",
    "branch_includes": [
      "main"
    ],
    "branch_excludes": [],
    "path_includes": [
      "*"
    ],
    "path_excludes": [
      "*.md"
    ],
    "repo_connection_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a build trigger — cloudflare.deletetrigger

Run Delete a build trigger with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.trigger_uuid — Required $ref: "#/definitions/builds_trigger_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "trigger_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a build trigger — cloudflare.updatetrigger

Run Update a build trigger with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.trigger_uuid — Required $ref: "#/definitions/builds_trigger_uuid"
body — Required $ref: "#/definitions/builds_UpdateTriggerRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "trigger_uuid": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start a Workers build — cloudflare.createmanualbuild

Run Start a Workers build with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.trigger_uuid — Required $ref: "#/definitions/builds_trigger_uuid"
body — Required $ref: "#/definitions/builds_CreateBuildRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "trigger_uuid": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "commit_hash": "abc123def456"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List build variables — cloudflare.listenvironmentvariables

Run List build variables with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.trigger_uuid — Required $ref: "#/definitions/builds_trigger_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "trigger_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set build variables — cloudflare.upsertenvironmentvariables

Run Set build variables with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.trigger_uuid — Required $ref: "#/definitions/builds_trigger_uuid"
body — Required $ref: "#/definitions/builds_EnvironmentVariablesRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "trigger_uuid": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "API_KEY": {
      "is_secret": true,
      "value": "secret-key"
    },
    "NODE_ENV": {
      "is_secret": false,
      "value": "production"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a build variable — cloudflare.deleteenvironmentvariable

Run Delete a build variable with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.trigger_uuid — Required $ref: "#/definitions/builds_trigger_uuid"
path.environment_variable_key — Required $ref: "#/definitions/builds_environment_variable_key"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "trigger_uuid": "00000000-0000-4000-8000-000000000000",
    "environment_variable_key": "NODE_ENV"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Purge a trigger's build cache — cloudflare.purgebuildcache

Run Purge a trigger's build cache with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.trigger_uuid — Required $ref: "#/definitions/builds_trigger_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "trigger_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Worker build configuration — cloudflare.createworkerbuild

Run Create Worker build configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
body — Required $ref: "#/definitions/builds_CreateWorkerRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  },
  "body": {
    "script_tag": "dd7160bb9cef458093557736f4b9e75b",
    "git_repository": {
      "repo_id": "workers-sdk",
      "repo_name": "workers-sdk",
      "provider_type": "github",
      "provider_account_id": "cloudflare",
      "provider_account_name": "Cloudflare",
      "branch": "main"
    },
    "production_settings": {
      "build_command": "npm run build",
      "deploy_command": "npx wrangler deploy",
      "build_token_uuid": "00000000-0000-4000-8000-000000000000"
    },
    "previews_enabled": false,
    "previews_base_config": {
      "build_command": "npm run build",
      "deploy_command": "npx wrangler deploy",
      "build_token_uuid": "00000000-0000-4000-8000-000000000000"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List builds for a Worker — cloudflare.listbuildsbyscript

Run List builds for a Worker with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.external_script_id — Required $ref: "#/definitions/builds_external_script_id"
query object Optional additionalProperties: false
query.page integer Optional Page number for pagination default: 1; minimum: 1
query.per_page integer Optional Number of items per page default: 50; minimum: 1; maximum: 200

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "external_script_id": "dd7160bb9cef458093557736f4b9e75b"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List triggers for a Worker — cloudflare.listtriggersbyscript

Run List triggers for a Worker with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.external_script_id — Required $ref: "#/definitions/builds_external_script_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "external_script_id": "dd7160bb9cef458093557736f4b9e75b"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List deploy hooks — cloudflare.listdeployhooks

Run List deploy hooks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_name — Required Human-readable name of the worker. $ref: "#/definitions/builds_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_name": "my-worker"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a deploy hook — cloudflare.createdeployhook

Run Create a deploy hook with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_name — Required Human-readable name of the worker. $ref: "#/definitions/builds_script_name"
body — Required $ref: "#/definitions/builds_CreateDeployHookRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_name": "my-worker"
  },
  "body": {
    "deploy_hook_name": "Production Deploy Hook",
    "branch": "main"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a deploy hook — cloudflare.deletedeployhook

Run Delete a deploy hook with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_name — Required Human-readable name of the worker. $ref: "#/definitions/builds_script_name"
path.deploy_hook_uuid — Required Deploy hook UUID $ref: "#/definitions/builds_deploy_hook_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_name": "my-worker",
    "deploy_hook_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a deploy hook — cloudflare.getdeployhook

Run Get a deploy hook with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_name — Required Human-readable name of the worker. $ref: "#/definitions/builds_script_name"
path.deploy_hook_uuid — Required Deploy hook UUID $ref: "#/definitions/builds_deploy_hook_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_name": "my-worker",
    "deploy_hook_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a deploy hook — cloudflare.updatedeployhook

Run Update a deploy hook with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_name — Required Human-readable name of the worker. $ref: "#/definitions/builds_script_name"
path.deploy_hook_uuid — Required Deploy hook UUID $ref: "#/definitions/builds_deploy_hook_uuid"
body — Required $ref: "#/definitions/builds_CreateDeployHookRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_name": "my-worker",
    "deploy_hook_uuid": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "deploy_hook_name": "Production Deploy Hook",
    "branch": "main"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Worker build configuration — cloudflare.deleteworkerbuild

Run Delete Worker build configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_tag — Required The Worker script tag (external script ID) $ref: "#/definitions/builds_external_script_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_tag": "dd7160bb9cef458093557736f4b9e75b"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker build configuration — cloudflare.getworkerbuild

Run Get Worker build configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_tag — Required The Worker script tag (external script ID) $ref: "#/definitions/builds_external_script_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_tag": "dd7160bb9cef458093557736f4b9e75b"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Migrate worker to previews — cloudflare.migrateworkertopreviews

Run Migrate worker to previews with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_tag — Required The Worker script tag (external script ID) $ref: "#/definitions/builds_external_script_id"
body — Required $ref: "#/definitions/builds_MigrateToPreviewsRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_tag": "dd7160bb9cef458093557736f4b9e75b"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List previews — cloudflare.listworkerpreviews

Run List previews with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_tag — Required The Worker script tag (external script ID) $ref: "#/definitions/builds_external_script_id"
query object Optional additionalProperties: false
query.page integer Optional Page number for pagination default: 1; minimum: 1
query.per_page integer Optional Number of items per page default: 50; minimum: 1; maximum: 200

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_tag": "dd7160bb9cef458093557736f4b9e75b"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get preview — cloudflare.getworkerpreview

Run Get preview with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_tag — Required The Worker script tag (external script ID) $ref: "#/definitions/builds_external_script_id"
path.preview_id — Required The script tag of the Preview, which is a Worker in its own right $ref: "#/definitions/builds_external_script_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_tag": "dd7160bb9cef458093557736f4b9e75b",
    "preview_id": "dd7160bb9cef458093557736f4b9e75b"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List builds by preview — cloudflare.listbuildsbypreview

Run List builds by preview with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_tag — Required The Worker script tag (external script ID) $ref: "#/definitions/builds_external_script_id"
path.preview_id — Required The script tag of the Preview, which is a Worker in its own right $ref: "#/definitions/builds_external_script_id"
query object Optional additionalProperties: false
query.page integer Optional Page number for pagination default: 1; minimum: 1
query.per_page integer Optional Number of items per page default: 50; minimum: 1; maximum: 200

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_tag": "dd7160bb9cef458093557736f4b9e75b",
    "preview_id": "dd7160bb9cef458093557736f4b9e75b"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create preview build — cloudflare.createpreviewbuild

Run Create preview build with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/builds_account_id"
path.script_tag — Required The Worker script tag (external script ID) $ref: "#/definitions/builds_external_script_id"
path.preview_id — Required The script tag of the Preview, which is a Worker in its own right $ref: "#/definitions/builds_external_script_id"
body — Required $ref: "#/definitions/builds_CreateBuildRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "script_tag": "dd7160bb9cef458093557736f4b9e75b",
    "preview_id": "dd7160bb9cef458093557736f4b9e75b"
  },
  "body": {
    "commit_hash": "abc123def456"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Subscriptions — cloudflare.account-subscriptions-bulk-create-subscription

Run Create Subscriptions with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
query object Optional additionalProperties: false
query.idemp_key string Optional
body object Required
body.coupon_code string Optional
body.payment_hold_id integer Optional
body.subscriptions array Optional
body.subscriptions[] — Optional $ref: "#/definitions/bill-subs-api_subscription-v2"
body.user_is_on_session boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List apps — cloudflare.calls-apps-list

Run List apps with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/calls_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an SFU app — cloudflare.calls-apps-create-a-new-app

Run Create an SFU app with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/calls_account_identifier"
body — Required $ref: "#/definitions/calls_app_editable_fields"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an SFU app — cloudflare.calls-apps-delete-app

Run Delete an SFU app with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/calls_identifier"
path.account_id — Required $ref: "#/definitions/calls_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "2a95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve SFU app details — cloudflare.calls-apps-retrieve-app-details

Run Retrieve SFU app details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/calls_identifier"
path.account_id — Required $ref: "#/definitions/calls_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "2a95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update SFU app details — cloudflare.calls-apps-update-app-details

Run Update SFU app details with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/calls_identifier"
path.account_id — Required $ref: "#/definitions/calls_account_identifier"
body — Required $ref: "#/definitions/calls_app_editable_fields"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "2a95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List TURN keys — cloudflare.calls-turn-key-list

Run List TURN keys with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/calls_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a TURN key — cloudflare.calls-turn-key-create

Run Create a TURN key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/calls_account_identifier"
body — Required $ref: "#/definitions/calls_turn_key_editable_fields"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete TURN key — cloudflare.calls-delete-turn-key

Run Delete TURN key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.key_id — Required $ref: "#/definitions/calls_identifier"
path.account_id — Required $ref: "#/definitions/calls_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "key_id": "2a95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve TURN key details — cloudflare.calls-retrieve-turn-key-details

Run Retrieve TURN key details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.key_id — Required $ref: "#/definitions/calls_identifier"
path.account_id — Required $ref: "#/definitions/calls_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "key_id": "2a95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update TURN key details — cloudflare.calls-update-turn-key

Run Update TURN key details with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.key_id — Required $ref: "#/definitions/calls_identifier"
path.account_id — Required $ref: "#/definitions/calls_account_identifier"
body — Required $ref: "#/definitions/calls_turn_key_editable_fields"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "key_id": "2a95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Cloudflare Tunnels — cloudflare.cloudflare-tunnel-list-cloudflare-tunnels

Run List Cloudflare Tunnels with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
query object Optional additionalProperties: false
query.name — Optional $ref: "#/definitions/tunnel_tunnel_name"
query.is_deleted boolean Optional If true, only include deleted tunnels. If false, exclude deleted tunnels. If empty, all tunnels will be included.
query.existed_at — Optional $ref: "#/definitions/tunnel_existed_at"
query.uuid — Optional $ref: "#/definitions/tunnel_tunnel_id"
query.was_active_at string Optional format: "date-time"
query.was_inactive_at string Optional format: "date-time"
query.include_prefix string Optional
query.exclude_prefix string Optional
query.status — Optional $ref: "#/definitions/tunnel_status"
query.per_page — Optional $ref: "#/definitions/tunnel_per_page"
query.page — Optional $ref: "#/definitions/tunnel_page_number"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Cloudflare Tunnel — cloudflare.cloudflare-tunnel-create-a-cloudflare-tunnel

Run Create a Cloudflare Tunnel with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
body object Required
body.config_src — Optional
body.config_src — Optional allOf[1]; $ref: "#/definitions/tunnel_config_src"
body.name — Required $ref: "#/definitions/tunnel_tunnel_name"
body.tunnel_secret — Optional $ref: "#/definitions/tunnel_tunnel_secret"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "blog"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Cloudflare Tunnel — cloudflare.cloudflare-tunnel-delete-a-cloudflare-tunnel

Run Delete a Cloudflare Tunnel with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Cloudflare Tunnel — cloudflare.cloudflare-tunnel-get-a-cloudflare-tunnel

Run Get a Cloudflare Tunnel with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Cloudflare Tunnel — cloudflare.cloudflare-tunnel-update-a-cloudflare-tunnel

Run Update a Cloudflare Tunnel with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
body object Required
body.name — Optional $ref: "#/definitions/tunnel_tunnel_name"
body.tunnel_secret — Optional $ref: "#/definitions/tunnel_tunnel_secret"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Tunnel configuration — cloudflare.cloudflare-tunnel-configuration-get-configuration

Run Get Tunnel configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_identifier"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Tunnel configuration — cloudflare.cloudflare-tunnel-configuration-put-configuration

Run Update Tunnel configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_identifier"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id-2"
body object Required
body.config — Optional
body.config — Optional allOf[1]; $ref: "#/definitions/tunnel_config"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Clean up Cloudflare Tunnel connections — cloudflare.cloudflare-tunnel-clean-up-cloudflare-tunnel-connections

Run Clean up Cloudflare Tunnel connections with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"
query object Optional additionalProperties: false
query.client_id — Optional $ref: "#/definitions/tunnel_client_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Cloudflare Tunnel connections — cloudflare.cloudflare-tunnel-list-cloudflare-tunnel-connections

Run List Cloudflare Tunnel connections with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Cloudflare Tunnel connector — cloudflare.cloudflare-tunnel-get-cloudflare-tunnel-connector

Run Get Cloudflare Tunnel connector with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"
path.connector_id — Required $ref: "#/definitions/tunnel_client_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
    "connector_id": "1bedc50d-42b3-473c-b108-ff3d10c0d925"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Cloudflare Tunnel management token — cloudflare.cloudflare-tunnel-get-a-cloudflare-tunnel-management-token

Run Get a Cloudflare Tunnel management token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"
body object Required
body.resources array Required
body.resources[] — Optional $ref: "#/definitions/tunnel_management-resources"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "resources": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Cloudflare Tunnel token — cloudflare.cloudflare-tunnel-get-a-cloudflare-tunnel-token

Run Get a Cloudflare Tunnel token with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Turnstile Widgets — cloudflare.accounts-turnstile-widgets-list

Run List Turnstile Widgets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/turnstile_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of items per page. default: 25; minimum: 5; maximum: 1000
query.order string Optional Field to order widgets by. enum: ["id","sitekey","name","created_on","modified_on"]
query.direction string Optional Direction to order widgets. enum: ["asc","desc"]
query.filter string Optional Filter widgets by field. The name field uses case-insensitive substring matching; sitekey uses exact matching. Format: field:value Supported fields: - name - Filter by widget name (e.g., filter=name:login-form) - sitekey - Filter by sitekey (e.g., filter=sitekey:0x4AAA) Returns 400 Bad Request if the field is unsupported or format is invalid. An empty filter value returns all results.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Turnstile Widget — cloudflare.accounts-turnstile-widget-create

Run Create a Turnstile Widget with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/turnstile_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of items per page. default: 25; minimum: 5; maximum: 1000
query.order string Optional Field to order widgets by. enum: ["id","sitekey","name","created_on","modified_on"]
query.direction string Optional Direction to order widgets. enum: ["asc","desc"]
query.filter string Optional Filter widgets by field. The name field uses case-insensitive substring matching; sitekey uses exact matching. Format: field:value Supported fields: - name - Filter by widget name (e.g., filter=name:login-form) - sitekey - Filter by sitekey (e.g., filter=sitekey:0x4AAA) Returns 400 Bad Request if the field is unsupported or format is invalid. An empty filter value returns all results.
body object Required
body.bot_fight_mode — Optional $ref: "#/definitions/turnstile_bot_fight_mode"
body.clearance_level — Optional $ref: "#/definitions/turnstile_clearance_level"
body.domains — Required $ref: "#/definitions/turnstile_domains"
body.ephemeral_id — Optional $ref: "#/definitions/turnstile_ephemeral_id"
body.mode — Required
body.mode — Required allOf[1]; $ref: "#/definitions/turnstile_widget_mode"
body.name — Required $ref: "#/definitions/turnstile_name"
body.offlabel — Optional $ref: "#/definitions/turnstile_offlabel"
body.region — Optional $ref: "#/definitions/turnstile_region"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "blog.cloudflare.com login form",
    "mode": "invisible",
    "domains": [
      "203.0.113.1",
      "cloudflare.com",
      "blog.example.com"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Turnstile Widget — cloudflare.accounts-turnstile-widget-delete

Run Delete a Turnstile Widget with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/turnstile_identifier"
path.sitekey — Required $ref: "#/definitions/turnstile_sitekey"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sitekey": "0x4AAF00AAAABn0R22HWm-YUc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Turnstile Widget Details — cloudflare.accounts-turnstile-widget-get

Run Turnstile Widget Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/turnstile_identifier"
path.sitekey — Required $ref: "#/definitions/turnstile_sitekey"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sitekey": "0x4AAF00AAAABn0R22HWm-YUc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Turnstile Widget — cloudflare.accounts-turnstile-widget-update

Run Update a Turnstile Widget with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/turnstile_identifier"
path.sitekey — Required $ref: "#/definitions/turnstile_sitekey"
body object Required
body.bot_fight_mode — Optional $ref: "#/definitions/turnstile_bot_fight_mode"
body.clearance_level — Optional $ref: "#/definitions/turnstile_clearance_level"
body.domains — Required $ref: "#/definitions/turnstile_domains"
body.ephemeral_id — Optional $ref: "#/definitions/turnstile_ephemeral_id"
body.mode — Required
body.mode — Required allOf[1]; $ref: "#/definitions/turnstile_widget_mode"
body.name — Required $ref: "#/definitions/turnstile_name"
body.offlabel — Optional $ref: "#/definitions/turnstile_offlabel"
body.region — Optional $ref: "#/definitions/turnstile_region"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sitekey": "0x4AAF00AAAABn0R22HWm-YUc"
  },
  "body": {
    "name": "blog.cloudflare.com login form",
    "mode": "invisible",
    "domains": [
      "203.0.113.1",
      "cloudflare.com",
      "blog.example.com"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rotate Secret for a Turnstile Widget — cloudflare.accounts-turnstile-widget-rotate-secret

Run Rotate Secret for a Turnstile Widget with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/turnstile_identifier"
path.sitekey — Required $ref: "#/definitions/turnstile_sitekey"
body object Required
body.invalidate_immediately — Optional $ref: "#/definitions/turnstile_invalidate_immediately"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sitekey": "0x4AAF00AAAABn0R22HWm-YUc"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Setup Intent — cloudflare.account-billing-create-setup-intent

Run Create Setup Intent with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Latest Banner Grab Result — cloudflare.get_getbanners

Run Get the Latest Banner Grab Result with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Defines the Account ID.
path.config_id string Required Defines the Config ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "config_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves a file from Binary Storage — cloudflare.get_bindbgetbinary

Run Retrieves a file from Binary Storage with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.hash string Required hash of the binary

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "hash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List events — cloudflare.get_eventlistget

Run List events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.cursor string Optional Cursor for pagination. When provided, filters are embedded in the cursor so you only need to pass cursor and pageSize. Returned in the previous response's result_info.cursor field. Use cursor-based pagination for deep pagination (beyond 100,000 records) or for optimal performance.
query.search array Optional default: []; maxItems: 10
query.search[] — Optional
query.search[] object Optional anyOf[1]; additionalProperties: false
query.search[].field string Required anyOf[1]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
query.search[].op string Required anyOf[1]; enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","find"]
query.search[].value string Required anyOf[1]; minLength: 1; maxLength: 512
query.search[] object Optional anyOf[2]; additionalProperties: false
query.search[].field string Required anyOf[2]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
query.search[].op string Required anyOf[2]; enum: ["in"]
query.search[].value array Required anyOf[2]; minItems: 1; maxItems: 100
query.search[].value[] string Optional anyOf[2]; minLength: 1; maxLength: 512
query.search[] object Optional anyOf[3]; additionalProperties: false
query.search[].field string Required anyOf[3]; enum: ["killChain"]
query.search[].op string Required anyOf[3]; enum: ["equals","not","gt","gte","lt","lte"]
query.search[].value — Required anyOf[3]
query.search[].value number Required anyOf[3]; anyOf[1]
query.search[].value string Required anyOf[3]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
query.search[] object Optional anyOf[4]; additionalProperties: false
query.search[].field string Required anyOf[4]; enum: ["killChain"]
query.search[].op string Required anyOf[4]; enum: ["in"]
query.search[].value array Required anyOf[4]; minItems: 1; maxItems: 100
query.search[].value[] — Optional anyOf[4]
query.search[].value[] number Optional anyOf[4]; anyOf[1]
query.search[].value[] string Optional anyOf[4]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
query.search[] object Optional anyOf[5]; additionalProperties: false
query.search[].field string Required anyOf[5]; enum: ["hasChildren"]
query.search[].op string Required anyOf[5]; enum: ["equals","not","gt","gte","lt","lte"]
query.search[].value — Required anyOf[5]
query.search[].value boolean Required anyOf[5]; anyOf[1]
query.search[].value string Required anyOf[5]; anyOf[2]; enum: ["true"]
query.search[].value string Required anyOf[5]; anyOf[3]; enum: ["false"]
query.search[].value number Required anyOf[5]; anyOf[4]; enum: [1]
query.search[].value number Required anyOf[5]; anyOf[5]; enum: [0]
query.search[].value string Required anyOf[5]; anyOf[6]; enum: ["1"]
query.search[].value string Required anyOf[5]; anyOf[7]; enum: ["0"]
query.search[] object Optional anyOf[6]; additionalProperties: false
query.search[].field string Required anyOf[6]; enum: ["hasChildren"]
query.search[].op string Required anyOf[6]; enum: ["in"]
query.search[].value array Required anyOf[6]; minItems: 1; maxItems: 100
query.search[].value[] — Optional anyOf[6]
query.search[].value[] boolean Optional anyOf[6]; anyOf[1]
query.search[].value[] string Optional anyOf[6]; anyOf[2]; enum: ["true"]
query.search[].value[] string Optional anyOf[6]; anyOf[3]; enum: ["false"]
query.search[].value[] number Optional anyOf[6]; anyOf[4]; enum: [1]
query.search[].value[] number Optional anyOf[6]; anyOf[5]; enum: [0]
query.search[].value[] string Optional anyOf[6]; anyOf[6]; enum: ["1"]
query.search[].value[] string Optional anyOf[6]; anyOf[7]; enum: ["0"]
query.searchBranches array Optional JSON-encoded. OR branches of structured search filters. Filters within a branch are AND'd, branches are OR'd, and the result is AND'd with search: AND(search) AND OR(AND(branch 1), ...). Max 8 branches of 1-10 conditions each. Not supported for analytics datasets, and indicator filters are not yet supported inside branches. Cursor pages carry the original branches, so do not resend them with cursor. minItems: 1; maxItems: 8
query.searchBranches[] array Optional minItems: 1; maxItems: 10
query.searchBranches[][] — Optional
query.searchBranches[][] object Optional anyOf[1]; additionalProperties: false
query.searchBranches[][].field string Required anyOf[1]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
query.searchBranches[][].op string Required anyOf[1]; enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","find"]
query.searchBranches[][].value string Required anyOf[1]; minLength: 1; maxLength: 512
query.searchBranches[][] object Optional anyOf[2]; additionalProperties: false
query.searchBranches[][].field string Required anyOf[2]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
query.searchBranches[][].op string Required anyOf[2]; enum: ["in"]
query.searchBranches[][].value array Required anyOf[2]; minItems: 1; maxItems: 100
query.searchBranches[][].value[] string Optional anyOf[2]; minLength: 1; maxLength: 512
query.searchBranches[][] object Optional anyOf[3]; additionalProperties: false
query.searchBranches[][].field string Required anyOf[3]; enum: ["killChain"]
query.searchBranches[][].op string Required anyOf[3]; enum: ["equals","not","gt","gte","lt","lte"]
query.searchBranches[][].value — Required anyOf[3]
query.searchBranches[][].value number Required anyOf[3]; anyOf[1]
query.searchBranches[][].value string Required anyOf[3]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
query.searchBranches[][] object Optional anyOf[4]; additionalProperties: false
query.searchBranches[][].field string Required anyOf[4]; enum: ["killChain"]
query.searchBranches[][].op string Required anyOf[4]; enum: ["in"]
query.searchBranches[][].value array Required anyOf[4]; minItems: 1; maxItems: 100
query.searchBranches[][].value[] — Optional anyOf[4]
query.searchBranches[][].value[] number Optional anyOf[4]; anyOf[1]
query.searchBranches[][].value[] string Optional anyOf[4]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
query.searchBranches[][] object Optional anyOf[5]; additionalProperties: false
query.searchBranches[][].field string Required anyOf[5]; enum: ["hasChildren"]
query.searchBranches[][].op string Required anyOf[5]; enum: ["equals","not","gt","gte","lt","lte"]
query.searchBranches[][].value — Required anyOf[5]
query.searchBranches[][].value boolean Required anyOf[5]; anyOf[1]
query.searchBranches[][].value string Required anyOf[5]; anyOf[2]; enum: ["true"]
query.searchBranches[][].value string Required anyOf[5]; anyOf[3]; enum: ["false"]
query.searchBranches[][].value number Required anyOf[5]; anyOf[4]; enum: [1]
query.searchBranches[][].value number Required anyOf[5]; anyOf[5]; enum: [0]
query.searchBranches[][].value string Required anyOf[5]; anyOf[6]; enum: ["1"]
query.searchBranches[][].value string Required anyOf[5]; anyOf[7]; enum: ["0"]
query.searchBranches[][] object Optional anyOf[6]; additionalProperties: false
query.searchBranches[][].field string Required anyOf[6]; enum: ["hasChildren"]
query.searchBranches[][].op string Required anyOf[6]; enum: ["in"]
query.searchBranches[][].value array Required anyOf[6]; minItems: 1; maxItems: 100
query.searchBranches[][].value[] — Optional anyOf[6]
query.searchBranches[][].value[] boolean Optional anyOf[6]; anyOf[1]
query.searchBranches[][].value[] string Optional anyOf[6]; anyOf[2]; enum: ["true"]
query.searchBranches[][].value[] string Optional anyOf[6]; anyOf[3]; enum: ["false"]
query.searchBranches[][].value[] number Optional anyOf[6]; anyOf[4]; enum: [1]
query.searchBranches[][].value[] number Optional anyOf[6]; anyOf[5]; enum: [0]
query.searchBranches[][].value[] string Optional anyOf[6]; anyOf[6]; enum: ["1"]
query.searchBranches[][].value[] string Optional anyOf[6]; anyOf[7]; enum: ["0"]
query.page number Optional Page number (1-indexed) for offset-based pagination. Limited to offset of 100,000 records. For deep pagination, use cursor-based pagination instead.
query.pageSize number Optional Number of results per page. Maximum 25,000.
query.orderBy string Optional
query.order string Optional enum: ["asc","desc"]
query.datasetId array Optional Dataset UUIDs to query, or one standalone scope value: 'all'/'*' or 'operational' for readable intelligence datasets (isAnalytics=false), or 'analytics' for readable analytics datasets (isAnalytics=true). Scope values query at most 50 datasets. If not provided, uses the default dataset.
query.datasetId[] string Optional
query.forceRefresh boolean Optional
query.format string Optional enum: ["json","stix2","taxii"]
query.cache string Optional Cache strategy. 'from-graph' serves results from the graph-node KV cache when all requested UUIDs are cached; falls back to normal path on partial/zero hit. enum: ["from-graph"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Search events — cloudflare.post_eventlist

Run Search events with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.forceRefresh boolean Optional
query.format string Optional Output format for event data. 'json' returns the default format, 'stix2' returns STIX 2.1 Sighting SROs with linked Indicator SDOs, Observed Data SDOs, and SCOs, 'taxii' returns a TAXII 2.1 Envelope with Content-Type application/taxii+json;version=2.1. enum: ["json","stix2","taxii"]
query.cache string Optional Cache strategy. 'from-graph' serves results from the graph-node KV cache when all requested UUIDs are cached; falls back to normal path on partial/zero hit. enum: ["from-graph"]
body object Optional
body.cursor string Optional Cursor for pagination. When provided, filters are embedded in the cursor so you only need to pass cursor and pageSize.
body.datasetId array Optional Dataset UUIDs to query, or one standalone scope value: 'all'/'*' or 'operational' for readable intelligence datasets (isAnalytics=false), or 'analytics' for readable analytics datasets (isAnalytics=true). Scope values query at most 50 datasets. If not provided, uses the default dataset.
body.datasetId[] string Optional
body.order string Optional enum: ["asc","desc"]
body.orderBy string Optional
body.page number Optional
body.pageSize number Optional
body.search array Optional Structured search as a JSON array of {field, op, value} objects. Use the 'in' operator with an array value to bulk-check up to 100 values. Multiple conditions are AND'd together. Max 10 conditions per request. default: []; maxItems: 10
body.search[] — Optional
body.search[] object Optional anyOf[1]; additionalProperties: false
body.search[].field string Required anyOf[1]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
body.search[].op string Required anyOf[1]; enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","find"]
body.search[].value string Required anyOf[1]; minLength: 1; maxLength: 512
body.search[] object Optional anyOf[2]; additionalProperties: false
body.search[].field string Required anyOf[2]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
body.search[].op string Required anyOf[2]; enum: ["in"]
body.search[].value array Required anyOf[2]; minItems: 1; maxItems: 100
body.search[].value[] string Optional anyOf[2]; minLength: 1; maxLength: 512
body.search[] object Optional anyOf[3]; additionalProperties: false
body.search[].field string Required anyOf[3]; enum: ["killChain"]
body.search[].op string Required anyOf[3]; enum: ["equals","not","gt","gte","lt","lte"]
body.search[].value — Required anyOf[3]
body.search[].value number Required anyOf[3]; anyOf[1]
body.search[].value string Required anyOf[3]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
body.search[] object Optional anyOf[4]; additionalProperties: false
body.search[].field string Required anyOf[4]; enum: ["killChain"]
body.search[].op string Required anyOf[4]; enum: ["in"]
body.search[].value array Required anyOf[4]; minItems: 1; maxItems: 100
body.search[].value[] — Optional anyOf[4]
body.search[].value[] number Optional anyOf[4]; anyOf[1]
body.search[].value[] string Optional anyOf[4]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
body.search[] object Optional anyOf[5]; additionalProperties: false
body.search[].field string Required anyOf[5]; enum: ["hasChildren"]
body.search[].op string Required anyOf[5]; enum: ["equals","not","gt","gte","lt","lte"]
body.search[].value — Required anyOf[5]
body.search[].value boolean Required anyOf[5]; anyOf[1]
body.search[].value string Required anyOf[5]; anyOf[2]; enum: ["true"]
body.search[].value string Required anyOf[5]; anyOf[3]; enum: ["false"]
body.search[].value number Required anyOf[5]; anyOf[4]; enum: [1]
body.search[].value number Required anyOf[5]; anyOf[5]; enum: [0]
body.search[].value string Required anyOf[5]; anyOf[6]; enum: ["1"]
body.search[].value string Required anyOf[5]; anyOf[7]; enum: ["0"]
body.search[] object Optional anyOf[6]; additionalProperties: false
body.search[].field string Required anyOf[6]; enum: ["hasChildren"]
body.search[].op string Required anyOf[6]; enum: ["in"]
body.search[].value array Required anyOf[6]; minItems: 1; maxItems: 100
body.search[].value[] — Optional anyOf[6]
body.search[].value[] boolean Optional anyOf[6]; anyOf[1]
body.search[].value[] string Optional anyOf[6]; anyOf[2]; enum: ["true"]
body.search[].value[] string Optional anyOf[6]; anyOf[3]; enum: ["false"]
body.search[].value[] number Optional anyOf[6]; anyOf[4]; enum: [1]
body.search[].value[] number Optional anyOf[6]; anyOf[5]; enum: [0]
body.search[].value[] string Optional anyOf[6]; anyOf[6]; enum: ["1"]
body.search[].value[] string Optional anyOf[6]; anyOf[7]; enum: ["0"]
body.searchBranches array Optional OR branches of structured search filters. Filters within a branch are AND'd, branches are OR'd, and the result is AND'd with search: AND(search) AND OR(AND(branch 1), ...). Max 8 branches of 1-10 conditions each. Not supported for analytics datasets, and indicator filters are not yet supported inside branches. Cursor pages carry the original branches, so do not resend them with cursor. minItems: 1; maxItems: 8
body.searchBranches[] array Optional minItems: 1; maxItems: 10
body.searchBranches[][] — Optional
body.searchBranches[][] object Optional anyOf[1]; additionalProperties: false
body.searchBranches[][].field string Required anyOf[1]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
body.searchBranches[][].op string Required anyOf[1]; enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","find"]
body.searchBranches[][].value string Required anyOf[1]; minLength: 1; maxLength: 512
body.searchBranches[][] object Optional anyOf[2]; additionalProperties: false
body.searchBranches[][].field string Required anyOf[2]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
body.searchBranches[][].op string Required anyOf[2]; enum: ["in"]
body.searchBranches[][].value array Required anyOf[2]; minItems: 1; maxItems: 100
body.searchBranches[][].value[] string Optional anyOf[2]; minLength: 1; maxLength: 512
body.searchBranches[][] object Optional anyOf[3]; additionalProperties: false
body.searchBranches[][].field string Required anyOf[3]; enum: ["killChain"]
body.searchBranches[][].op string Required anyOf[3]; enum: ["equals","not","gt","gte","lt","lte"]
body.searchBranches[][].value — Required anyOf[3]
body.searchBranches[][].value number Required anyOf[3]; anyOf[1]
body.searchBranches[][].value string Required anyOf[3]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
body.searchBranches[][] object Optional anyOf[4]; additionalProperties: false
body.searchBranches[][].field string Required anyOf[4]; enum: ["killChain"]
body.searchBranches[][].op string Required anyOf[4]; enum: ["in"]
body.searchBranches[][].value array Required anyOf[4]; minItems: 1; maxItems: 100
body.searchBranches[][].value[] — Optional anyOf[4]
body.searchBranches[][].value[] number Optional anyOf[4]; anyOf[1]
body.searchBranches[][].value[] string Optional anyOf[4]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
body.searchBranches[][] object Optional anyOf[5]; additionalProperties: false
body.searchBranches[][].field string Required anyOf[5]; enum: ["hasChildren"]
body.searchBranches[][].op string Required anyOf[5]; enum: ["equals","not","gt","gte","lt","lte"]
body.searchBranches[][].value — Required anyOf[5]
body.searchBranches[][].value boolean Required anyOf[5]; anyOf[1]
body.searchBranches[][].value string Required anyOf[5]; anyOf[2]; enum: ["true"]
body.searchBranches[][].value string Required anyOf[5]; anyOf[3]; enum: ["false"]
body.searchBranches[][].value number Required anyOf[5]; anyOf[4]; enum: [1]
body.searchBranches[][].value number Required anyOf[5]; anyOf[5]; enum: [0]
body.searchBranches[][].value string Required anyOf[5]; anyOf[6]; enum: ["1"]
body.searchBranches[][].value string Required anyOf[5]; anyOf[7]; enum: ["0"]
body.searchBranches[][] object Optional anyOf[6]; additionalProperties: false
body.searchBranches[][].field string Required anyOf[6]; enum: ["hasChildren"]
body.searchBranches[][].op string Required anyOf[6]; enum: ["in"]
body.searchBranches[][].value array Required anyOf[6]; minItems: 1; maxItems: 100
body.searchBranches[][].value[] — Optional anyOf[6]
body.searchBranches[][].value[] boolean Optional anyOf[6]; anyOf[1]
body.searchBranches[][].value[] string Optional anyOf[6]; anyOf[2]; enum: ["true"]
body.searchBranches[][].value[] string Optional anyOf[6]; anyOf[3]; enum: ["false"]
body.searchBranches[][].value[] number Optional anyOf[6]; anyOf[4]; enum: [1]
body.searchBranches[][].value[] number Optional anyOf[6]; anyOf[5]; enum: [0]
body.searchBranches[][].value[] string Optional anyOf[6]; anyOf[6]; enum: ["1"]
body.searchBranches[][].value[] string Optional anyOf[6]; anyOf[7]; enum: ["0"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Aggregate events — cloudflare.get_eventaggregate

Run Aggregate events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Required additionalProperties: false
query.aggregateBy string Required Column(s) to aggregate by - single column or comma-separated list (e.g., 'attacker', 'targetIndustry', 'attacker,targetIndustry'). With tags, an event counts once for each of its tags, in the bucket counts and in total, and events without tags count as Unknown; tags is not supported for analytics datasets.
query.datasetId array Optional Dataset UUIDs to filter by, or one standalone scope value: 'all'/'*' or 'operational' for readable intelligence datasets (isAnalytics=false), or 'analytics' for readable analytics datasets (isAnalytics=true). Scope values query at most 50 datasets. If not provided, uses the default dataset.
query.datasetId[] string Optional
query.startDate string Optional Start date for filtering (ISO 8601 format, e.g., '2024-01-01')
query.endDate string Optional End date for filtering (ISO 8601 format, e.g., '2024-12-31')
query.groupByDate boolean Optional Whether to group results by date (daily aggregation)
query.limit number Optional Maximum number of results to return default: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "aggregateBy": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List attackers — cloudflare.get_attackerlist

Run List attackers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.datasetIds array Optional Array of dataset IDs to query attackers from. If not provided, uses the default dataset.
query.datasetIds[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List related events — cloudflare.get_eventrelationships

Run List related events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.event_id string Required Event UUID.
query object Required additionalProperties: false
query.direction string Optional The direction to traverse the graph. Defaults to 'both' to search all. enum: ["ancestors","descendants","both"]; default: "both"
query.maxDepth number Optional The maximum depth to traverse. Defaults to 5.
query.relationshipTypes — Optional An optional array of relationship types to filter by.
query.relationshipTypes string Optional anyOf[1]
query.relationshipTypes array Optional anyOf[2]
query.relationshipTypes[] string Optional anyOf[2]
query.indicatorTypeIds array Optional An optional array of indicator type IDs to filter the results by.
query.indicatorTypeIds[] string Optional
query.datasetId string Required The dataset ID to search within.
query.includeParent boolean Optional Whether to include the starting event in the results. Defaults to true. default: true
query.page number Optional
query.pageSize number Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "event_id": "example"
  },
  "query": {
    "datasetId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List event categories used in datasets — cloudflare.get_categorylist

Run List event categories used in datasets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.datasetIds array Optional Array of dataset IDs to query categories from. If not provided, uses the default dataset.
query.datasetIds[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all event categories — cloudflare.get_categorylistcomplete

Run List all event categories with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an event category — cloudflare.post_categorycreate

Run Create an event category with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body object Optional
body.killChain number Required
body.mitreAttack array Optional
body.mitreAttack[] string Optional
body.mitreCapec array Optional
body.mitreCapec[] string Optional
body.name string Required
body.shortname string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List countries — cloudflare.get_countryread

Run List countries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an event — cloudflare.post_eventcreate

Run Create an event with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body object Optional
body.accountId number Optional
body.attacker string | null Optional
body.attackerCountry string Optional
body.category string Required
body.datasetId string Optional
body.date string Required format: "date-time"
body.event string Required
body.indicator string Optional
body.indicatorType string Optional
body.indicators array Optional Array of indicators for this event. Supports multiple indicators per event for complex scenarios.
body.indicators[] object Optional
body.indicators[].indicatorType string Required The type of indicator (e.g., DOMAIN, IP, JA3, HASH)
body.indicators[].value string Required The indicator value (e.g., domain name, IP address, hash)
body.insight string Optional
body.raw object Required
body.raw.data object | null Required additionalProperties: true
body.raw.source string Optional
body.raw.tlp string Optional
body.source object Optional Controlled provenance for an event and its indicators derived from a Threat Signals article. additionalProperties: false
body.source.resourceId string Required format: "uuid"
body.source.resourceType string Required enum: ["article"]
body.source.system string Required enum: ["threat-signals"]
body.source.title string | null Optional Threat Signals article title; null for historical provenance without a stored title.
body.tags array Optional
body.tags[] string Optional
body.targetCountry string Optional
body.targetIndustry string Optional
body.tlp string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create events in bulk — cloudflare.post_eventcreatebulk

Run Create events in bulk with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body object Optional
body.data array Required
body.data[] object Optional
body.data[].accountId number Optional
body.data[].attacker string | null Optional
body.data[].attackerCountry string Optional
body.data[].category string Required
body.data[].datasetId string Optional
body.data[].date string Required format: "date-time"
body.data[].event string Required
body.data[].indicator string Optional
body.data[].indicatorType string Optional
body.data[].indicators array Optional Array of indicators for this event. Supports multiple indicators per event for complex scenarios.
body.data[].indicators[] object Optional
body.data[].indicators[].indicatorType string Required The type of indicator (e.g., DOMAIN, IP, JA3, HASH)
body.data[].indicators[].value string Required The indicator value (e.g., domain name, IP address, hash)
body.data[].insight string Optional
body.data[].raw object Required
body.data[].raw.data object | null Required additionalProperties: true
body.data[].raw.source string Optional
body.data[].raw.tlp string Optional
body.data[].tags array Optional
body.data[].tags[] string Optional
body.data[].targetCountry string Optional
body.data[].targetIndustry string Optional
body.data[].tlp string Required
body.datasetId string Required
body.includeCreatedEvents boolean Optional When true, response includes array of created event UUIDs and shard IDs. Useful for tracking which events were created and where.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List datasets — cloudflare.get_datasetlist

Run List datasets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.includeDeleted boolean Optional When true, include soft-deleted datasets in the response. Each item includes a deletedAt field (ISO 8601 or null). Default: false.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List account groups — cloudflare.get_grouplist

Run List account groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an account group — cloudflare.post_groupcreate

Run Create an account group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body object Optional
body.description string Required
body.name string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an account group — cloudflare.delete_groupdelete

Run Delete an account group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.group_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "group_id": "12345678-1234-1234-1234-1234567890ab"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an account group — cloudflare.get_groupread

Run Get an account group with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.group_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "group_id": "12345678-1234-1234-1234-1234567890ab"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an account group — cloudflare.put_groupupdate

Run Update an account group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.group_id string Required
body object Optional
body.description string Required
body.name string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "group_id": "12345678-1234-1234-1234-1234567890ab"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List group members — cloudflare.get_groupmemberlist

Run List group members with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.group_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "group_id": "12345678-1234-1234-1234-1234567890ab"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add an account to a group — cloudflare.post_groupmembercreate

Run Add an account to a group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.group_id string Required
body object Optional
body.accountId string Optional
body.accountTag string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "group_id": "12345678-1234-1234-1234-1234567890ab"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove an account from a group — cloudflare.delete_groupmemberdelete

Run Remove an account from a group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.group_id string Required
path.member_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "group_id": "12345678-1234-1234-1234-1234567890ab",
    "member_id": "12345678-1234-1234-1234-1234567890ab"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a dataset — cloudflare.post_datasetcreate

Run Create a dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body object Optional
body.isPublic boolean Required If true, then anyone can search the dataset. If false, then its limited to the account.
body.name string Required Used to describe the dataset within the account context. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a dataset — cloudflare.delete_datasetdelete

Run Delete a dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset ID to delete

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a dataset — cloudflare.get_datasetread

Run Get a dataset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset ID. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a dataset — cloudflare.patch_datasetupdate

Run Update a dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset ID. format: "uuid"
body object Optional
body.isPublic boolean Required If true, then anyone can search the dataset. If false, then its limited to the account.
body.name string Required Used to describe the dataset within the account context. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a dataset — cloudflare.post_datasetupdate

Run Update a dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset ID. format: "uuid"
body object Optional
body.isPublic boolean Required If true, then anyone can search the dataset. If false, then its limited to the account.
body.name string Required Used to describe the dataset within the account context. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Copy events to another dataset — cloudflare.post_eventcopytonewds

Run Copy events to another dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
query object Optional additionalProperties: false
query.keepRawData boolean Optional If true, copies raw data to the destination dataset. Default is false (raw data is stripped/not copied).
body object Optional
body.destDatasetId string Required
body.eventIds array Required
body.eventIds[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an event — cloudflare.get_eventread

Run Get an event with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset ID.
path.event_id string Required Event UUID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "example",
    "event_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an indicator type — cloudflare.post_indicatortypecreate

Run Create an indicator type with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset ID.
body object Optional
body.description string Optional Optional description for the indicator type
body.indicatorType string Required The indicator type to create (e.g., 'DOMAIN', 'IP', 'URL', 'HASH', 'EMAIL') minLength: 1; maxLength: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete indicators in bulk — cloudflare.delete_indicatordeletebulk

Run Delete indicators in bulk with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset ID.
query object Required additionalProperties: false
query.indicatorIds array Required Indicator UUIDs to delete, 1-200 per request. minItems: 1; maxItems: 200
query.indicatorIds[] string Optional format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "example"
  },
  "query": {
    "indicatorIds": [
      "00000000-0000-4000-8000-000000000000"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create indicators in bulk — cloudflare.post_indicatorcreatebulk

Run Create indicators in bulk with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
body object Optional
body.autoCreateType boolean Optional Global flag to automatically create indicator types if they don't exist. Individual indicators can override this with their own autoCreateType flag.
body.indicators array Required
body.indicators[] object Optional
body.indicators[].autoCreateType boolean Optional If true, automatically create the indicator type if it doesn't exist. If false (default), throw an error when the indicator type doesn't exist.
body.indicators[].indicatorType string Required
body.indicators[].relatedEvents array Optional
body.indicators[].relatedEvents[] object Optional
body.indicators[].relatedEvents[].datasetId string Required
body.indicators[].relatedEvents[].eventId string Required
body.indicators[].tags array Optional
body.indicators[].tags[] — Optional
body.indicators[].tags[] string Optional anyOf[1]
body.indicators[].tags[] object Optional anyOf[2]
body.indicators[].tags[].categoryName string Optional anyOf[2]
body.indicators[].tags[].value string Required anyOf[2]
body.indicators[].tlp string Optional Traffic Light Protocol designation. Case-insensitive on input, stored and returned as UPPERCASE. Allowed values: clear, green, amber, amber-strict, red, purple.
body.indicators[].value string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an indicator — cloudflare.post_indicatorcreate

Run Create an indicator with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
body object Optional
body.autoCreateType boolean Optional If true, automatically create the indicator type if it doesn't exist. If false (default), throw an error when the indicator type doesn't exist.
body.indicatorType string Required
body.relatedEvents array Optional
body.relatedEvents[] object Optional
body.relatedEvents[].datasetId string Required
body.relatedEvents[].eventId string Required
body.tags array Optional
body.tags[] — Optional
body.tags[] string Optional anyOf[1]
body.tags[] object Optional anyOf[2]
body.tags[].categoryName string Optional anyOf[2]
body.tags[].value string Required anyOf[2]
body.tlp string Optional Traffic Light Protocol designation. Case-insensitive on input, stored and returned as UPPERCASE. Allowed values: clear, green, amber, amber-strict, red, purple.
body.value string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tags on a dataset's indicators — cloudflare.get_indicatortagslist

Run List tags on a dataset's indicators with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an indicator — cloudflare.delete_indicatordelete

Run Delete an indicator with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset ID.
path.indicator_id string Required Indicator UUID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "example",
    "indicator_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an indicator — cloudflare.get_indicatorread

Run Get an indicator with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset ID.
path.indicator_id string Required Indicator UUID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "example",
    "indicator_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an indicator — cloudflare.patch_indicatorupdate

Run Update an indicator with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset ID.
path.indicator_id string Required Indicator UUID.
body object Optional
body.indicatorType string Optional
body.relatedEvents array Optional
body.relatedEvents[] object Optional
body.relatedEvents[].datasetId string Required
body.relatedEvents[].eventId string Required
body.tags array Optional
body.tags[] — Optional
body.tags[] string Optional anyOf[1]
body.tags[] object Optional anyOf[2]
body.tags[].categoryName string Optional anyOf[2]
body.tags[].value string Required anyOf[2]
body.tlp string Optional Traffic Light Protocol designation. Case-insensitive on input, stored and returned as UPPERCASE. Allowed values: clear, green, amber, amber-strict, red, purple.
body.value string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "example",
    "indicator_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List indicator relationships — cloudflare.get_indicatorrelationshipslist

Run List indicator relationships with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
path.indicator_id string Required Indicator UUID.
query object Optional additionalProperties: false
query.search array Optional JSON array of {field, op, value} filters, AND-combined. Fields: entityType (other-end type), type (relationship type), confidence (0–100), metadata.<key>. Example: [{"field":"type","op":"equals","value":"appears_in"},{"field":"confidence","op":"gte","value":50}]
query.search[] object Optional
query.search[].field string Required entityType | type | confidence | metadata.<key>
query.search[].op string Required Search operator. 'exists' only valid for metadata.<key> fields. enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","in","find","exists"]
query.search[].value — Optional Value to compare against. Omit for 'exists' op.
query.search[].value string Optional anyOf[1]
query.search[].value number Optional anyOf[2]
query.search[].value boolean Optional anyOf[3]
query.search[].value array Optional anyOf[4]
query.search[].value[] — Optional anyOf[4]
query.search[].value[] string Optional anyOf[4]; anyOf[1]
query.search[].value[] number Optional anyOf[4]; anyOf[2]
query.expand array Optional Comma-separated entity types to hydrate (event, indicator, tag).
query.expand[] string Optional
query.cursor string Optional Keyset cursor from a previous page.
query.pageSize integer Optional Page size (1–100, default 25). default: 25; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000",
    "indicator_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an indicator relationship — cloudflare.post_indicatorrelationshipcreate

Run Create an indicator relationship with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
path.indicator_id string Required Indicator UUID.
body object Optional
body.confidence integer Optional Confidence score 0–100. minimum: 0; maximum: 100
body.metadata object Optional Arbitrary JSON metadata. additionalProperties: true
body.targetId string Required UUID of the target entity. minLength: 1
body.targetType string Required Target type. "indicator" is not allowed (indicator↔indicator relationships are not supported). enum: ["event","tag"]
body.type string Required Relationship type. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000",
    "indicator_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an indicator relationship — cloudflare.delete_indicatorrelationshipdelete

Run Delete an indicator relationship with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
path.indicator_id string Required Indicator UUID.
path.rel_uuid string Required Relationship UUID. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000",
    "indicator_id": "example",
    "rel_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an indicator relationship — cloudflare.patch_indicatorrelationshipupdate

Run Update an indicator relationship with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
path.indicator_id string Required Indicator UUID.
path.rel_uuid string Required Relationship UUID. format: "uuid"
body object Optional
body.confidence integer | null Optional Updated confidence. null clears it. minimum: 0; maximum: 100
body.metadata object | null Optional Updated metadata. null clears it. additionalProperties: true
body.type string Optional Updated relationship type. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000",
    "indicator_id": "example",
    "rel_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Move events to another dataset — cloudflare.post_eventmovetonewds

Run Move events to another dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
query object Optional additionalProperties: false
query.keepRawData boolean Optional If true, copies raw data to the destination dataset. Default is false (raw data is stripped/not copied). Raw data is always deleted from the source.
body object Optional
body.destDatasetId string Required
body.eventIds array Required
body.eventIds[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List dataset permissions — cloudflare.get_permissionlist

Run List dataset permissions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Grant access to a dataset — cloudflare.post_permissioncreate

Run Grant access to a dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
body object Optional
body.role string Required enum: ["read","write"]
body.subjectId string Required
body.subjectType string Required enum: ["account","group"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revoke access to a dataset — cloudflare.delete_permissiondelete

Run Revoke access to a dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
path.grant_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000",
    "grant_id": "12345678-1234-1234-1234-1234567890ab"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change a dataset permission — cloudflare.put_permissionupdate

Run Change a dataset permission with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
path.grant_id string Required
body object Optional
body.role string Required enum: ["read","write"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000",
    "grant_id": "12345678-1234-1234-1234-1234567890ab"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List target industries in a dataset (legacy) — cloudflare.get_targetindustrylistbydataset

Run List target industries in a dataset (legacy) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rebuild dataset lookup lists — cloudflare.post_datasetpopulate

Run Rebuild dataset lookup lists with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete events — cloudflare.delete_eventdelete

Run Delete events with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.dataset_id string Required Dataset UUID. format: "uuid"
query object Required additionalProperties: false
query.eventIds array Required Array of Event IDs to delete.
query.eventIds[] string Optional minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  },
  "query": {
    "eventIds": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get raw data for an event — cloudflare.get_eventrawreadds

Run Get raw data for an event with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.event_id string Required Event ID.
path.dataset_id string Required Dataset ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "event_id": "example",
    "dataset_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an event category — cloudflare.delete_categorydelete

Run Delete an event category with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.category_id string Required Category UUID. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an event category — cloudflare.get_categoryread

Run Get an event category with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.category_id string Required Category UUID. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an event category — cloudflare.patch_categoryupdate

Run Update an event category with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.category_id string Required Category UUID. format: "uuid"
body object Optional
body.killChain number Optional
body.mitreAttack array Optional
body.mitreAttack[] string Optional
body.mitreCapec array Optional
body.mitreCapec[] string Optional
body.name string Optional
body.shortname string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an event category — cloudflare.post_categoryupdate

Run Update an event category with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.category_id string Required Category UUID. format: "uuid"
body object Optional
body.killChain number Optional
body.mitreAttack array Optional
body.mitreAttack[] string Optional
body.mitreCapec array Optional
body.mitreCapec[] string Optional
body.name string Optional
body.shortname string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove tags from an event (legacy) — cloudflare.delete_eventtagdelete

Run Remove tags from an event (legacy) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.event_id string Required Event UUID.
body object Optional
body.tags array Required
body.tags[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "event_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add tags to an event (legacy) — cloudflare.post_eventtagcreate

Run Add tags to an event (legacy) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.event_id string Required Event UUID.
body object Optional
body.tags array Required
body.tags[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "event_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query graph neighborhood from R2 Data Catalog — cloudflare.get_eventgraph

Run Query graph neighborhood from R2 Data Catalog with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.seeds array Optional Comma-separated compact seed ids (type:uuid). Example: seeds=event:550e8400-...,indicator:661fa920-... Provide 1–50 entries; omitting seeds returns 400.
query.seeds[] string Optional
query.direction string Optional Edge direction relative to each seed: out (seed→neighbors), in (neighbors→seed), both (default).
query.hydration string Optional Hydration strategy for neighbor nodes when expand=nodes is set. r2_join (default): use R2 JOIN query + DO fallback. do_only: use plain R2 query + hydrate all neighbors via Durable Objects.
query.limit number Optional Max neighbors per seed (default: 100, max: 1000). Values above 1000 return 400.
query.max_nodes number Optional Total accumulated node cap across all seeds (default: 500, max: 1000). Values above 1000 return 400.
query.relationshipTypes array Optional Comma-separated relationship types to filter by. Allowed: tagged_with, appears_in, related_to, caused_by, attributed_to.
query.relationshipTypes[] string Optional
query.datasetIds array Optional Comma-separated dataset UUIDs to restrict neighbor scope, or one standalone scope value: 'operational' for readable intelligence datasets (isAnalytics=false), 'analytics' for readable analytics datasets (isAnalytics=true), or 'all'/'*' for every readable dataset including analytics datasets (the graph reads analytics relationships from R2). Intersected with access grants.
query.datasetIds[] string Optional
query.cursor string Optional Opaque pagination token. Only valid when seeds has exactly 1 entry; 400 otherwise.
query.expand array Optional Comma-separated list of response sections to expand (hydrate). Allowed: nodes. Omitting expand returns identifier-only nodes.
query.expand[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Run a GraphQL aggregation over events — cloudflare.post_eventgraphql

Run Run a GraphQL aggregation over events with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List indicator types — cloudflare.get_indicatortypeslist

Run List indicator types with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.datasetIds array Optional Dataset UUIDs to query, or one standalone scope value: 'operational' for readable intelligence datasets (isAnalytics=false), 'analytics' for readable analytics datasets (isAnalytics=true), or 'all'/'*' for every readable dataset including analytics datasets. If not provided, queries all accessible datasets, including analytics datasets.
query.datasetIds[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List indicators — cloudflare.get_indicatorlist

Run List indicators with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.datasetIds array Optional Dataset UUIDs to query, or one standalone scope value: 'all'/'*' or 'operational' for readable intelligence datasets (isAnalytics=false), or 'analytics' for readable analytics datasets (isAnalytics=true). If not provided, uses the default dataset.
query.datasetIds[] string Optional
query.page number Optional
query.pageSize number Optional
query.search array Optional Structured search as a JSON array of {field, op, value} objects. Searchable fields: value, indicatorType, uuid. Supports operators: equals, not, contains, startsWith, endsWith, gt, lt, gte, lte, like, in, find. Use the 'in' operator with an array value to bulk-check up to 100 indicators in a single request, e.g. search=[{"field":"value","op":"in","value":["evil.com","bad.org"]}]. Multiple conditions are AND'd together. Max 10 conditions per request.
query.search[] object Optional
query.search[].field string Required The indicator field to search on. Allowed: value, indicatorType, uuid. enum: ["value","indicatorType","uuid"]
query.search[].op string Required Search operator. Use 'in' for bulk lookup of up to 100 values at once, e.g. {field:'value', op:'in', value:['evil.com','bad.org']}. enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","in","find"]
query.search[].value — Required Search value. String for most operators. Array of strings for 'in' operator (max 100 items).
query.search[].value string Required anyOf[1]
query.search[].value array Required anyOf[2]
query.search[].value[] string Optional anyOf[2]
query.name string Optional Filter indicators by value using substring match (LIKE). Legacy alternative to structured search.
query.indicatorType string Optional
query.relatedEvents array Optional Filter by related event IDs
query.relatedEvents[] string Optional
query.tags array Optional Filter by tag values or UUIDs. Indicators must have at least one of the specified tags (OR logic). Supports both tag UUID and tag value.
query.tags[] string Optional
query.tagSearch array Optional Structured tag-metadata filter as a JSON array of {field, op, value} objects. Operates against the per-dataset IndicatorTag mirror so you can find indicators by tag attributes (origin country, motive, sophistication, priority, etc.) without a separate Tags lookup. Common dashboard usage: drill from a country into indicators, e.g. tagSearch=[{"field":"originCountryISO","op":"in","value":["IR","CN"]}]. Country values may be passed as alpha-2, alpha-3, name, or alias (e.g. "iran"). Operators: equals, not, gt/gte/lt/lte (numeric only), contains/like/find/startsWith/endsWith (string only), in. AND-joined across entries; combined with tags, a matching tag must satisfy both. Max 10 entries per request, max 100 values per 'in'. Performance notes: originCountryISO uses its B-tree index for equals/not/in. priority uses its B-tree index for numeric comparisons. Other string columns (actorCategory, motive, etc.) are case-insensitive and unindexed; current catalog size makes this a non-issue. endsWith and aliasGroupNames contains/like are leading-wildcard scans and slow on large result sets. aliasGroupNames matches on the JSON-encoded text, so substrings can cross alias boundaries ("apt28" also matches "apt280" when both appear in the same tag's alias list).
query.tagSearch[] object Optional
query.tagSearch[].field string Required Tag mirror field to filter on. Allowed: value, categoryId, actorCategory, aliasGroupNames, attributionConfidence, attributionOrganization, motive, opsecLevel, originCountryISO, sophisticationLevel, priority, analyticPriority. Filters operate against the per-dataset IndicatorTag mirror (which is kept in sync with the Tags SoT by the tag-propagation workflow). enum: ["value","categoryId","actorCategory","aliasGroupNames","attributionConfidence","attributionOrganization","motive","opsecLevel","originCountryISO","sophisticationLevel","priority","analyticPriority"]
query.tagSearch[].op string Required Search operator. Use 'in' for bulk OR within a single field, e.g. {field:"originCountryISO", op:"in", value:["IR","CN"]}. enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","in","find"]
query.tagSearch[].value — Optional Search value. String or number for most operators. Array for 'in' (max 100 items). Country values may be passed as alpha-2, alpha-3, name, or common alias (e.g. "iran", "IR", "IRN") and are normalized to alpha-2 server-side.
query.tagSearch[].value string Optional anyOf[1]
query.tagSearch[].value number Optional anyOf[2]
query.tagSearch[].value array Optional anyOf[3]
query.tagSearch[].value[] — Optional anyOf[3]
query.tagSearch[].value[] string Optional anyOf[3]; anyOf[1]
query.tagSearch[].value[] number Optional anyOf[3]; anyOf[2]
query.createdAfter string Optional Filter indicators created on or after this date. Must use ISO 8601 format (e.g., '2024-01-15T00:00:00Z'). format: "date-time"
query.createdBefore string Optional Filter indicators created on or before this date. Must use ISO 8601 format (e.g., '2024-12-31T23:59:59Z'). format: "date-time"
query.relatedEventsLimit number Optional Limit the number of related events returned per indicator. Default: 2. Set to 0 for none, -1 for all events. For JSON responses, when the limit hides events, the indicator carries relatedEventsHasMore: true and the response includes an advisory message — the cap is never applied silently. STIX and TAXII representations do not include related-event data.
query.includeTags boolean Optional Whether to include full tag details for each indicator. Defaults to true.
query.includeTotalCount boolean Optional Whether to compute total count via COUNT(*). Defaults to false for performance. total_count is null unless this is true and the complete fan-out succeeds.
query.format string Optional Output format for indicator data. 'json' returns the default format, 'stix2' returns STIX 2.1 Indicator SDOs, 'taxii' returns a TAXII 2.1 Envelope with Content-Type application/taxii+json;version=2.1. enum: ["json","stix2","taxii"]
query.cache string Optional Cache strategy. 'from-graph' serves results from the graph-node KV cache when all requested UUIDs are cached; falls back to normal path on partial/zero hit. Cannot be combined with cursor. enum: ["from-graph"]
query.cursor string Optional Opaque cursor from a previous response's pagination.cursor. When provided, all filters, datasetIds, page, pageSize, includeTags and relatedEventsLimit come from the cursor — do not resend them. Sending any filter, page, pageSize, includeTags, relatedEventsLimit, includeTotalCount=true, or cache=from-graph alongside a cursor yields a 400 CursorFilterConflictError. A cursor issued for a different entity, an unsupported version, or a dataset that has since been reconfigured as analytics-only yields a 400 InvalidCursorError.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Aggregate indicators by column(s) — cloudflare.get_indicatoraggregate

Run Aggregate indicators by column(s) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Required additionalProperties: false
query.aggregateBy string Required Column(s) to aggregate by - single column or comma-separated list (e.g., 'indicatorType', 'value', 'indicatorType,value')
query.measure string Optional What to count per group: 'indicators' (catalog rows, default) or 'relationships' (linked events per indicator). Use 'relationships' for 'top indicator by event activity'. enum: ["indicators","relationships"]; default: "indicators"
query.tagUuid string Optional Scope to indicators associated with this tag/actor UUID. Combine with measure=relationships for 'top indicator for an actor'.
query.datasetIds array Optional Dataset UUIDs to filter by, or one standalone scope value: 'operational' for readable intelligence datasets (isAnalytics=false), 'analytics' for readable analytics datasets (isAnalytics=true), or 'all'/'*' for every readable dataset including analytics datasets. If not provided, aggregates across all accessible datasets, including analytics datasets.
query.datasetIds[] string Optional
query.createdAfter — Optional Filter indicators created after this date/datetime (ISO 8601, e.g., '2024-01-01' or '2024-01-01T00:00:00Z')
query.createdAfter string Optional anyOf[1]; format: "date-time"
query.createdAfter string Optional anyOf[2]; pattern: "^\\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\\d|3[01])$"
query.createdBefore — Optional Filter indicators created before this date/datetime (ISO 8601, e.g., '2024-12-31' or '2024-12-31T23:59:59Z')
query.createdBefore string Optional anyOf[1]; format: "date-time"
query.createdBefore string Optional anyOf[2]; pattern: "^\\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\\d|3[01])$"
query.eventDateAfter string Optional For measure=relationships: only count indicator→event links whose relationship was created/observed on or after this date (ISO 8601). Bounds the activity view to recently-observed links. Note: this filters by the relationship's createdAt (link-observation time), not the underlying event's business date.
query.eventDateBefore string Optional For measure=relationships: only count indicator→event links whose relationship was created/observed on or before this date (ISO 8601). Bounds the activity view by the relationship's createdAt (link-observation time), not the underlying event's business date.
query.limit number Optional Maximum number of aggregation results to return (1-100) default: 10; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "aggregateBy": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List saved event queries — cloudflare.get_eventquerylist

Run List saved event queries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a saved event query — cloudflare.post_eventquerycreate

Run Create a saved event query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body object Optional
body.alert_enabled boolean Optional Deprecated and ignored: saved-query alerting and rules were removed. default: false
body.alert_rollup_enabled boolean Optional Deprecated and ignored: saved-query alerting and rules were removed. default: false
body.name string Required Unique name for the saved query
body.query_json string Required JSON string containing the query parameters
body.rule_enabled boolean Optional Deprecated and ignored: saved-query alerting and rules were removed. default: false
body.rule_scope string Optional Deprecated and ignored: saved-query alerting and rules were removed.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a saved event query — cloudflare.delete_eventquerydelete

Run Delete a saved event query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.query_id integer Required Event query ID

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "query_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a saved event query — cloudflare.get_eventqueryread

Run Get a saved event query with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.query_id integer Required Event query ID

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "query_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a saved event query — cloudflare.patch_eventqueryupdate

Run Update a saved event query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.query_id integer Required Event query ID
body object Optional
body.alert_enabled boolean Optional Deprecated and ignored: saved-query alerting and rules were removed.
body.alert_rollup_enabled boolean Optional Deprecated and ignored: saved-query alerting and rules were removed.
body.name string Optional Unique name for the saved query
body.query_json string Optional JSON string containing the query parameters
body.rule_enabled boolean Optional Deprecated and ignored: saved-query alerting and rules were removed.
body.rule_scope string Optional Deprecated and ignored: saved-query alerting and rules were removed.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "query_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a saved event query — cloudflare.post_eventqueryupdate

Run Update a saved event query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.query_id integer Required Event query ID
body object Optional
body.alert_enabled boolean Optional Deprecated and ignored: saved-query alerting and rules were removed.
body.alert_rollup_enabled boolean Optional Deprecated and ignored: saved-query alerting and rules were removed.
body.name string Optional Unique name for the saved query
body.query_json string Optional JSON string containing the query parameters
body.rule_enabled boolean Optional Deprecated and ignored: saved-query alerting and rules were removed.
body.rule_scope string Optional Deprecated and ignored: saved-query alerting and rules were removed.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "query_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove event references (legacy) — cloudflare.delete_eventreferencedelete

Run Remove event references (legacy) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.event_id string Required Event UUID.
body object Optional
body.events array Required
body.events[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "event_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add event references (legacy) — cloudflare.post_eventreferencecreate

Run Add event references (legacy) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.event_id string Required Event UUID.
body object Optional
body.events array Required
body.events[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "event_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create event relationships — cloudflare.post_createeventrelationship

Run Create event relationships with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body object Optional
body.childIds array Required Array of UUIDs for child events. Single child = 1:1 relationship, multiple = 1:many relationships minItems: 1
body.childIds[] string Optional format: "uuid"
body.datasetId string Required Dataset identifier where the events are stored
body.parentId string Required UUID of the parent event that will be the source of the relationship format: "uuid"
body.relationshipType string Required Type of relationship to create between parent and child events enum: ["related_to","caused_by","attributed_to"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a tag category — cloudflare.delete_tagcategorydelete

Run Delete a tag category with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.category_uuid string Required Tag Category UUID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_uuid": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a tag category — cloudflare.get_tagcategorydetail

Run Get a tag category with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.category_uuid string Required Tag Category UUID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_uuid": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a tag category — cloudflare.patch_tagcategoryupdate

Run Update a tag category with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.category_uuid string Required Tag Category UUID.
body object Optional
body.description string Optional
body.name string Optional
body.schema array Optional Optional array of FieldDefinition objects. When provided, replaces the existing field schema. When omitted, the existing schema is preserved.
body.schema[] — Optional $ref: "#/definitions/cloudforce-one-events_FieldDefinition"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_uuid": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tags — cloudflare.get_taglist

Run List tags with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.page number Optional
query.pageSize number Optional
query.search string Optional Free-text substring match on tag value AND custom-field properties. Searches case-insensitively inside both Tag.value and the serialized Tag.properties JSON blob (keys, values, and annotation metadata like confidence/tlp are all searchable). Same serialized-text tradeoff as aliasGroupNames — substrings can cross JSON boundaries.
query.categoryUuid string Optional
query.filters array Optional Structured filters as a JSON array of {field, op, value} objects. Searchable fields: uuid, value, categoryName, description, dateOfDiscovery, tlp, confidence, actorCategory, motive, attributionOrganization, originCountryISO, aliases, externalReferences, opsecLevel, sophisticationLevel, activeDuration, priority, lastSeen, aliasGroupNames. Operators: equals, not, contains, startsWith, endsWith, gt, lt, gte, lte, like, in, find. Use 'in' for bulk OR within a single field, e.g. filters=[{"field":"originCountryISO","op":"in","value":["IR","CN"]}]. Multiple entries are AND-joined. Max 10 entries per request, max 100 values per 'in'. Per-field notes: uuid accepts only 'equals' and 'in' (other operators throw ValidationError) — matched against the canonical lowercase storage but callers may pass either case (the server lowercases before comparison); index-backed by the column's UNIQUE constraint and intended for batched UUID → tag resolution. originCountryISO uses its B-tree index for equals/not/in. priority uses its B-tree index for numeric comparisons. Other string columns (actorCategory, motive, etc.) are case-insensitive and unindexed; current catalog size makes this a non-issue. endsWith and aliasGroupNames contains/like are leading-wildcard scans and slow on large result sets. aliasGroupNames matches on the JSON-encoded text, so substrings can cross alias boundaries (a search for "apt28" will also match "apt280" if both appear in the same tag's alias list).
query.filters[] object Optional
query.filters[].field string Required Tag field to search on. Allowed first-class fields: uuid, value, categoryName, description, dateOfDiscovery, tlp, confidence, actorCategory, motive, attributionOrganization, originCountryISO, aliases, externalReferences, opsecLevel, sophisticationLevel, activeDuration, priority, lastSeen, aliasGroupNames. Also supports properties.<key> to filter on custom field values (matches both raw values and annotated {value,confidence,tlp} shapes via COALESCE), and properties.<key>.tlp / properties.<key>.confidence to filter directly on annotation sub-fields.
query.filters[].op string Required Search operator. Use 'in' for bulk OR within a single field. enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","in","find"]
query.filters[].value — Optional Search value. String or number for most operators. Array for 'in' (max 100 items).
query.filters[].value string Optional anyOf[1]
query.filters[].value number Optional anyOf[2]
query.filters[].value array Optional anyOf[3]
query.filters[].value[] — Optional anyOf[3]
query.filters[].value[] string Optional anyOf[3]; anyOf[1]
query.filters[].value[] number Optional anyOf[3]; anyOf[2]
query.cache string Optional Cache strategy. 'from-graph' serves results from the graph-node KV cache when all requested UUIDs are cached; falls back to normal path on partial/zero hit. enum: ["from-graph"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tag categories — cloudflare.get_tagcategorylist

Run List tag categories with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.search string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List threat actors — cloudflare.get_taggedactorlist

Run List threat actors with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.page number Optional
query.pageSize number Optional
query.value string Optional Free-text substring match on actor name (Tag.value).
query.filters array Optional Structured filters as a JSON array of {field, op, value} objects. Same shape as the events search API. Common use: filter actors by country with filters=[{"field":"originCountryISO","op":"in","value":["IR","CN"]}]. Country values may be passed as alpha-2, alpha-3, name, or alias (e.g. "iran"). Max 10 entries per request, max 100 values per 'in'. Accounts other than the catalog owner may only filter on fields that are also public-readable (uuid, value, categoryName, aliasGroupNames, originCountryISO); filtering on a redacted field returns 400. uuid filters accept only the equals and in operators. Performance notes: originCountryISO uses its B-tree index for equals/in. endsWith and aliasGroupNames contains/like are leading-wildcard scans and slow on large result sets. aliasGroupNames matches on JSON-encoded text, so substrings can cross alias boundaries ("apt28" also matches "apt280" when both appear in the same tag's alias list).
query.filters[] object Optional
query.filters[].field string Required Tag field to search on. Allowed first-class fields: uuid, value, categoryName, description, dateOfDiscovery, tlp, confidence, actorCategory, motive, attributionOrganization, originCountryISO, aliases, externalReferences, opsecLevel, sophisticationLevel, activeDuration, priority, lastSeen, aliasGroupNames. Also supports properties.<key> to filter on custom field values (matches both raw values and annotated {value,confidence,tlp} shapes via COALESCE), and properties.<key>.tlp / properties.<key>.confidence to filter directly on annotation sub-fields.
query.filters[].op string Required Search operator. Use 'in' for bulk OR within a single field. enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","in","find"]
query.filters[].value — Optional Search value. String or number for most operators. Array for 'in' (max 100 items).
query.filters[].value string Optional anyOf[1]
query.filters[].value number Optional anyOf[2]
query.filters[].value array Optional anyOf[3]
query.filters[].value[] — Optional anyOf[3]
query.filters[].value[] string Optional anyOf[3]; anyOf[1]
query.filters[].value[] number Optional anyOf[3]; anyOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a tag category — cloudflare.post_tagcategorycreate

Run Create a tag category with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body object Optional
body.description string Optional
body.name string Required
body.schema array Optional Optional array of FieldDefinition objects defining custom fields for tags in this category. Persisted as JSON; returned as a parsed array.
body.schema[] — Optional $ref: "#/definitions/cloudforce-one-events_FieldDefinition"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a tag — cloudflare.post_tagcreate

Run Create a tag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body object Optional
body.activeDuration — Optional
body.activeDuration string Optional anyOf[1]
body.activeDuration object Optional anyOf[2]
body.activeDuration.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.activeDuration.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.activeDuration.value string Required anyOf[2]
body.actorCategory — Optional
body.actorCategory string Optional anyOf[1]
body.actorCategory object Optional anyOf[2]
body.actorCategory.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.actorCategory.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.actorCategory.value string Required anyOf[2]
body.aliasGroupNames array Optional
body.aliasGroupNames[] string Optional
body.aliasGroupNamesInternal array Optional
body.aliasGroupNamesInternal[] string Optional
body.aliases array Optional Structured aliases ({ value, confidence 1-10, tlp }). Public: returned to all accounts with per-entry TLP filtering (entries with tlp: purple are removed for non-CFONE accounts).
body.aliases[] object Optional
body.aliases[].confidence integer | null Optional minimum: 1; maximum: 10
body.aliases[].tlp string | null Optional enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.aliases[].value string Required
body.attributionOrganization — Optional
body.attributionOrganization string Optional anyOf[1]
body.attributionOrganization object Optional anyOf[2]
body.attributionOrganization.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.attributionOrganization.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.attributionOrganization.value string Required anyOf[2]
body.categoryUuid string Optional Tag type (category) UUID. Optional — when present, properties is validated against this category's schema. When absent, the tag is typeless and properties are accepted free-form.
body.confidence integer Optional Overall tag confidence (1-10). Optional. minimum: 1; maximum: 10
body.dateOfDiscovery string Optional Date of discovery (ISO YYYY-MM-DD). Optional. pattern: "^\\d{4}-\\d{2}-\\d{2}$"
body.description string Optional
body.externalReferenceLinks array Optional
body.externalReferenceLinks[] string Optional
body.externalReferences array Optional Structured external references ({ url, description }). Public: returned to all accounts.
body.externalReferences[] object Optional
body.externalReferences[].description string | null Optional
body.externalReferences[].url string Required
body.internalAliases array Optional Owner-private structured aliases ({ value, confidence 1-10, tlp }). Returned to the owning account and omitted from shared-catalog non-owner responses.
body.internalAliases[] object Optional
body.internalAliases[].confidence integer | null Optional minimum: 1; maximum: 10
body.internalAliases[].tlp string | null Optional enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.internalAliases[].value string Required
body.internalDescription string Optional
body.lastSeen string Optional
body.motive — Optional
body.motive string Optional anyOf[1]
body.motive object Optional anyOf[2]
body.motive.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.motive.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.motive.value string Required anyOf[2]
body.opsecLevel — Optional
body.opsecLevel string Optional anyOf[1]
body.opsecLevel object Optional anyOf[2]
body.opsecLevel.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.opsecLevel.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.opsecLevel.value string Required anyOf[2]
body.originCountryISO — Optional
body.originCountryISO string Optional anyOf[1]
body.originCountryISO object Optional anyOf[2]
body.originCountryISO.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.originCountryISO.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.originCountryISO.value string Required anyOf[2]
body.priority — Optional
body.priority number Optional anyOf[1]
body.priority object Optional anyOf[2]
body.priority.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.priority.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.priority.value number Required anyOf[2]
body.properties object Optional Structured metadata blob. Optional. When categoryUuid is given, validated against this category's schema on write. When typeless, accepted free-form. Use {} for a tag with no custom data. additionalProperties: true
body.sophisticationLevel — Optional
body.sophisticationLevel string Optional anyOf[1]
body.sophisticationLevel object Optional anyOf[2]
body.sophisticationLevel.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.sophisticationLevel.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.sophisticationLevel.value string Required anyOf[2]
body.tlp string Optional Tag-level TLP handling marking. Optional. Allowed values: red, amber, amber-strict, green, clear, purple, amber+strict. enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.value string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a tag — cloudflare.delete_tagdelete

Run Delete a tag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.tag_uuid string Required Tag UUID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "tag_uuid": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a tag — cloudflare.get_tagdetail

Run Get a tag with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.tag_uuid string Required Tag UUID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "tag_uuid": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a tag — cloudflare.patch_tagupdate

Run Update a tag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.tag_uuid string Required Tag UUID.
body object Optional
body.activeDuration — Optional
body.activeDuration string Optional anyOf[1]
body.activeDuration object Optional anyOf[2]
body.activeDuration.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.activeDuration.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.activeDuration.value string Required anyOf[2]
body.actorCategory — Optional
body.actorCategory string Optional anyOf[1]
body.actorCategory object Optional anyOf[2]
body.actorCategory.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.actorCategory.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.actorCategory.value string Required anyOf[2]
body.aliasGroupNames array Optional
body.aliasGroupNames[] string Optional
body.aliasGroupNamesInternal array Optional
body.aliasGroupNamesInternal[] string Optional
body.aliases array Optional Structured aliases ({ value, confidence 1-10, tlp }). Public: returned to all accounts with per-entry TLP filtering (entries with tlp: purple are removed for non-CFONE accounts).
body.aliases[] object Optional
body.aliases[].confidence integer | null Optional minimum: 1; maximum: 10
body.aliases[].tlp string | null Optional enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.aliases[].value string Required
body.attributionOrganization — Optional
body.attributionOrganization string Optional anyOf[1]
body.attributionOrganization object Optional anyOf[2]
body.attributionOrganization.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.attributionOrganization.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.attributionOrganization.value string Required anyOf[2]
body.categoryUuid string Optional Tag type (category) UUID. When changed, existing properties are re-validated against the new category's schema (400 on mismatch). Set to null to unlink (typeless; properties stop being validated).
body.confidence integer Optional Overall tag confidence (1-10). Omit to preserve existing. minimum: 1; maximum: 10
body.dateOfDiscovery string Optional Date of discovery (ISO YYYY-MM-DD). Omit to preserve existing. pattern: "^\\d{4}-\\d{2}-\\d{2}$"
body.description string Optional
body.externalReferenceLinks array Optional
body.externalReferenceLinks[] string Optional
body.externalReferences array Optional Structured external references ({ url, description }). Public: returned to all accounts.
body.externalReferences[] object Optional
body.externalReferences[].description string | null Optional
body.externalReferences[].url string Required
body.internalAliases array Optional Owner-private structured aliases ({ value, confidence 1-10, tlp }). Returned to the owning account and omitted from shared-catalog non-owner responses.
body.internalAliases[] object Optional
body.internalAliases[].confidence integer | null Optional minimum: 1; maximum: 10
body.internalAliases[].tlp string | null Optional enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.internalAliases[].value string Required
body.internalDescription string Optional
body.lastSeen string Optional
body.motive — Optional
body.motive string Optional anyOf[1]
body.motive object Optional anyOf[2]
body.motive.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.motive.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.motive.value string Required anyOf[2]
body.opsecLevel — Optional
body.opsecLevel string Optional anyOf[1]
body.opsecLevel object Optional anyOf[2]
body.opsecLevel.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.opsecLevel.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.opsecLevel.value string Required anyOf[2]
body.originCountryISO — Optional
body.originCountryISO string Optional anyOf[1]
body.originCountryISO object Optional anyOf[2]
body.originCountryISO.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.originCountryISO.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.originCountryISO.value string Required anyOf[2]
body.priority — Optional
body.priority number Optional anyOf[1]
body.priority object Optional anyOf[2]
body.priority.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.priority.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.priority.value number Required anyOf[2]
body.properties object Optional Custom field values blob. When omitted, the existing value is preserved. When provided, performs a shallow per-key merge over the stored value (unmentioned keys are retained). Setting an individual key to null deletes that key. Validation runs against the merged result, so a partial update may omit a schema-required key if the stored value supplies it. additionalProperties: true
body.sophisticationLevel — Optional
body.sophisticationLevel string Optional anyOf[1]
body.sophisticationLevel object Optional anyOf[2]
body.sophisticationLevel.confidence integer Optional anyOf[2]; minimum: 1; maximum: 10
body.sophisticationLevel.tlp string Optional anyOf[2]; enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.sophisticationLevel.value string Required anyOf[2]
body.tlp string Optional Tag-level TLP marking. Omit to preserve existing. Cannot be cleared to null. enum: ["red","amber","amber-strict","green","clear","purple","amber+strict"]
body.value string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "tag_uuid": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List a tag's indicators — cloudflare.get_tagindicatorslist

Run List a tag's indicators with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.tag_uuid string Required Tag UUID.
query object Optional additionalProperties: false
query.datasetIds array Optional Dataset UUIDs to scope to (repeat the param for multiple), or one standalone scope value: 'all'/'*' or 'operational' for readable intelligence datasets (isAnalytics=false), or 'analytics' for readable analytics datasets (isAnalytics=true). Analytics datasets do not expose tag associations, so 'analytics' returns an empty result. Omit for 'all'.
query.datasetIds[] string Optional
query.page number Optional
query.pageSize number Optional
query.indicatorType string Optional
query.relatedEvent array Optional Filter indicators by related event UUID(s). Multiple UUIDs can be provided by repeating the parameter.
query.relatedEvent[] string Optional
query.search array Optional Structured search as a JSON array of {field, op, value} objects. Searchable fields: value, indicatorType. Multiple conditions are AND'd together. Max 10 conditions per request.
query.search[] object Optional
query.search[].field string Required The indicator field to search on. Allowed: value, indicatorType, uuid. enum: ["value","indicatorType","uuid"]
query.search[].op string Required Search operator. Use 'in' for bulk lookup of up to 100 values at once, e.g. {field:'value', op:'in', value:['evil.com','bad.org']}. enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","in","find"]
query.search[].value — Required Search value. String for most operators. Array of strings for 'in' operator (max 100 items).
query.search[].value string Required anyOf[1]
query.search[].value array Required anyOf[2]
query.search[].value[] string Optional anyOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "tag_uuid": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tag relationships — cloudflare.get_tagrelationshipslist

Run List tag relationships with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.tag_uuid string Required Tag UUID.
query object Optional additionalProperties: false
query.datasets array Optional Comma-separated dataset UUIDs to scope to, or one standalone scope value: 'all'/'*' or 'operational' for readable intelligence datasets (isAnalytics=false), or 'analytics' for readable analytics datasets (isAnalytics=true). Analytics datasets do not expose tag associations, so 'analytics' returns an empty result. Omit for 'all'.
query.datasets[] string Optional
query.search array Optional JSON array of {field, op, value} filters (same as indicator list search).
query.search[] object Optional
query.search[].field string Required entityType | type | confidence | metadata.<key>
query.search[].op string Required Search operator. 'exists' only valid for metadata.<key> fields. enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","in","find","exists"]
query.search[].value — Optional Value to compare against. Omit for 'exists' op.
query.search[].value string Optional anyOf[1]
query.search[].value number Optional anyOf[2]
query.search[].value boolean Optional anyOf[3]
query.search[].value array Optional anyOf[4]
query.search[].value[] — Optional anyOf[4]
query.search[].value[] string Optional anyOf[4]; anyOf[1]
query.search[].value[] number Optional anyOf[4]; anyOf[2]
query.expand array Optional Comma-separated entity types to hydrate (event, indicator, tag).
query.expand[] string Optional
query.cursor string Optional Offset cursor from a previous page.
query.pageSize integer Optional Page size (1–100, default 25). default: 25; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "tag_uuid": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a tag relationship — cloudflare.post_tagrelationshipcreate

Run Create a tag relationship with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.tag_uuid string Required Tag UUID.
body object Optional
body.confidence integer Optional Confidence score 0–100. minimum: 0; maximum: 100
body.datasetId string Required Dataset UUID where the relationship row will be stored (locates the Indicators DO). minLength: 1
body.metadata object Optional Arbitrary JSON metadata. additionalProperties: true
body.targetId string Required UUID of the target entity. minLength: 1
body.targetType string Required Target type. "tag" is not allowed (tag↔tag relationships are not supported). enum: ["event","indicator"]
body.type string Required Relationship type. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "tag_uuid": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a tag relationship — cloudflare.delete_tagrelationshipdelete

Run Delete a tag relationship with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.tag_uuid string Required Tag UUID.
path.rel_uuid string Required Relationship UUID. format: "uuid"
query object Required additionalProperties: false
query.datasetId string Required Dataset UUID containing the relationship.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "tag_uuid": "example",
    "rel_uuid": "00000000-0000-4000-8000-000000000000"
  },
  "query": {
    "datasetId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a tag relationship — cloudflare.patch_tagrelationshipupdate

Run Update a tag relationship with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.tag_uuid string Required Tag UUID.
path.rel_uuid string Required Relationship UUID. format: "uuid"
query object Required additionalProperties: false
query.datasetId string Required Dataset UUID containing the relationship.
body object Optional
body.confidence integer | null Optional Updated confidence. null clears it. minimum: 0; maximum: 100
body.metadata object | null Optional Updated metadata. null clears it. additionalProperties: true
body.type string Optional Updated relationship type. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "tag_uuid": "example",
    "rel_uuid": "00000000-0000-4000-8000-000000000000"
  },
  "query": {
    "datasetId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List target industries used in datasets — cloudflare.get_targetindustrylist

Run List target industries used in datasets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.datasetIds array Optional Array of dataset IDs to query target industries from. If not provided, uses the default dataset.
query.datasetIds[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all target industries — cloudflare.get_targetindustrylistcomplete

Run List all target industries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update events in bulk — cloudflare.patch_eventupdatebulk

Run Update events in bulk with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body object Optional
body.datasetId string Required Dataset ID containing the events to update. Required to prevent cross-account modifications.
body.eventIds array Required List of event UUIDs to update (1-100) minItems: 1; maxItems: 100
body.eventIds[] string Optional
body.updates object Required Fields to update on all specified events. All fields including 'insight' are supported, except 'date' which requires shard migration.
body.updates.attacker string | null Optional
body.updates.attackerCountry string Optional
body.updates.category string Optional
body.updates.createdAt string Optional format: "date-time"
body.updates.event string Optional
body.updates.indicator string Optional
body.updates.indicatorType string Optional
body.updates.insight string Optional
body.updates.raw object Optional
body.updates.raw.data object | null Optional additionalProperties: true
body.updates.raw.source string Optional
body.updates.raw.tlp string Optional
body.updates.targetCountry string Optional
body.updates.targetIndustry string Optional
body.updates.tlp string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an event — cloudflare.patch_eventupdate

Run Update an event with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.event_id string Required Event UUID.
body object Optional
body.attacker string | null Optional
body.attackerCountry string Optional
body.category string Optional
body.createdAt string Optional format: "date-time"
body.datasetId string Required Dataset ID containing the event to update.
body.date string Optional format: "date-time"
body.event string Optional
body.indicator string Optional
body.indicatorType string Optional
body.insight string Optional
body.raw object Optional
body.raw.data object | null Optional additionalProperties: true
body.raw.source string Optional
body.raw.tlp string Optional
body.targetCountry string Optional
body.targetIndustry string Optional
body.tlp string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "event_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an event — cloudflare.post_eventupdate

Run Update an event with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.event_id string Required Event UUID.
body object Optional
body.attacker string | null Optional
body.attackerCountry string Optional
body.category string Optional
body.createdAt string Optional format: "date-time"
body.datasetId string Required Dataset ID containing the event to update.
body.date string Optional format: "date-time"
body.event string Optional
body.indicator string Optional
body.indicatorType string Optional
body.insight string Optional
body.raw object Optional
body.raw.data object | null Optional additionalProperties: true
body.raw.source string Optional
body.raw.tlp string Optional
body.targetCountry string Optional
body.targetIndustry string Optional
body.tlp string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "event_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get raw event data by raw ID (legacy) — cloudflare.get_eventrawread

Run Get raw event data by raw ID (legacy) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.event_id string Required Event UUID.
path.raw_id string Required Raw Event UUID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "event_id": "example",
    "raw_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update raw event data by raw ID (legacy) — cloudflare.patch_eventrawupdate

Run Update raw event data by raw ID (legacy) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.event_id string Required Event UUID.
path.raw_id string Required Raw Event UUID.
body object Optional
body.data object Optional
body.source string Optional
body.tlp string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "event_id": "example",
    "raw_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update raw event data by raw ID (legacy) — cloudflare.post_eventrawupdate

Run Update raw event data by raw ID (legacy) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.event_id string Required Event UUID.
path.raw_id string Required Raw Event UUID.
body object Optional
body.data object Optional
body.source string Optional
body.tlp string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "event_id": "example",
    "raw_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Requests — cloudflare.cloudforce-one-request-list

Run List Requests with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
body — Required $ref: "#/definitions/cloudforce-one-requests_request-list"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "page": 1,
    "per_page": 10
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Request Priority, Status, and TLP constants — cloudflare.cloudforce-one-request-constants

Run Get Request Priority, Status, and TLP constants with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a New Request. — cloudflare.cloudforce-one-request-new

Run Create a New Request. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
body — Required $ref: "#/definitions/cloudforce-one-requests_request-edit"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Priority Intelligence Requirements — cloudflare.cloudforce-one-priority-list

Run List Priority Intelligence Requirements with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
body — Required $ref: "#/definitions/cloudforce-one-requests_priority-list"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "page": 1,
    "per_page": 10
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a New Priority Intelligence Requirement — cloudflare.cloudforce-one-priority-new

Run Create a New Priority Intelligence Requirement with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
body — Required $ref: "#/definitions/cloudforce-one-requests_priority-edit"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "labels": [
      "DoS",
      "CVE"
    ],
    "priority": 1,
    "requirement": "DoS attacks carried out by CVEs",
    "tlp": "clear"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Priority Intelligence Requirement Quota — cloudflare.cloudforce-one-priority-quota

Run Get Priority Intelligence Requirement Quota with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Priority Intelligence Requirement — cloudflare.cloudforce-one-priority-delete

Run Delete a Priority Intelligence Requirement with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.priority_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "priority_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Priority Intelligence Requirement — cloudflare.cloudforce-one-priority-get

Run Get a Priority Intelligence Requirement with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.priority_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "priority_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Priority Intelligence Requirement — cloudflare.cloudforce-one-priority-update

Run Update a Priority Intelligence Requirement with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.priority_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"
body — Required $ref: "#/definitions/cloudforce-one-requests_priority-edit"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "priority_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "labels": [
      "DoS",
      "CVE"
    ],
    "priority": 1,
    "requirement": "DoS attacks carried out by CVEs",
    "tlp": "clear"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Request Quota — cloudflare.cloudforce-one-request-quota

Run Get Request Quota with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Request Types — cloudflare.cloudforce-one-request-types

Run Get Request Types with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Request — cloudflare.cloudforce-one-request-delete

Run Delete a Request with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.request_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "request_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Request — cloudflare.cloudforce-one-request-get

Run Get a Request with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.request_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "request_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Request — cloudflare.cloudforce-one-request-update

Run Update a Request with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.request_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"
body — Required $ref: "#/definitions/cloudforce-one-requests_request-edit"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "request_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Request Assets — cloudflare.cloudforce-one-request-asset-list

Run List Request Assets with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.request_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"
body — Required $ref: "#/definitions/cloudforce-one-requests_request-asset-list"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "request_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "page": 1,
    "per_page": 10
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Request Asset — cloudflare.cloudforce-one-request-asset-delete

Run Delete a Request Asset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.request_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"
path.asset_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "request_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "asset_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Request Asset — cloudflare.cloudforce-one-request-asset-get

Run Get a Request Asset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.request_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"
path.asset_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "request_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "asset_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Request Asset — cloudflare.cloudforce-one-request-asset-update

Run Update a Request Asset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.request_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"
path.asset_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"
body — Required $ref: "#/definitions/cloudforce-one-requests_request-asset-edit"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "request_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "asset_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Request Messages — cloudflare.cloudforce-one-request-message-list

Run List Request Messages with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.request_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"
body — Required $ref: "#/definitions/cloudforce-one-requests_request-message-list"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "request_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "page": 1,
    "per_page": 10
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a New Request Message — cloudflare.cloudforce-one-request-message-new

Run Create a New Request Message with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.request_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"
body — Required $ref: "#/definitions/cloudforce-one-requests_request-message-edit"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "request_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Request Message — cloudflare.cloudforce-one-request-message-delete

Run Delete a Request Message with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.request_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"
path.message_id integer Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "request_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "message_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Request Message — cloudflare.cloudforce-one-request-message-update

Run Update a Request Message with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-requests_identifier"
path.request_id — Required $ref: "#/definitions/cloudforce-one-requests_uuid"
path.message_id integer Required
body — Required $ref: "#/definitions/cloudforce-one-requests_request-message-edit"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "request_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "message_id": 1
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete all rules — cloudflare.cloudforce-one-delete-all-rules

Run Delete all rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List rules — cloudflare.cloudforce-one-list-rules

Run List rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
query object Optional additionalProperties: false
query.namespace — Optional Selects namespaces. Repeat the parameter to select multiple namespaces (for example, namespace=foo&namespace=bar).
query.namespace string Optional anyOf[1]
query.namespace array Optional anyOf[2]; maxItems: 50
query.namespace[] string Optional anyOf[2]
query.path — Optional Selects paths with exact-match semantics. Omit the parameter to return rules from all paths. Pass an empty string (path=) to return only rules with an empty or uncategorized path. Pass a value (for example, path=yara) to match that exact path. Repeat the parameter (for example, path=yara&path=expr) to OR-match multiple paths with SQL IN (...) semantics. The recursive flag affects only customer-account namespace selection.
query.path string Optional anyOf[1]
query.path array Optional anyOf[2]; maxItems: 50
query.path[] string Optional anyOf[2]
query.recursive string Optional For customer accounts, true enables descendant matching for namespaces. Paths always use exact matching. enum: ["true","false"]
query.search string Optional
query.is_public string Optional Limits rules to the specified public visibility. enum: ["true","false"]
query.limit number Optional default: 50; minimum: 1; maximum: 100
query.offset number | null Optional default: 0; minimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a rule — cloudflare.cloudforce-one-create-rule

Run Create a rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body — Optional $ref: "#/definitions/cloudforce-one_CreateRule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List rule approvals — cloudflare.cloudforce-one-list-rule-approvals

Run List rule approvals with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
query object Optional additionalProperties: false
query.status — Optional Selects approval statuses. Repeat the parameter to OR-match statuses (for example, status=pending&status=rejected). Use status=all alone to disable status filtering. default: "pending"
query.status string Optional anyOf[1]; enum: ["pending","approved","rejected","cancelled","all"]
query.status array Optional anyOf[2]; minItems: 1; maxItems: 4
query.status[] string Optional anyOf[2]; enum: ["pending","approved","rejected","cancelled","all"]
query.latest_only string Optional When true, returns the newest revision in each approval chain. enum: ["true","false"]; default: "false"
query.limit number Optional default: 50; minimum: 1; maximum: 100
query.offset number | null Optional default: 0; minimum: 0
query.reviewer_scope string Optional Limits approvals to the specified reviewer scope. enum: ["default","email","unresolved"]
query.change_type string Optional Limits approvals to the specified mutation type. enum: ["create","update","delete"]
query.rule_id string Optional Filter approvals by rule ID. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get rule approval details — cloudflare.cloudforce-one-get-rule-approval

Run Get rule approval details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the approval.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Cancel a pending approval — cloudflare.cloudforce-one-cancel-rule-approval

Run Cancel a pending approval with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the approval.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revise and resubmit a rejected approval — cloudflare.cloudforce-one-resubmit-rule-approval

Run Revise and resubmit a rejected approval with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the approval.
body — Optional $ref: "#/definitions/cloudforce-one_ResubmitApprovalRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove patterns from exemption rules — cloudflare.cloudforce-one-remove-account-exemptions

Run Remove patterns from exemption rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body — Optional $ref: "#/definitions/cloudforce-one_PartialAccountExemptions"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get exemption rules for an account — cloudflare.cloudforce-one-get-exemptions

Run Get exemption rules for an account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add patterns to exemption rules — cloudflare.cloudforce-one-add-account-exemptions

Run Add patterns to exemption rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body — Optional $ref: "#/definitions/cloudforce-one_PartialAccountExemptions"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update exemption rule patterns — cloudflare.cloudforce-one-update-account-exemptions

Run Update exemption rule patterns with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body — Optional $ref: "#/definitions/cloudforce-one_UpdateAccountExemptionsBody"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get managed rules — cloudflare.cloudforce-one-get-managed-rules

Run Get managed rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Search rules — cloudflare.cloudforce-one-search-rules

Run Search rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
query object Required additionalProperties: false
query.namespace — Optional Selects namespaces. Repeat the parameter to select multiple namespaces (for example, namespace=foo&namespace=bar).
query.namespace string Optional anyOf[1]
query.namespace array Optional anyOf[2]; maxItems: 50
query.namespace[] string Optional anyOf[2]
query.path — Optional Selects paths with exact-match semantics. Omit the parameter to return rules from all paths. Pass an empty string (path=) to return only rules with an empty or uncategorized path. Pass a value (for example, path=yara) to match that exact path. Repeat the parameter (for example, path=yara&path=expr) to OR-match multiple paths with SQL IN (...) semantics. The recursive flag affects only customer-account namespace selection.
query.path string Optional anyOf[1]
query.path array Optional anyOf[2]; maxItems: 50
query.path[] string Optional anyOf[2]
query.recursive string Optional For customer accounts, true enables descendant matching for namespaces. Paths always use exact matching. enum: ["true","false"]
query.search string Optional
query.is_public string Optional Limits rules to the specified public visibility. enum: ["true","false"]
query.limit number Optional default: 50; minimum: 1; maximum: 100
query.offset number | null Optional default: 0; minimum: 0
query.query string Required Natural-language or keyword search query. minLength: 1; maxLength: 500
query.mode string Optional Retrieval strategy used for the query. enum: ["exact","hybrid","vector","keyword"]; default: "hybrid"
query.language string Optional Limits results to the specified rule language. enum: ["yara","js"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "query": "obfuscated proxy worker"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get dashboard stats — cloudflare.cloudforce-one-get-rule-stats

Run Get dashboard stats with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List email rules — cloudflare.cloudforce-one-list-email-rules

Run List email rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
query object Optional additionalProperties: false
query.limit number Optional default: 50; minimum: 1; maximum: 100
query.offset number | null Optional default: 0; minimum: 0
query.search string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an email rule — cloudflare.cloudforce-one-create-email-rule

Run Create an email rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body object Optional
body.condition — Required $ref: "#/definitions/cloudforce-one_EmailRuleConditionGroup"
body.description string Optional maxLength: 1000
body.enabled boolean Optional default: true
body.meta array Optional maxItems: 50
body.meta[] — Optional $ref: "#/definitions/cloudforce-one_MetaInputEntry"
body.name string Required minLength: 1; maxLength: 255
body.status string Optional Disposition for matching email. This emits status metadata with the selected value. enum: ["silent","blocking"]; default: "silent"
body.strings array Optional default: []; maxItems: 50
body.strings[] object Optional
body.strings[].identifier string Required minLength: 1; maxLength: 128; pattern: "^[a-zA-Z_][a-zA-Z0-9_]*$"
body.strings[].match_type string Optional enum: ["text","hex","regex"]; default: "text"
body.strings[].modifiers array Optional default: []
body.strings[].modifiers[] string Optional enum: ["nocase","wide","ascii","fullword"]
body.strings[].type string Required enum: ["string_match"]
body.strings[].value string Required minLength: 1; maxLength: 10000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a pending structured email rule approval — cloudflare.cloudforce-one-update-pending-email-rule-approval

Run Update a pending structured email rule approval with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the approval.
query object Optional additionalProperties: false
query.module string Optional Structured rule module. enum: ["eml"]; default: "eml"
body object Optional
body.condition — Required $ref: "#/definitions/cloudforce-one_EmailRuleConditionGroup"
body.description string Optional maxLength: 1000
body.enabled boolean Optional default: true
body.meta array Optional maxItems: 50
body.meta[] — Optional $ref: "#/definitions/cloudforce-one_MetaInputEntry"
body.name string Required minLength: 1; maxLength: 255
body.status string Optional Disposition for matching email. This emits status metadata with the selected value. enum: ["silent","blocking"]; default: "silent"
body.strings array Optional default: []; maxItems: 50
body.strings[] object Optional
body.strings[].identifier string Required minLength: 1; maxLength: 128; pattern: "^[a-zA-Z_][a-zA-Z0-9_]*$"
body.strings[].match_type string Optional enum: ["text","hex","regex"]; default: "text"
body.strings[].modifiers array Optional default: []
body.strings[].modifiers[] string Optional enum: ["nocase","wide","ascii","fullword"]
body.strings[].type string Required enum: ["string_match"]
body.strings[].value string Required minLength: 1; maxLength: 10000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revise and resubmit a rejected structured email rule approval — cloudflare.cloudforce-one-resubmit-email-rule-approval

Run Revise and resubmit a rejected structured email rule approval with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the approval.
query object Optional additionalProperties: false
query.module string Optional Structured rule module. enum: ["eml"]; default: "eml"
body object Optional
body.condition — Required $ref: "#/definitions/cloudforce-one_EmailRuleConditionGroup"
body.description string Optional maxLength: 1000
body.enabled boolean Optional default: true
body.meta array Optional maxItems: 50
body.meta[] — Optional $ref: "#/definitions/cloudforce-one_MetaInputEntry"
body.name string Required minLength: 1; maxLength: 255
body.status string Optional Disposition for matching email. This emits status metadata with the selected value. enum: ["silent","blocking"]; default: "silent"
body.strings array Optional default: []; maxItems: 50
body.strings[] object Optional
body.strings[].identifier string Required minLength: 1; maxLength: 128; pattern: "^[a-zA-Z_][a-zA-Z0-9_]*$"
body.strings[].match_type string Optional enum: ["text","hex","regex"]; default: "text"
body.strings[].modifiers array Optional default: []
body.strings[].modifiers[] string Optional enum: ["nocase","wide","ascii","fullword"]
body.strings[].type string Required enum: ["string_match"]
body.strings[].value string Required minLength: 1; maxLength: 10000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get email rule schema — cloudflare.cloudforce-one-get-email-rule-schema

Run Get email rule schema with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate an email rule — cloudflare.cloudforce-one-validate-email-rule

Run Validate an email rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body object Optional
body.condition — Required $ref: "#/definitions/cloudforce-one_EmailRuleConditionGroup"
body.description string Optional maxLength: 1000
body.enabled boolean Optional default: true
body.existing_rule_id string Optional Existing rule ID to exclude from duplicate-name checks when validating an update. format: "uuid"
body.meta array Optional maxItems: 50
body.meta[] — Optional $ref: "#/definitions/cloudforce-one_MetaInputEntry"
body.name string Required minLength: 1; maxLength: 255
body.status string Optional Disposition for matching email. This emits status metadata with the selected value. enum: ["silent","blocking"]; default: "silent"
body.strings array Optional default: []; maxItems: 50
body.strings[] object Optional
body.strings[].identifier string Required minLength: 1; maxLength: 128; pattern: "^[a-zA-Z_][a-zA-Z0-9_]*$"
body.strings[].match_type string Optional enum: ["text","hex","regex"]; default: "text"
body.strings[].modifiers array Optional default: []
body.strings[].modifiers[] string Optional enum: ["nocase","wide","ascii","fullword"]
body.strings[].type string Required enum: ["string_match"]
body.strings[].value string Required minLength: 1; maxLength: 10000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an email rule — cloudflare.cloudforce-one-delete-email-rule

Run Delete an email rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the rule. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "550e8400-e29b-41d4-a716-446655440000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an email rule — cloudflare.cloudforce-one-get-email-rule

Run Get an email rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the rule. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "550e8400-e29b-41d4-a716-446655440000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an email rule — cloudflare.cloudforce-one-update-email-rule

Run Update an email rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the rule. format: "uuid"
body object Optional
body.condition — Optional $ref: "#/definitions/cloudforce-one_EmailRuleConditionGroup"
body.description string Optional maxLength: 1000
body.enabled boolean Optional
body.meta array Optional maxItems: 50
body.meta[] — Optional $ref: "#/definitions/cloudforce-one_MetaInputEntry"
body.name string Optional minLength: 1; maxLength: 255
body.status string Optional Disposition for matching email. This emits status metadata with the selected value. enum: ["silent","blocking"]
body.strings array Optional maxItems: 50
body.strings[] object Optional
body.strings[].identifier string Required minLength: 1; maxLength: 128; pattern: "^[a-zA-Z_][a-zA-Z0-9_]*$"
body.strings[].match_type string Optional enum: ["text","hex","regex"]; default: "text"
body.strings[].modifiers array Optional default: []
body.strings[].modifiers[] string Optional enum: ["nocase","wide","ascii","fullword"]
body.strings[].type string Required enum: ["string_match"]
body.strings[].value string Required minLength: 1; maxLength: 10000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "550e8400-e29b-41d4-a716-446655440000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Test an email rule — cloudflare.cloudforce-one-test-email-rule

Run Test an email rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the rule. format: "uuid"
body object Optional
body.sample_json string Required minLength: 1; maxLength: 16777216

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "550e8400-e29b-41d4-a716-446655440000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get folder tree structure — cloudflare.cloudforce-one-get-rule-tree

Run Get folder tree structure with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate rule with context — cloudflare.cloudforce-one-validate-rule

Run Validate rule with context with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body object Optional
body.content string Required minLength: 1
body.excludeRuleId string Optional format: "uuid"
body.name string Required minLength: 1; maxLength: 255
body.namespaces array Optional default: []
body.namespaces[] string Optional minLength: 1; maxLength: 255
body.path string Optional minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a rule — cloudflare.cloudforce-one-delete-rule

Run Delete a rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the rule. format: "uuid"
body — Optional $ref: "#/definitions/cloudforce-one_DeleteRuleBody"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "550e8400-e29b-41d4-a716-446655440000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a rule — cloudflare.cloudforce-one-get-rule

Run Get a rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the rule. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "550e8400-e29b-41d4-a716-446655440000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a rule — cloudflare.cloudforce-one-update-rule

Run Update a rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.id string Required The unique identifier for the rule. format: "uuid"
body — Optional $ref: "#/definitions/cloudforce-one_UpdateRule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "550e8400-e29b-41d4-a716-446655440000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Scan Configs — cloudflare.get_configfetch

Run List Scan Configs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Defines the Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new Scan Config — cloudflare.post_configcreate

Run Create a new Scan Config with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Defines the Account ID.
body object Optional
body.frequency — Optional $ref: "#/definitions/cloudforce-one-port-scan-api_frequency"
body.ips — Required $ref: "#/definitions/cloudforce-one-port-scan-api_ips"
body.ports — Optional $ref: "#/definitions/cloudforce-one-port-scan-api_ports"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Scan Config — cloudflare.delete_deletescans

Run Delete a Scan Config with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Defines the Account ID.
path.config_id string Required Defines the Config ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "config_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an existing Scan Config — cloudflare.post_configupdate

Run Update an existing Scan Config with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Defines the Account ID.
path.config_id string Required Defines the Config ID.
body object Optional
body.frequency — Optional $ref: "#/definitions/cloudforce-one-port-scan-api_frequency"
body.ips — Optional $ref: "#/definitions/cloudforce-one-port-scan-api_ips"
body.ports — Optional $ref: "#/definitions/cloudforce-one-port-scan-api_ports"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "config_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Latest Scan Result — cloudflare.get_getopenports

Run Get the Latest Scan Result with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Defines the Account ID.
path.config_id string Required Defines the Config ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "config_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List saved query matches — cloudflare.get_domainmatchlist

Run List saved query matches with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Required additionalProperties: false
query.offset string Optional default: "0"
query.limit string Optional default: "50"
query.query_id array Required Query ID or comma-separated list of Query IDs. When multiple IDs are provided, matches are deduplicated across queries and each match includes a match_details array with per-match query metadata and dismissed state.
query.query_id[] string Optional
query.include_domain_id string Optional default: "false"
query.include_dismissed string Optional
query.domain_search string Optional Filter matches by domain name (substring match)
query.orderBy string Optional Column to sort by. Options: 'domain', 'first_seen', or 'registrar' enum: ["domain","first_seen","registrar"]
query.order string Optional Sort order. Options: 'asc' (ascending) or 'desc' (descending) enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "query_id": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Bulk dismiss or undismiss matches — cloudflare.post_bulkdismissmatches

Run Bulk dismiss or undismiss matches with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body object Optional
body.action string Required enum: ["dismiss","undismiss"]
body.match_ids array Optional minItems: 1; maxItems: 100
body.match_ids[] integer Optional exclusiveMinimum: 0
body.matches array Optional minItems: 1; maxItems: 100
body.matches[] object Optional
body.matches[].domain_id integer Required exclusiveMinimum: 0
body.matches[].query_id integer Required exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get queries — cloudflare.get_getdomainqueries

Run Get queries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Optional additionalProperties: false
query.id string Optional
query.page integer Optional Optional page number for paginated list requests. Defaults to 1 when only per_page is supplied. Omit page and per_page to preserve the legacy full-list response. maximum: 1000000; exclusiveMinimum: 0
query.per_page integer Optional Optional number of queries per page for paginated list requests. Defaults to 100 when only page is supplied. Maximum 100. Omit page and per_page to preserve the legacy full-list response. maximum: 100; exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Insert query — cloudflare.post_insertdomainquery

Run Insert query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body object Optional
body.max_time string Optional
body.min_time string Optional
body.scan boolean Optional
body.scan_matches boolean Optional
body.search_lookback boolean Optional If true, search recent domain lookback entries for matches default: true
body.string_matches array Required minItems: 1; maxItems: 100
body.string_matches[] object Optional
body.string_matches[].pattern string Required minLength: 1; maxLength: 200
body.tag string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete domain query — cloudflare.delete_deletedomainquery

Run Delete domain query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.query_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "query_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update domain query — cloudflare.patch_updatedomainquery

Run Update domain query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.query_id string Required minLength: 1
body object Optional
body.max_time string Optional
body.min_time string Optional
body.scan boolean Optional
body.scan_matches boolean Optional
body.search_lookback boolean Optional If true, search recent domain lookback entries for matches default: true
body.string_matches array Required minItems: 1; maxItems: 100
body.string_matches[] object Optional
body.string_matches[].pattern string Required minLength: 1; maxLength: 200
body.tag string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "query_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Analyze domains for brand impersonation — cloudflare.post_domaintrial

Run Analyze domains for brand impersonation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body object Optional
body.brand string Required minLength: 1; maxLength: 200; pattern: "^[\\w\\s.-]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Generate takedown letter — cloudflare.post_lettergenerate

Run Generate takedown letter with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body object Optional
body.createNotice boolean Optional default: false
body.fields object Required
body.fields.discoveryDate string Optional pattern: "^\\d{4}-\\d{2}-\\d{2}$"
body.fields.domain string Optional maxLength: 500
body.fields.generationDate string Optional pattern: "^\\d{4}-\\d{2}-\\d{2}$"
body.fields.jurisdiction string Optional maxLength: 500
body.fields.registrantEmail string Optional maxLength: 500
body.fields.registrar string Optional maxLength: 500
body.fields.registrarEmail string Optional maxLength: 500
body.fields.resolutionByDate string Optional pattern: "^\\d{4}-\\d{2}-\\d{2}$"
body.fields.senderCompany string Optional maxLength: 500
body.fields.senderEmail string Optional maxLength: 500
body.fields.senderName string Optional maxLength: 500
body.fields.senderTitle string Optional maxLength: 500
body.fields.trademarkName string Optional maxLength: 500
body.fields.trademarkNumber string Optional maxLength: 500
body.fields.trademarkOwner string Optional maxLength: 500
body.format string Optional enum: ["text","pdf"]; default: "text"
body.noticeParams object Optional
body.noticeParams.domain string Required minLength: 1; maxLength: 253
body.noticeParams.queryId integer Optional exclusiveMinimum: 0
body.noticeParams.status string Optional enum: ["draft","sent","resolved","expired"]; default: "sent"
body.templateId string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List letter templates — cloudflare.get_lettertemplatelist

Run List letter templates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create letter template — cloudflare.post_lettertemplatecreate

Run Create letter template with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body object Optional
body.body string Required minLength: 1
body.category string Required minLength: 1; maxLength: 100
body.description string Optional maxLength: 1000
body.name string Required minLength: 1; maxLength: 255

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List example letter templates — cloudflare.get_lettertemplateexamples

Run List example letter templates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete letter template — cloudflare.delete_lettertemplatedelete

Run Delete letter template with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.template_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "template_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get letter template — cloudflare.get_lettertemplateget

Run Get letter template with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.template_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "template_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update letter template — cloudflare.put_lettertemplateupdate

Run Update letter template with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.template_id string Required minLength: 1
body object Optional
body.body string Optional minLength: 1
body.category string Optional minLength: 1; maxLength: 100
body.description string | null Optional maxLength: 1000
body.name string Optional minLength: 1; maxLength: 255

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "template_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List logo matches — cloudflare.get_logomatchlist

Run List logo matches with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Required additionalProperties: false
query.offset string Optional default: "0"
query.limit string Optional default: "50"
query.query_id string Required minLength: 1
query.download string Optional
query.orderBy string Optional Column to sort by. Options: 'matchedAt', 'domain', 'similarityScore', or 'registrar' enum: ["matchedAt","domain","similarityScore","registrar"]
query.order string Optional Sort order. Options: 'asc' (ascending) or 'desc' (descending) enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "query_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get logo queries — cloudflare.get_getlogoqueries

Run Get logo queries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Optional additionalProperties: false
query.id string Optional Optional query ID to retrieve a specific logo query
query.download string Optional If true, include base64-encoded image data in the response

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Insert logo query — cloudflare.post_insertlogoquery

Run Insert logo query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body object Optional
body.image_data string Required Base64 encoded image data. Can include data URI prefix (e.g., 'data:image/png;base64,...') or just the base64 string. minLength: 1
body.search_lookback boolean Optional If true, search historic scanned images for matches above the similarity threshold default: true
body.similarity_threshold number Required Minimum similarity score (0-1) required for visual matches minimum: 0; maximum: 1
body.tag string Required Unique identifier for the logo query minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete logo query — cloudflare.delete_deletelogoquery

Run Delete logo query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.query_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "query_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Search scanned images — cloudflare.post_searchlogosimilarity

Run Search scanned images with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Optional additionalProperties: false
query.showHistoric string Optional Include scanned images without domain metadata (historic data). Default: false (only show images with domain) default: "false"
query.download string Optional If true, include base64-encoded image data in the response
body object Optional
body.image_data string Required Base64 encoded image data. Can include data URI prefix (e.g., 'data:image/png;base64,...') or just the base64 string. minLength: 1
body.score_threshold number Optional Minimum similarity score threshold for matches (0-1, default: 0) default: 0; minimum: 0; maximum: 1
body.top_k integer Optional Number of closest matches to return (1-100, default: 10) default: 10; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Dismiss a match — cloudflare.post_dismissmatch

Run Dismiss a match with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.query_id integer Required exclusiveMinimum: 0
path.domain_id integer Required exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "query_id": 1,
    "domain_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Undismiss a match — cloudflare.post_undismissmatch

Run Undismiss a match with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.query_id integer Required exclusiveMinimum: 0
path.domain_id integer Required exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "query_id": 1,
    "domain_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List takedown notices — cloudflare.get_takedownnoticelist

Run List takedown notices with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create takedown notice — cloudflare.post_takedownnoticecreate

Run Create takedown notice with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body object Optional
body.domain string Required minLength: 1; maxLength: 253
body.matchId integer Optional exclusiveMinimum: 0
body.matchType string Optional enum: ["logo","domain"]
body.queryId integer Optional exclusiveMinimum: 0
body.status string Optional enum: ["draft","sent","resolved","expired"]; default: "draft"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Lookup takedown notices by domains — cloudflare.post_takedownnoticelookup

Run Lookup takedown notices by domains with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body object Optional
body.domains array Required minItems: 1; maxItems: 100
body.domains[] string Optional minLength: 1; maxLength: 253
body.queryId integer Optional exclusiveMinimum: 0
body.queryIds array Optional maxItems: 100
body.queryIds[] integer Optional exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete takedown notice — cloudflare.delete_takedownnoticedelete

Run Delete takedown notice with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.notice_id integer Required exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "notice_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get takedown notice — cloudflare.get_takedownnoticeget

Run Get takedown notice with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.notice_id integer Required exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "notice_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update takedown notice — cloudflare.put_takedownnoticeupdate

Run Update takedown notice with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.notice_id integer Required exclusiveMinimum: 0
body object Optional
body.domain string Optional minLength: 1; maxLength: 253
body.matchId integer | null Optional exclusiveMinimum: 0
body.matchType string | null Optional enum: ["logo","domain"]
body.queryId integer | null Optional exclusiveMinimum: 0
body.status string Optional enum: ["draft","sent","resolved","expired"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "notice_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List takedown letters — cloudflare.get_takedownletterlist

Run List takedown letters with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.notice_id integer Required exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "notice_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create takedown letter — cloudflare.post_takedownlettercreate

Run Create takedown letter with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.notice_id integer Required exclusiveMinimum: 0
body object Optional
body.fields object Required
body.fields.discoveryDate string Optional pattern: "^\\d{4}-\\d{2}-\\d{2}$"
body.fields.domain string Optional maxLength: 500
body.fields.generationDate string Optional pattern: "^\\d{4}-\\d{2}-\\d{2}$"
body.fields.jurisdiction string Optional maxLength: 500
body.fields.registrantEmail string Optional maxLength: 500
body.fields.registrar string Optional maxLength: 500
body.fields.registrarEmail string Optional maxLength: 500
body.fields.resolutionByDate string Optional pattern: "^\\d{4}-\\d{2}-\\d{2}$"
body.fields.senderCompany string Optional maxLength: 500
body.fields.senderEmail string Optional maxLength: 500
body.fields.senderName string Optional maxLength: 500
body.fields.senderTitle string Optional maxLength: 500
body.fields.trademarkName string Optional maxLength: 500
body.fields.trademarkNumber string Optional maxLength: 500
body.fields.trademarkOwner string Optional maxLength: 500
body.templateId string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "notice_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete takedown letter — cloudflare.delete_takedownletterdelete

Run Delete takedown letter with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.notice_id integer Required exclusiveMinimum: 0
path.letter_id integer Required exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "notice_id": 1,
    "letter_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get takedown letter — cloudflare.get_takedownletterget

Run Get takedown letter with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.notice_id integer Required exclusiveMinimum: 0
path.letter_id integer Required exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "notice_id": 1,
    "letter_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get total queries — cloudflare.get_totalqueries

Run Get total queries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List collections — cloudflare.get_collectionlist

Run List collections with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
query object Optional additionalProperties: false
query.page number Optional Page number
query.limit number Optional Items per page

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new collection — cloudflare.post_collectioncreate

Run Create a new collection with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
body — Optional
body object Optional anyOf[1]
body.columns array Required anyOf[1]; minItems: 1; maxItems: 100
body.columns[] object Optional anyOf[1]
body.columns[].default object | null Optional Default value for the column (type depends on column type) anyOf[1]
body.columns[].name string Required anyOf[1]; minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_]+$"
body.columns[].required boolean Optional anyOf[1]; default: false
body.columns[].type string Required anyOf[1]; enum: ["text","number","boolean","date"]
body.description string Optional anyOf[1]; maxLength: 500
body.metadata object Optional anyOf[1]; additionalProperties: true
body.name string Required anyOf[1]; minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_]+$"
body.project_id string Optional anyOf[1]
body.tags array Optional anyOf[1]
body.tags[] string Optional anyOf[1]
body object Optional anyOf[2]
body.description string Optional anyOf[2]; maxLength: 500
body.metadata object Optional anyOf[2]; additionalProperties: true
body.name string Required anyOf[2]; minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_]+$"
body.project_id string Optional anyOf[2]
body.rows array Required anyOf[2]; minItems: 1; maxItems: 1000
body.rows[] object Optional anyOf[2]; additionalProperties: true
body.tags array Optional anyOf[2]
body.tags[] string Optional anyOf[2]
body object Optional anyOf[3]
body.columns array Required anyOf[3]; minItems: 1; maxItems: 100
body.columns[] object Optional anyOf[3]
body.columns[].default object | null Optional Default value for the column (type depends on column type) anyOf[3]
body.columns[].name string Required anyOf[3]; minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_]+$"
body.columns[].required boolean Optional anyOf[3]; default: false
body.columns[].type string Required anyOf[3]; enum: ["text","number","boolean","date"]
body.description string Optional anyOf[3]; maxLength: 500
body.metadata object Optional anyOf[3]; additionalProperties: true
body.name string Required anyOf[3]; minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_]+$"
body.project_id string Optional anyOf[3]
body.rows array Required anyOf[3]; minItems: 1; maxItems: 1000
body.rows[] object Optional anyOf[3]; additionalProperties: true
body.tags array Optional anyOf[3]
body.tags[] string Optional anyOf[3]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete collection — cloudflare.delete_collectiondelete

Run Delete collection with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
path.collection_id string Required Collection UUID

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get collection — cloudflare.get_collectionget

Run Get collection with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
path.collection_id string Required Collection UUID

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update collection — cloudflare.patch_collectionupdate

Run Update collection with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
path.collection_id string Required Collection UUID
body object Optional
body.metadata object Optional
body.metadata.description string Optional Collection description
body.metadata.project_id string Optional Project ID
body.metadata.tags array Optional
body.metadata.tags[] string Optional
body.name string Optional Collection name

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add column to collection — cloudflare.post_columnadd

Run Add column to collection with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
path.collection_id string Required Collection UUID
body object Optional
body.default object | null Optional
body.name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_]+$"
body.required boolean Optional default: false
body.type string Required enum: ["text","number","boolean","date"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "10d79d097895ae7ed7942a2b3832186c",
    "collection_id": "550e8400-e29b-41d4-a716-446655440000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete column — cloudflare.delete_columndelete

Run Delete column with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.collection_id string Required
path.column_id string Required Column UUID

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example",
    "column_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update column — cloudflare.patch_columnupdate

Run Update column with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.collection_id string Required
path.column_id string Required Column UUID
body object Optional
body.name string Optional New column name (must be unique)
body.position number Optional Column display order
body.required boolean Optional Whether column is required
body.type string Optional Column type: text, number, boolean, or date enum: ["text","number","boolean","date"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example",
    "column_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Export collection to CSV, JSONL, or Markdown — cloudflare.get_collectionexportendpoint

Run Export collection to CSV, JSONL, or Markdown with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID (hex format)
path.collection_id string Required Collection UUID
query object Optional additionalProperties: false
query.include_ids boolean Optional Include item IDs in export (default: false)
headers object Optional additionalProperties: false
headers.accept string Optional Requested format: text/csv (default), application/x-ndjson, text/markdown

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query collection items — cloudflare.get_itemquery

Run Query collection items with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
path.collection_id string Required Collection UUID
query object Optional additionalProperties: false
query.cursor string Optional Opaque pagination cursor from a previous response. Omit for the first page.
query.limit number Optional Items per page
query.q string Optional Case-insensitive substring search across all columns. Matches any column containing the term. No relevance ranking. minLength: 1; maxLength: 500

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create item(s) — cloudflare.post_itemcreate

Run Create item(s) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.collection_id string Required
body — Optional
body object Optional anyOf[1]
body.data object Required Single item data matching collection schema anyOf[1]; additionalProperties: true
body object Optional anyOf[2]
body.data array Required Array of items to create (max 1000) anyOf[2]; minItems: 1; maxItems: 1000
body.data[] object Optional anyOf[2]; additionalProperties: true

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete collection item — cloudflare.delete_itemdelete

Run Delete collection item with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.collection_id string Required
path.item_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example",
    "item_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get collection item — cloudflare.get_itemget

Run Get collection item with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.collection_id string Required
path.item_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example",
    "item_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update collection item — cloudflare.patch_itemupdate

Run Update collection item with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.collection_id string Required
path.item_id string Required
body object Optional
body.data object Required additionalProperties: true

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example",
    "item_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Search items (advanced filtering) — cloudflare.post_itemsearch

Run Search items (advanced filtering) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
path.collection_id string Required Collection UUID
body object Optional
body.cursor string Optional
body.filter object Optional Recursive filter supporting AND/OR nesting of conditions. Can be either a leaf condition (field/op/value) or a logical group (and/or array of nested filters).
body.filter object Optional Leaf filter condition oneOf[1]
body.filter.field string Required Column name to filter on oneOf[1]
body.filter.op string Required Comparison operator oneOf[1]; enum: ["eq","neq","gt","lt","gte","lte","contains","is_empty","is_not_empty"]
body.filter.value — Optional Value to compare against (not needed for is_empty/is_not_empty) oneOf[1]
body.filter.value string | null Optional oneOf[1]; oneOf[1]
body.filter.value number Optional oneOf[1]; oneOf[2]
body.filter.value boolean Optional oneOf[1]; oneOf[3]
body.filter.value array Optional oneOf[1]; oneOf[4]
body.filter.value[] — Optional oneOf[1]; oneOf[4]
body.filter.value[] string Optional oneOf[1]; oneOf[4]; oneOf[1]
body.filter.value[] number Optional oneOf[1]; oneOf[4]; oneOf[2]
body.filter.value[] boolean Optional oneOf[1]; oneOf[4]; oneOf[3]
body.filter.value[] object Optional oneOf[1]; oneOf[4]; oneOf[4]; additionalProperties: true
body.filter.value object Optional oneOf[1]; oneOf[5]; additionalProperties: true
body.filter object Optional oneOf[2]
body.filter.and array Required All conditions must match (AND logic). Each item can recursively contain more filters. oneOf[2]; minItems: 1
body.filter.and[] object Optional Nested filter (can be a leaf condition or another AND/OR group) oneOf[2]
body.filter object Optional oneOf[3]
body.filter.or array Required At least one condition must match (OR logic). Each item can recursively contain more filters. oneOf[3]; minItems: 1
body.filter.or[] object Optional Nested filter (can be a leaf condition or another AND/OR group) oneOf[3]
body.limit integer Optional default: 20; minimum: 1; maximum: 100
body.q string Optional Case-insensitive substring search across all columns. Matches any column containing the term. No relevance ranking. minLength: 1; maxLength: 500
body.sort object Optional
body.sort.field string Required Column name to sort by
body.sort.order string Optional enum: ["asc","desc"]; default: "asc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "collection_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List monitored domains — cloudflare.get_domainlist

Run List monitored domains with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
query object Optional additionalProperties: false
query.page integer Optional Page number default: 1; exclusiveMinimum: 0
query.per_page integer Optional Items per page default: 100; maximum: 100; exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create monitored domain — cloudflare.post_domaincreate

Run Create monitored domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
body object Optional
body.domain string Required Domain to monitor (e.g. my-company.com)

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete monitored domain — cloudflare.delete_domaindelete

Run Delete monitored domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
path.id integer Required Domain ID exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List credential matches — cloudflare.get_matchlist

Run List credential matches with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
query object Optional additionalProperties: false
query.domain string Optional Filter by domain (exact match)
query.username string Optional Filter by username (partial match)
query.page integer Optional Page number default: 1; exclusiveMinimum: 0
query.per_page integer Optional Items per page default: 100; maximum: 1000; exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Run a GraphQL aggregation over events (legacy) — cloudflare.post_eventgraphqlv2

Run Run a GraphQL aggregation over events (legacy) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List priority intelligence requirements for an account — cloudflare.get_pirlist

Run List priority intelligence requirements for an account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a priority intelligence requirement — cloudflare.post_pircreate

Run Create a priority intelligence requirement with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body object Optional
body.dataset_scope — Optional default: every event dataset the account can read: Cloudforce One intelligence, datasets shared with the account, and the account's own datasets, such as Threat Signals. datasets: explicit dataset IDs. Analytics datasets are not matched. An active PIR can cover at most 50 datasets. Access is rechecked whenever the PIR is matched.
body.dataset_scope object Optional oneOf[1]; additionalProperties: false
body.dataset_scope.type string Required oneOf[1]; enum: ["default"]
body.dataset_scope object Optional oneOf[2]; additionalProperties: false
body.dataset_scope.dataset_ids array Required oneOf[2]; minItems: 1; maxItems: 50
body.dataset_scope.dataset_ids[] string Optional oneOf[2]; format: "uuid"
body.dataset_scope.type string Required oneOf[2]; enum: ["datasets"]
body.digest_interval_hours integer Optional Hours between digests: 6, 12, or 24. Used only when notification_mode is digest. enum: [6,12,24]; default: 24
body.intent object Optional additionalProperties: false
body.intent.clauses array Required minItems: 1; maxItems: 8
body.intent.clauses[] object Optional additionalProperties: false
body.intent.clauses[].actors array Required maxItems: 20
body.intent.clauses[].actors[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].attacker_countries array Required maxItems: 20
body.intent.clauses[].attacker_countries[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].categories array Required maxItems: 20
body.intent.clauses[].categories[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].cves array Required maxItems: 20
body.intent.clauses[].cves[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].keywords array Required maxItems: 5
body.intent.clauses[].keywords[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].target_countries array Required maxItems: 20
body.intent.clauses[].target_countries[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].target_industries array Required maxItems: 20
body.intent.clauses[].target_industries[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].techniques array Required maxItems: 20
body.intent.clauses[].techniques[] string Optional minLength: 1; maxLength: 200
body.intent.indicators array Required maxItems: 20
body.intent.indicators[] string Optional minLength: 1; maxLength: 200
body.intent.unsupported_terms array Required maxItems: 20
body.intent.unsupported_terms[] string Optional minLength: 1; maxLength: 200
body.labels array Optional default: []; maxItems: 50
body.labels[] string Optional maxLength: 100
body.model string Optional minLength: 1; maxLength: 200
body.notification_mode string Optional none or digest. Notifications are opt-in. immediate is reserved and currently rejected. enum: ["none","immediate","digest"]; default: "none"
body.priority integer Optional default: 0; minimum: 0
body.query object Optional additionalProperties: false
body.query.branches array Required Event List searchBranches: filters within a branch are ANDed, branches are ORed. minItems: 1; maxItems: 8
body.query.branches[] array Optional minItems: 1; maxItems: 10
body.query.branches[][] — Optional
body.query.branches[][] object Optional anyOf[1]; additionalProperties: false
body.query.branches[][].field string Required anyOf[1]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
body.query.branches[][].op string Required anyOf[1]; enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","find"]
body.query.branches[][].value string Required anyOf[1]; minLength: 1; maxLength: 512
body.query.branches[][] object Optional anyOf[2]; additionalProperties: false
body.query.branches[][].field string Required anyOf[2]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
body.query.branches[][].op string Required anyOf[2]; enum: ["in"]
body.query.branches[][].value array Required anyOf[2]; minItems: 1; maxItems: 100
body.query.branches[][].value[] string Optional anyOf[2]; minLength: 1; maxLength: 512
body.query.branches[][] object Optional anyOf[3]; additionalProperties: false
body.query.branches[][].field string Required anyOf[3]; enum: ["killChain"]
body.query.branches[][].op string Required anyOf[3]; enum: ["equals","not","gt","gte","lt","lte"]
body.query.branches[][].value — Required anyOf[3]
body.query.branches[][].value number Required anyOf[3]; anyOf[1]
body.query.branches[][].value string Required anyOf[3]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
body.query.branches[][] object Optional anyOf[4]; additionalProperties: false
body.query.branches[][].field string Required anyOf[4]; enum: ["killChain"]
body.query.branches[][].op string Required anyOf[4]; enum: ["in"]
body.query.branches[][].value array Required anyOf[4]; minItems: 1; maxItems: 100
body.query.branches[][].value[] — Optional anyOf[4]
body.query.branches[][].value[] number Optional anyOf[4]; anyOf[1]
body.query.branches[][].value[] string Optional anyOf[4]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
body.query.branches[][] object Optional anyOf[5]; additionalProperties: false
body.query.branches[][].field string Required anyOf[5]; enum: ["hasChildren"]
body.query.branches[][].op string Required anyOf[5]; enum: ["equals","not","gt","gte","lt","lte"]
body.query.branches[][].value — Required anyOf[5]
body.query.branches[][].value boolean Required anyOf[5]; anyOf[1]
body.query.branches[][].value string Required anyOf[5]; anyOf[2]; enum: ["true"]
body.query.branches[][].value string Required anyOf[5]; anyOf[3]; enum: ["false"]
body.query.branches[][].value number Required anyOf[5]; anyOf[4]; enum: [1]
body.query.branches[][].value number Required anyOf[5]; anyOf[5]; enum: [0]
body.query.branches[][].value string Required anyOf[5]; anyOf[6]; enum: ["1"]
body.query.branches[][].value string Required anyOf[5]; anyOf[7]; enum: ["0"]
body.query.branches[][] object Optional anyOf[6]; additionalProperties: false
body.query.branches[][].field string Required anyOf[6]; enum: ["hasChildren"]
body.query.branches[][].op string Required anyOf[6]; enum: ["in"]
body.query.branches[][].value array Required anyOf[6]; minItems: 1; maxItems: 100
body.query.branches[][].value[] — Optional anyOf[6]
body.query.branches[][].value[] boolean Optional anyOf[6]; anyOf[1]
body.query.branches[][].value[] string Optional anyOf[6]; anyOf[2]; enum: ["true"]
body.query.branches[][].value[] string Optional anyOf[6]; anyOf[3]; enum: ["false"]
body.query.branches[][].value[] number Optional anyOf[6]; anyOf[4]; enum: [1]
body.query.branches[][].value[] number Optional anyOf[6]; anyOf[5]; enum: [0]
body.query.branches[][].value[] string Optional anyOf[6]; anyOf[6]; enum: ["1"]
body.query.branches[][].value[] string Optional anyOf[6]; anyOf[7]; enum: ["0"]
body.query.version integer Optional Ignored. Accepted so a PIR read from the API can be sent back unchanged.
body.query_source string Optional enum: ["generated","edited"]
body.requirement string Required minLength: 1; maxLength: 4000
body.status string Optional draft: not monitored. active: monitored, unless pause_reason is set. Setting active on a PIR with a pause_reason resumes it. Moving a PIR back to draft and activating it again starts matching afresh with a 30-day backfill. enum: ["draft","active"]; default: "draft"
body.title string Optional minLength: 1; maxLength: 200
body.tlp string Optional default: "amber"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get PIR constants (methods, dimensions, and TLP values) — cloudflare.get_pirconstants

Run Get PIR constants (methods, dimensions, and TLP values) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Generate event filters from a PIR — cloudflare.post_pirfiltergenerate

Run Generate event filters from a PIR with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body object Optional additionalProperties: false
body.requirement string Required Natural-language Priority Intelligence Requirement. minLength: 1; maxLength: 4000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List account interests for PIR Option 2 — cloudflare.get_pirinterestlist

Run List account interests for PIR Option 2 with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID minLength: 1
query object Optional additionalProperties: false
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 20; minimum: 1; maximum: 100
query.enabled string Optional enum: ["true","false"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an account interest for PIR Option 2 — cloudflare.post_pirinterestcreate

Run Create an account interest for PIR Option 2 with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID minLength: 1
body object Optional
body.dimension string Required enum: ["actor","targetIndustry","category","country","attackerCountry","targetCountry","mitreAttack","killChain","mitreCapec"]
body.enabled boolean Optional default: true
body.value string Required minLength: 1; maxLength: 255

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Backtest account-interest change detection — cloudflare.post_pirinterestbacktestcreate

Run Backtest account-interest change detection with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID minLength: 1
body object Optional
body.as_of string Optional format: "date-time"
body.backtest_days integer Optional default: 30; minimum: 1; maximum: 90
body.candidate_limit integer Optional minimum: 1; maximum: 100
body.dataset_ids array Optional minItems: 1; maxItems: 50
body.dataset_ids[] string Optional minLength: 1
body.emerging_min_current_count integer Optional minimum: 1; maximum: 100000
body.established_min_absolute_delta integer Optional minimum: 1; maximum: 100000
body.established_min_prior_count integer Optional minimum: 1; maximum: 100000
body.established_min_relative_delta number | null Optional minimum: 0; maximum: 100
body.window_days integer Optional default: 7; minimum: 1; maximum: 30

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a persisted account-interest backtest — cloudflare.get_pirinterestbacktestget

Run Get a persisted account-interest backtest with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID minLength: 1
path.backtest_id string Required Backtest UUID format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "backtest_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Evaluate recent event-dated changes for account interests — cloudflare.post_pirinterestevaluationcreate

Run Evaluate recent event-dated changes for account interests with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID minLength: 1
body object Optional
body.as_of string Optional format: "date-time"
body.candidate_limit integer Optional minimum: 1; maximum: 100
body.dataset_ids array Optional minItems: 1; maxItems: 50
body.dataset_ids[] string Optional minLength: 1
body.emerging_min_current_count integer Optional minimum: 1; maximum: 100000
body.established_min_absolute_delta integer Optional minimum: 1; maximum: 100000
body.established_min_prior_count integer Optional minimum: 1; maximum: 100000
body.established_min_relative_delta number | null Optional minimum: 0; maximum: 100
body.window_days integer Optional default: 7; minimum: 1; maximum: 30

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a persisted account-interest evaluation — cloudflare.get_pirinterestevaluationget

Run Get a persisted account-interest evaluation with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID minLength: 1
path.evaluation_id string Required Evaluation UUID format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "evaluation_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an account interest for PIR Option 2 — cloudflare.delete_pirinterestdelete

Run Delete an account interest for PIR Option 2 with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID minLength: 1
path.interest_id string Required Interest UUID format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "interest_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an account interest for PIR Option 2 — cloudflare.patch_pirinterestupdate

Run Update an account interest for PIR Option 2 with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID minLength: 1
path.interest_id string Required Interest UUID format: "uuid"
body object Optional
body.enabled boolean Optional
body.value string Optional minLength: 1; maxLength: 255

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "interest_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Count matched events across the account's priority intelligence requirements — cloudflare.get_pirallmatchaggregates

Run Count matched events across the account's priority intelligence requirements with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
query object Required additionalProperties: false
query.aggregate_by string Required Comma-separated fields to count: tags, attacker, attacker_country, target_industry, indicator, indicator_type. indicator is each event's primary indicator, the first one it was created with. minLength: 1; maxLength: 200
query.limit integer Optional Top values returned per field. default: 10; minimum: 1; maximum: 100
query.since string Optional Only matches first matched at or after this ISO 8601 time. format: "date-time"
query.triage_state string Optional Only matches in this triage state. enum: ["new","relevant","not_relevant"]
query.include_backfill string Optional Include matches from the 30 days before activation. Defaults to true. enum: ["true","false"]; default: "true"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "aggregate_by": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete the organization profile — cloudflare.delete_pirprofiledelete

Run Delete the organization profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the organization profile — cloudflare.get_pirprofileget

Run Get the organization profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create or replace the organization profile — cloudflare.put_pirprofileput

Run Create or replace the organization profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
body object Optional additionalProperties: false
body.profile string Required Who the organization is: its name, brands, domains, sector, regions, key systems and suppliers. Shared by all of the account's PIRs to judge how relevant intelligence is to the organization. minLength: 1; maxLength: 4000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get PIR quota for an account — cloudflare.post_pirquota

Run Get PIR quota for an account with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a priority intelligence requirement — cloudflare.delete_pirdelete

Run Delete a priority intelligence requirement with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.priority_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "priority_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a priority intelligence requirement by ID — cloudflare.get_pirget

Run Get a priority intelligence requirement by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.priority_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "priority_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a priority intelligence requirement — cloudflare.put_pirupdate

Run Update a priority intelligence requirement with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.priority_id string Required format: "uuid"
body object Optional
body.confirm_query boolean Optional Write-only. true confirms the query still fits the requirement, clearing query_stale without changing the query or its version. Requires a query.
body.dataset_scope — Optional default: every event dataset the account can read: Cloudforce One intelligence, datasets shared with the account, and the account's own datasets, such as Threat Signals. datasets: explicit dataset IDs. Analytics datasets are not matched. An active PIR can cover at most 50 datasets. Access is rechecked whenever the PIR is matched.
body.dataset_scope object Optional oneOf[1]; additionalProperties: false
body.dataset_scope.type string Required oneOf[1]; enum: ["default"]
body.dataset_scope object Optional oneOf[2]; additionalProperties: false
body.dataset_scope.dataset_ids array Required oneOf[2]; minItems: 1; maxItems: 50
body.dataset_scope.dataset_ids[] string Optional oneOf[2]; format: "uuid"
body.dataset_scope.type string Required oneOf[2]; enum: ["datasets"]
body.digest_interval_hours integer Optional Hours between digests: 6, 12, or 24. Used only when notification_mode is digest. enum: [6,12,24]
body.intent object | null Optional additionalProperties: false
body.intent.clauses array Required minItems: 1; maxItems: 8
body.intent.clauses[] object Optional additionalProperties: false
body.intent.clauses[].actors array Required maxItems: 20
body.intent.clauses[].actors[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].attacker_countries array Required maxItems: 20
body.intent.clauses[].attacker_countries[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].categories array Required maxItems: 20
body.intent.clauses[].categories[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].cves array Required maxItems: 20
body.intent.clauses[].cves[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].keywords array Required maxItems: 5
body.intent.clauses[].keywords[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].target_countries array Required maxItems: 20
body.intent.clauses[].target_countries[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].target_industries array Required maxItems: 20
body.intent.clauses[].target_industries[] string Optional minLength: 1; maxLength: 200
body.intent.clauses[].techniques array Required maxItems: 20
body.intent.clauses[].techniques[] string Optional minLength: 1; maxLength: 200
body.intent.indicators array Required maxItems: 20
body.intent.indicators[] string Optional minLength: 1; maxLength: 200
body.intent.unsupported_terms array Required maxItems: 20
body.intent.unsupported_terms[] string Optional minLength: 1; maxLength: 200
body.labels array Optional maxItems: 50
body.labels[] string Optional maxLength: 100
body.model string | null Optional minLength: 1; maxLength: 200
body.notification_mode string Optional none or digest. Notifications are opt-in. immediate is reserved and currently rejected. enum: ["none","immediate","digest"]
body.priority integer Optional minimum: 0
body.query object | null Optional additionalProperties: false
body.query.branches array Required Event List searchBranches: filters within a branch are ANDed, branches are ORed. minItems: 1; maxItems: 8
body.query.branches[] array Optional minItems: 1; maxItems: 10
body.query.branches[][] — Optional
body.query.branches[][] object Optional anyOf[1]; additionalProperties: false
body.query.branches[][].field string Required anyOf[1]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
body.query.branches[][].op string Required anyOf[1]; enum: ["equals","not","gt","gte","lt","lte","like","contains","startsWith","endsWith","find"]
body.query.branches[][].value string Required anyOf[1]; minLength: 1; maxLength: 512
body.query.branches[][] object Optional anyOf[2]; additionalProperties: false
body.query.branches[][].field string Required anyOf[2]; enum: ["attacker","attackerCountry","category","createdAt","date","event","indicator","indicatorType","mitreAttack","mitreCapec","tags","targetCountry","targetIndustry","tlp","uuid"]
body.query.branches[][].op string Required anyOf[2]; enum: ["in"]
body.query.branches[][].value array Required anyOf[2]; minItems: 1; maxItems: 100
body.query.branches[][].value[] string Optional anyOf[2]; minLength: 1; maxLength: 512
body.query.branches[][] object Optional anyOf[3]; additionalProperties: false
body.query.branches[][].field string Required anyOf[3]; enum: ["killChain"]
body.query.branches[][].op string Required anyOf[3]; enum: ["equals","not","gt","gte","lt","lte"]
body.query.branches[][].value — Required anyOf[3]
body.query.branches[][].value number Required anyOf[3]; anyOf[1]
body.query.branches[][].value string Required anyOf[3]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
body.query.branches[][] object Optional anyOf[4]; additionalProperties: false
body.query.branches[][].field string Required anyOf[4]; enum: ["killChain"]
body.query.branches[][].op string Required anyOf[4]; enum: ["in"]
body.query.branches[][].value array Required anyOf[4]; minItems: 1; maxItems: 100
body.query.branches[][].value[] — Optional anyOf[4]
body.query.branches[][].value[] number Optional anyOf[4]; anyOf[1]
body.query.branches[][].value[] string Optional anyOf[4]; anyOf[2]; pattern: "^-?(?:\\d+\\.?\\d*|\\.\\d+)$"
body.query.branches[][] object Optional anyOf[5]; additionalProperties: false
body.query.branches[][].field string Required anyOf[5]; enum: ["hasChildren"]
body.query.branches[][].op string Required anyOf[5]; enum: ["equals","not","gt","gte","lt","lte"]
body.query.branches[][].value — Required anyOf[5]
body.query.branches[][].value boolean Required anyOf[5]; anyOf[1]
body.query.branches[][].value string Required anyOf[5]; anyOf[2]; enum: ["true"]
body.query.branches[][].value string Required anyOf[5]; anyOf[3]; enum: ["false"]
body.query.branches[][].value number Required anyOf[5]; anyOf[4]; enum: [1]
body.query.branches[][].value number Required anyOf[5]; anyOf[5]; enum: [0]
body.query.branches[][].value string Required anyOf[5]; anyOf[6]; enum: ["1"]
body.query.branches[][].value string Required anyOf[5]; anyOf[7]; enum: ["0"]
body.query.branches[][] object Optional anyOf[6]; additionalProperties: false
body.query.branches[][].field string Required anyOf[6]; enum: ["hasChildren"]
body.query.branches[][].op string Required anyOf[6]; enum: ["in"]
body.query.branches[][].value array Required anyOf[6]; minItems: 1; maxItems: 100
body.query.branches[][].value[] — Optional anyOf[6]
body.query.branches[][].value[] boolean Optional anyOf[6]; anyOf[1]
body.query.branches[][].value[] string Optional anyOf[6]; anyOf[2]; enum: ["true"]
body.query.branches[][].value[] string Optional anyOf[6]; anyOf[3]; enum: ["false"]
body.query.branches[][].value[] number Optional anyOf[6]; anyOf[4]; enum: [1]
body.query.branches[][].value[] number Optional anyOf[6]; anyOf[5]; enum: [0]
body.query.branches[][].value[] string Optional anyOf[6]; anyOf[6]; enum: ["1"]
body.query.branches[][].value[] string Optional anyOf[6]; anyOf[7]; enum: ["0"]
body.query.version integer Optional Ignored. Accepted so a PIR read from the API can be sent back unchanged.
body.query_source string | null Optional enum: ["generated","edited"]
body.requirement string Optional minLength: 1; maxLength: 4000
body.status string Optional draft: not monitored. active: monitored, unless pause_reason is set. Setting active on a PIR with a pause_reason resumes it. Moving a PIR back to draft and activating it again starts matching afresh with a 30-day backfill. enum: ["draft","active"]
body.title string | null Optional minLength: 1; maxLength: 200
body.tlp string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "priority_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List a priority intelligence requirement's matched events — cloudflare.get_pirmatcheslist

Run List a priority intelligence requirement's matched events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.priority_id string Required format: "uuid"
query object Optional additionalProperties: false
query.cursor string Optional result_info.cursor from the previous page. Omit for the newest matches. maxLength: 512
query.per_page integer Optional Matches per page. default: 50; minimum: 1; maximum: 100
query.triage_state string Optional Only matches in this triage state. enum: ["new","relevant","not_relevant"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "priority_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Triage a priority intelligence requirement's matched events — cloudflare.patch_pirmatchestriage

Run Triage a priority intelligence requirement's matched events with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.priority_id string Required format: "uuid"
body object Optional additionalProperties: false
body.matches array Required Up to 100 matches to set the triage state on. minItems: 1; maxItems: 100
body.matches[] object Optional additionalProperties: false
body.matches[].dataset_id string Required The match's datasetId. format: "uuid"
body.matches[].event_id string Required The match's event uuid. format: "uuid"
body.triage_state string Required enum: ["new","relevant","not_relevant"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "priority_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Count a priority intelligence requirement's matched events — cloudflare.get_pirmatchaggregates

Run Count a priority intelligence requirement's matched events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.priority_id string Required format: "uuid"
query object Required additionalProperties: false
query.aggregate_by string Required Comma-separated fields to count: tags, attacker, attacker_country, target_industry, indicator, indicator_type. indicator is each event's primary indicator, the first one it was created with. minLength: 1; maxLength: 200
query.limit integer Optional Top values returned per field. default: 10; minimum: 1; maximum: 100
query.since string Optional Only matches first matched at or after this ISO 8601 time. format: "date-time"
query.triage_state string Optional Only matches in this triage state. enum: ["new","relevant","not_relevant"]
query.include_backfill string Optional Include matches from the 30 days before activation. Defaults to true. enum: ["true","false"]; default: "true"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "priority_id": "00000000-0000-4000-8000-000000000000"
  },
  "query": {
    "aggregate_by": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Count a priority intelligence requirement's matched events per day — cloudflare.get_pirmatchseries

Run Count a priority intelligence requirement's matched events per day with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required minLength: 1
path.priority_id string Required format: "uuid"
query object Optional additionalProperties: false
query.since string Optional Start of the range, inclusive, on when each matched event was added to its dataset. ISO 8601; defaults to 30 days before until. format: "date-time"
query.until string Optional End of the range, exclusive. ISO 8601; defaults to now. The range is at most 90 days. format: "date-time"
query.triage_state string Optional Only matches in this triage state. enum: ["new","relevant","not_relevant"]
query.include_backfill string Optional Include matches from the 30 days before activation. Defaults to true. enum: ["true","false"]; default: "true"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "priority_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check if current user is allowlisted for Legal Response — cloudflare.get_legalresponseaccesscheck

Run Check if current user is allowlisted for Legal Response with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID (used for JWT validation only)

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List RFIs — cloudflare.get_requestlist

Run List RFIs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.project_type string Required RFI project type enum: ["threat-intelligence","incident-response","ir-emergency-response","table-top","pentest","irp","threat-hunting","cybersecurity-assessment","react-general","legal-response","soc-alerts","demo"]
query object Optional additionalProperties: false
query.page number Optional
query.pageSize number Optional
query.status string Optional Status filter. Projects with a narrowed dashboard vocabulary accept only their customer-facing values.
query.search string Optional
query.createdBy string Optional Filter by creator email. NOTE: For the legal-response project type this query parameter is rejected with HTTP 400 — the server derives the filter from the authenticated user's JWT automatically and does not accept a client-supplied value. Requests to legal-response with no valid JWT identity are rejected with HTTP 401.
query.assignee string Optional
query.requestType string Optional
query.priority string Optional
query.tlp string Optional
query.id string Optional
query.readableId string Optional
query.summary string Optional
query.accountId string Optional
query.metadata string Optional JSON string object of metadata filters. Supports two formats: 1) Simple values for exact match (backward compatible): {"status": "open"} 2) Operator objects for advanced filtering: {"identifiers": {"operator": "contains_line", "value": "blah.com"}}. Available operators: 'eq' (exact match, default), 'contains' (substring match), 'contains_line' (match complete line in newline-separated text). Date fields are automatically normalized to YYYY-MM-DD format.
query.orderBy string Optional Sort field. SOC Communications support customer-safe latest_activity ordering.
query.order string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "threat-intelligence"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Creates a new RFI — cloudflare.post_requestcreate

Run Creates a new RFI with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.project_type string Required RFI project type enum: ["threat-intelligence","incident-response","ir-emergency-response","table-top","pentest","irp","threat-hunting","cybersecurity-assessment","react-general","legal-response","soc-alerts","demo"]
body object Optional
body.description string Optional RFI description (optional). Defaults to an empty string when omitted.
body.eventId string | null Optional Optional related event ID
body.metadata object Optional Optional metadata fields specific to the RFI type additionalProperties: true
body.priority string Optional RFI priority. Four-level projects use low, routine, high, urgent; existing projects retain legacy low->routine compatibility. medium, critical, and unknown remain accepted legacy aliases. Defaults to routine. enum: ["low","routine","high","urgent","unknown","medium","critical"]
body.request_type string | null Optional Optional request type for the request
body.subtypeId string | null Optional Optional subtype ID
body.title string Optional RFI title (optional). When omitted, the server generates a summary from the request type and readable ID.
body.tlp string Optional Traffic Light Protocol level. Canonical values are clear, green, amber, amber-strict, red, purple. white and amber+strict are accepted input aliases; responses always use the canonical spelling. enum: ["clear","green","amber","amber-strict","red","purple","white","amber+strict"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "threat-intelligence"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get request constants — cloudflare.get_requestconstants

Run Get request constants with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
path.project_type string Required Project type enum: ["threat-intelligence","incident-response","ir-emergency-response","table-top","pentest","irp","threat-hunting","cybersecurity-assessment","react-general","legal-response","soc-alerts","demo"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "threat-intelligence"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List metadata fields for an RFI type — cloudflare.get_dashboardmetadatafieldlist

Run List metadata fields for an RFI type with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
path.project_type string Required Project type enum: ["threat-intelligence","incident-response","ir-emergency-response","table-top","pentest","irp","threat-hunting","cybersecurity-assessment","react-general","legal-response","soc-alerts","demo"]
query object Optional additionalProperties: false
query.request_type string Optional Filter fields to those applicable to this request type. Fields without request type restrictions are always included.
query.country string Optional Exclude fields restricted for this alpha-2 country code minLength: 2; maxLength: 2; pattern: "^[A-Z]{2}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "threat-intelligence"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get request token quota — cloudflare.get_requestquota

Run Get request token quota with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.project_type string Required RFI project type enum: ["threat-intelligence","incident-response","ir-emergency-response","table-top","pentest","irp","threat-hunting","cybersecurity-assessment","react-general","legal-response","soc-alerts","demo"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "threat-intelligence"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List visible request types for a project (dashboard) — cloudflare.get_dashboardrequesttypeslist

Run List visible request types for a project (dashboard) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.project_type string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get current user profile — cloudflare.get_usergetself

Run Get current user profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID
path.project_type string Required RFI project type

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an RFI by ID — cloudflare.get_requestread

Run Get an RFI by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.project_type string Required RFI project type. Valid values: threat-intelligence, incident-response, ir-emergency-response, table-top, pentest, irp, threat-hunting, cybersecurity-assessment, react-general, legal-response, soc-alerts, demo enum: ["threat-intelligence","incident-response","ir-emergency-response","table-top","pentest","irp","threat-hunting","cybersecurity-assessment","react-general","legal-response","soc-alerts","demo"]
path.request_id string Required RFI UUID

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "threat-intelligence",
    "request_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an RFI — cloudflare.put_requestupdate

Run Update an RFI with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.project_type string Required RFI project type. Valid values: threat-intelligence, incident-response, ir-emergency-response, table-top, pentest, irp, threat-hunting, cybersecurity-assessment, react-general, legal-response, soc-alerts, demo enum: ["threat-intelligence","incident-response","ir-emergency-response","table-top","pentest","irp","threat-hunting","cybersecurity-assessment","react-general","legal-response","soc-alerts","demo"]
path.request_id string Required RFI UUID
body object Optional
body.description string Optional RFI description
body.eventId string Optional Optional related event ID
body.priority string Optional RFI priority. Four-level projects use a distinct low level; existing projects retain legacy low->routine compatibility. medium, critical, and unknown remain accepted legacy aliases. enum: ["low","routine","high","urgent","unknown","medium","critical"]
body.request_type string Optional Request type. May only be changed while the request is still open; changing it recalculates the request's token cost.
body.subtypeId string Optional Optional subtype ID
body.summary string Optional RFI summary
body.title string Optional RFI title (alias for summary field)
body.tlp string Optional Traffic Light Protocol level. white and amber+strict are accepted input aliases; responses always use the canonical spelling. enum: ["clear","green","amber","amber-strict","red","purple","white","amber+strict"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "threat-intelligence",
    "request_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List assets in request (Customer) — cloudflare.get_dashboardassetlist

Run List assets in request (Customer) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.project_type string Required RFI project type. Valid values: threat-intelligence, incident-response, ir-emergency-response, table-top, pentest, irp, threat-hunting, cybersecurity-assessment, react-general, legal-response, soc-alerts, demo enum: ["threat-intelligence","incident-response","ir-emergency-response","table-top","pentest","irp","threat-hunting","cybersecurity-assessment","react-general","legal-response","soc-alerts","demo"]
path.request_id string Required RFI UUID

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "threat-intelligence",
    "request_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List messages for an RFI request — cloudflare.get_messagelist

Run List messages for an RFI request with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.project_type string Required
path.request_id string Required
query object Optional additionalProperties: false
query.page string Optional default: "1"
query.per_page string Optional default: "10"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "example",
    "request_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a customer follow-on message on an RFI request — cloudflare.post_messagecreate

Run Create a customer follow-on message on an RFI request with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.project_type string Required
path.request_id string Required
headers object Optional additionalProperties: false
headers.Idempotency-Key string | null Optional Client command key. Required when publishing a message for a workflow-enabled project; trimmed and limited to 255 characters.
body object Optional
body.attachment_asset_ids array Optional
body.attachment_asset_ids[] string Optional
body.author_id string Optional
body.author_name string Optional
body.content string Required minLength: 1
body.publish boolean Optional default: false
body.tlp string Optional enum: ["clear","green","amber","amber-strict","red","white"]; default: "red"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "example",
    "request_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Read a single message for an RFI request — cloudflare.get_messageread

Run Read a single message for an RFI request with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.project_type string Required
path.request_id string Required
path.message_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "example",
    "request_id": "example",
    "message_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update/publish a message for an RFI request — cloudflare.put_messageupdate

Run Update/publish a message for an RFI request with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.project_type string Required
path.request_id string Required
path.message_id string Required
headers object Optional additionalProperties: false
headers.Idempotency-Key string | null Optional Client command key. Required when publishing a message for a workflow-enabled project; trimmed and limited to 255 characters.
body object Optional
body.attachment_asset_ids array Optional
body.attachment_asset_ids[] string Optional
body.content string Required minLength: 1
body.publish boolean Required
body.tlp string Required enum: ["clear","green","amber","amber-strict","red","white"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "project_type": "example",
    "request_id": "example",
    "message_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Search threat intelligence — cloudflare.searchthreatintelligence

Run Search threat intelligence with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID. minLength: 1
body object Optional
body.entity_types array Optional Entity types to search. Omit to search articles, actors, tags, events, and indicators. default: ["article","actor","tag","event","indicator"]; minItems: 1; maxItems: 5
body.entity_types[] string Optional enum: ["article","actor","tag","event","indicator"]
body.include_analytics_datasets boolean Optional Whether to include Event and Indicator matches from analytics datasets. Defaults to false because these datasets can take longer to search. When omitted or false, those matches are intentionally excluded and source completeness covers only the backends that were queried. default: false
body.limit integer Optional Maximum number of results to return. Defaults to 20. default: 20; minimum: 1; maximum: 20
body.query string Required Search text, from 1 to 1000 characters after trimming. minLength: 1; maxLength: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Threat Signals articles — cloudflare.rssarticlelist

Run List Threat Signals articles with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.cursor string Optional Opaque cursor from a previous response's next_cursor. When provided, pagination, ordering, totals, and article filters come from the cursor. Sending per_page, sort, include_total, or any article filter alongside it returns a 400 CursorFilterConflictError. minLength: 1
query.per_page integer Optional Number of articles per cursor page, from 1 to 100. Defaults to 20. default: 20; minimum: 1; maximum: 100
query.feed_id string Optional Feed UUID filter. Omit to include articles from every account feed. format: "uuid"
query.article_id array Optional Repeatable article UUID filter. Returns the union of matching account-owned articles; use this to list every Threat Signals article referenced by an indicator's sources. minItems: 1; maxItems: 90
query.article_id[] string Optional format: "uuid"
query.read boolean Optional Filter by read state. Accepts true, false, 1, or 0; omit to include read and unread articles.
query.tag_id array Optional Repeatable tag UUID filter. An article matches any selected tag.
query.tag_id[] string Optional format: "uuid"
query.tag_category_id array Optional Repeatable tag-category UUID filter. An article matches any selected category; when tag_id is also present, the tag and category groups are ANDed. minItems: 1; maxItems: 90
query.tag_category_id[] string Optional format: "uuid"
query.tag string Optional Legacy human-readable tag-value filter. Ignored when tag_id is supplied; prefer tag_id.
query.tag_category string Optional Legacy category-name disambiguator for tag. It has no effect without tag; prefer tag_category_id.
query.include_total boolean Optional When true on the first page, count matching articles and return an exact total. Defaults to false; cursor pages do not recalculate totals. default: false
query.search string Optional NFC-normalized, trimmed literal substring filter on article titles; ASCII case-insensitive, from 1 to 500 characters. minLength: 1; maxLength: 500
query.published_after string Optional Include articles published at or after this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC. format: "date-time"
query.published_before string Optional Include articles published at or before this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC. format: "date-time"
query.fetched_after string Optional Include articles fetched at or after this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC. format: "date-time"
query.fetched_before string Optional Include articles fetched at or before this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC. format: "date-time"
query.feed_category string Optional Exact feed-category filter after trimming. Omit to include every category.
query.source_type string Optional Filter by curated or custom feed source. Omit to include both source types. enum: ["curated","custom"]
query.tag_applied_by string Optional Assignment provenance filter. When combined with tag_id or tag_category_id, the matching assignment must have this provenance. enum: ["ai","analyst","system"]
query.pir_id string Optional Beta. Active Priority Intelligence Requirement to report, filter, and sort relevance by. Omit to use each article's most relevant active PIR. Returns a 400 error unless the PIR is active. format: "uuid"
query.min_relevance string Optional Beta. Return only articles at or above this relevance band for pir_id, or for any active PIR when pir_id is omitted. Excludes articles that have not been scored. enum: ["low","medium","high"]
query.severity array Optional Beta. Repeatable intrinsic severity band filter. An article matches any selected band, the band reported as its severity. Excludes articles without a severity. Like the severity field, severity is reported only while the account has an active Priority Intelligence Requirement; otherwise no articles match. minItems: 1; maxItems: 5
query.severity[] string Optional enum: ["informational","low","medium","high","critical"]
query.sort string Optional Sort by fetched_at, published_at, title, or relevance (beta). Prefix the field with - for descending order; defaults to -fetched_at. -relevance lists the most relevant articles first, by pir_id or by each article's most relevant active PIR, with unscored articles last. default: "-fetched_at"; pattern: "^-?(fetched_at|published_at|title|relevance)$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Bulk update Threat Signals article read status — cloudflare.rssarticlebulkmarkread

Run Bulk update Threat Signals article read status with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Optional
body.article_ids array Required Array of article UUIDs to mark (1-50). minItems: 1; maxItems: 50
body.article_ids[] string Optional format: "uuid"
body.read boolean Required True to mark read, false to mark unread.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Count Threat Signals articles by relevance band — cloudflare.rssarticlerelevanceaggregate

Run Count Threat Signals articles by relevance band with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.published_after string Optional Include articles published at or after this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC. format: "date-time"
query.published_before string Optional Include articles published at or before this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC. format: "date-time"
query.read boolean Optional Filter by read state. Accepts true, false, 1, or 0; omit to include read and unread articles.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Count Threat Signals articles by severity band — cloudflare.rssarticleseverityaggregate

Run Count Threat Signals articles by severity band with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.published_after string Optional Include articles published at or after this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC. format: "date-time"
query.published_before string Optional Include articles published at or before this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC. format: "date-time"
query.read boolean Optional Filter by read state. Accepts true, false, 1, or 0; omit to include read and unread articles.
query.pir_id string Optional Beta. Active Priority Intelligence Requirement to count for. articles then counts only articles scored against it, min_relevance applies to its score, and priorities lists only it. Returns a 400 error unless the PIR is active. format: "uuid"
query.min_relevance string Optional Beta. Count only articles at or above this relevance band: in articles, for any active Priority Intelligence Requirement, as the article list's min_relevance does without pir_id; in each priority, for that PIR. Excludes articles that have not been scored against an active PIR. enum: ["low","medium","high"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Threat Signals article — cloudflare.rssarticleget

Run Get Threat Signals article with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.article_id string Required Threat Signals article UUID format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "article_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Threat Signals article read status — cloudflare.rssarticlemarkread

Run Update Threat Signals article read status with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.article_id string Required Threat Signals article UUID format: "uuid"
body object Optional
body.read boolean Required True to mark the article read, false to mark unread.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "article_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Threat Signals article content — cloudflare.rssarticlecontentget

Run Get Threat Signals article content with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.article_id string Required Threat Signals article UUID format: "uuid"
query object Optional additionalProperties: false
query.format string Optional Response Content-Type: text (the default) for text/plain or html for text/html. Neither value converts the content. html is deprecated; use text. enum: ["text","html"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "article_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Reprocess a Threat Signals article — cloudflare.rssarticlereprocess

Run Reprocess a Threat Signals article with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.article_id string Required Threat Signals article UUID format: "uuid"
body object Optional additionalProperties: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "article_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Threat Signals article custom skills — cloudflare.rssarticlecustomskillslist

Run List Threat Signals article custom skills with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.article_id string Required Threat Signals article UUID format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "article_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Threat Signals article skill output — cloudflare.rssarticleskilloutputget

Run Get Threat Signals article skill output with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.article_id string Required Threat Signals article UUID format: "uuid"
path.skill_id string Required Custom Skill UUID or a Managed Default Skill ID (IOC-context: default-ioc-context-skill)

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "article_id": "00000000-0000-4000-8000-000000000000",
    "skill_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Run and persist skill output for a Threat Signals article — cloudflare.rssarticleskillrun

Run Run and persist skill output for a Threat Signals article with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.article_id string Required Threat Signals article UUID format: "uuid"
path.skill_id — Required UUID of an active Custom Skill that is assigned to the article's feed, or a managed default skill ID. Requires a paid Threat Signals subscription and the Cloudforce One Write permission. Always persists output; rerunning overwrites the previous result. No diagnostic or server-preview inputs.
path.skill_id string Required anyOf[1]; enum: ["default-tagging-skill","default-ioc-context-skill","default-summary-skill"]
path.skill_id string Required anyOf[2]; format: "uuid"
body object Optional additionalProperties: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "article_id": "00000000-0000-4000-8000-000000000000",
    "skill_id": "default-tagging-skill"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Generate Threat Signals article AI tags — cloudflare.rssarticletaggenerate

Run Generate Threat Signals article AI tags with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.article_id string Required Threat Signals article UUID format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "article_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add tag to Threat Signals article — cloudflare.rssarticletagadd

Run Add tag to Threat Signals article with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.article_id string Required Threat Signals article UUID format: "uuid"
body object Optional
body.tag_id string Required UUID of a tag from the account's catalog to apply to the article. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "article_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove tag from Threat Signals article — cloudflare.rssarticletagremove

Run Remove tag from Threat Signals article with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.article_id string Required Threat Signals article UUID format: "uuid"
path.tag_id string Required UUID of a tag from the account's catalog format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "article_id": "00000000-0000-4000-8000-000000000000",
    "tag_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Threat Signals feed categories — cloudflare.rssfeedcategorylist

Run List Threat Signals feed categories with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Threat Signals feeds — cloudflare.rssfeedlist

Run List Threat Signals feeds with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional 1-based page number. Minimum 1; defaults to 1. default: 1; minimum: 1
query.per_page integer Optional Number of feeds per page, from 1 to 100. Defaults to 20. default: 20; minimum: 1; maximum: 100
query.limit integer Optional Optional 1–100 alias for per_page. When provided, limit takes precedence. minimum: 1; maximum: 100
query.sort string Optional Sort by created_at, title, category, or url. Prefix the field with - for descending order; defaults to -created_at. default: "-created_at"; pattern: "^-?(created_at|title|category|url)$"
query.category string Optional Exact feed-category filter, up to 100 characters. Omit to include all categories. maxLength: 100
query.source_type string Optional Filter by curated or custom feed source. Omit to include both source types. enum: ["curated","custom"]
query.enabled boolean Optional Filter by enabled state. Accepts true, false, 1, or 0; omit to include enabled and disabled feeds.
query.status string Optional Exact stored polling-status filter, such as active or error. Omit to include every status.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Threat Signals feed — cloudflare.rssfeedcreate

Run Create Threat Signals feed with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Optional
body.category_id string | null Optional One of the predefined Threat Signals feed categories; see GET /:account_id/v2/threat-signals/categories. enum: ["b12a0fd6-f7b9-5393-9ef3-f888d506c550","d5b70eaa-626f-5761-b55b-6d9590df49fb","3b572d2b-890d-5286-9433-f18c85079030","17f90d3b-37d3-5241-8ad4-7d6abbc2006c","c68f28e9-7e8f-5d4b-853b-f3076893a9ee","bb0e4a94-38ab-5c14-80a7-28cee9f4b139","b1ef66d9-a73c-58dc-b269-22d34dfd11f4","ab02a976-0a20-5c76-a553-7f6325afacfe"]
body.curated_feed_id string Optional UUID of a curated feed to subscribe to. Provide exactly one of url or curated_feed_id. The account must have feed creation entitlement and not exceed feed allowance. format: "uuid"
body.display_name string | null Optional Override the feed's display name. Null clears it; omit to keep existing or derived value. maxLength: 255
body.enabled boolean Optional Whether to actively poll the feed. Default true. default: true
body.poll_interval_s integer Optional Polling interval in seconds (60-86400). Default 300s (5 minutes). default: 300; minimum: 60; maximum: 86400
body.title string | null Optional Override the feed's title. Null clears it; omit to keep existing or derived value. maxLength: 255
body.url string Optional HTTPS RSS feed URL. Provide exactly one of url or curated_feed_id. The account must have feed creation entitlement and not exceed feed allowance. maxLength: 2048; format: "uri"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger Threat Signals feed poll — cloudflare.rssfeedpoll

Run Trigger Threat Signals feed poll with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.feed_id — Optional UUID of a specific feed to poll, or "all" to poll all feeds. Omit or pass "all" for all feeds.
query.feed_id string Optional anyOf[1]; format: "uuid"
query.feed_id string Optional anyOf[2]; enum: ["all"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Threat Signals feed — cloudflare.rssfeeddelete

Run Delete Threat Signals feed with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.feed_id string Required UUID of the Threat Signals feed format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "feed_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Threat Signals feed — cloudflare.rssfeedupdate

Run Update Threat Signals feed with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.feed_id string Required UUID of the Threat Signals feed format: "uuid"
body object Optional
body.category_id string | null Optional One of the predefined Threat Signals feed categories; see GET /:account_id/v2/threat-signals/categories. enum: ["b12a0fd6-f7b9-5393-9ef3-f888d506c550","d5b70eaa-626f-5761-b55b-6d9590df49fb","3b572d2b-890d-5286-9433-f18c85079030","17f90d3b-37d3-5241-8ad4-7d6abbc2006c","c68f28e9-7e8f-5d4b-853b-f3076893a9ee","bb0e4a94-38ab-5c14-80a7-28cee9f4b139","b1ef66d9-a73c-58dc-b269-22d34dfd11f4","ab02a976-0a20-5c76-a553-7f6325afacfe"]
body.display_name string | null Optional Override the feed's display name. Null clears it; omit to keep existing or derived value. maxLength: 255
body.enabled boolean Optional Whether to actively poll the feed. Omit to keep current value.
body.poll_interval_s integer Optional New polling interval in seconds (60-86400). Omit to keep current value. minimum: 60; maximum: 86400
body.title string | null Optional Override the feed's title. Null clears it; omit to keep existing or derived value. maxLength: 255

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "feed_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Threat Signals feed XML — cloudflare.rssfeedrawget

Run Get Threat Signals feed XML with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.feed_id string Required UUID of the Threat Signals feed format: "uuid"
query object Optional additionalProperties: false
query.format string Optional Response format. Use xml for application/xml; omit it for the default text/plain response. enum: ["xml"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "feed_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Threat Signals feed skills — cloudflare.rssfeedskillsget

Run Get Threat Signals feed skills with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.feed_id string Required UUID of the Threat Signals feed format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "feed_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set Threat Signals feed skills — cloudflare.rssfeedskillsset

Run Set Threat Signals feed skills with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.feed_id string Required UUID of the Threat Signals feed format: "uuid"
body object Optional
body.skill_ids array Required Ordered array of Custom Skill UUIDs (max 20). Replaces the feed's custom skill assignments. Free accounts cannot assign custom skills. Managed default skills are unaffected. maxItems: 20; uniqueItems: true
body.skill_ids[] string Optional format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "feed_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Threat Signals article indicators — cloudflare.rssarticleindicatorlist

Run List Threat Signals article indicators with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.feed_id string Optional Feed UUID filter. Omit to include indicators from every account feed. format: "uuid"
query.article_id string Optional Article UUID filter. Omit to include indicators from every article. format: "uuid"
query.search string Optional NFC-normalized and trimmed, case-insensitive literal substring search of indicator values. Requires 3–500 Unicode code points; the upper code-point bound is described here because OpenAPI string length cannot precisely express it without imposing UTF-16 semantics.
query.per_page integer Optional Number of indicators per cursor page, from 1 to 100. Defaults to 20. default: 20; minimum: 1; maximum: 100
query.sort string Optional Sort by id. Use id for ascending or -id for descending order; defaults to id. default: "id"; pattern: "^-?(id)$"
query.include_total boolean Optional When true on the first page, count matching indicators and return an exact total. Defaults to false; cursor pages do not recalculate totals. default: false
query.cursor string Optional Opaque cursor from the previous response's pagination.cursor. When provided, page size, ordering, and filters come from the cursor. Sending per_page, sort, include_total, feed_id, article_id, or search alongside it returns a 400 CursorFilterConflictError. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Search Threat Signals articles using AI Search — cloudflare.searchthreatsignals

Run Search Threat Signals articles using AI Search with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Required additionalProperties: false
query.query string Required Keyword and semantic article-search text, from 1 to 1000 characters. minLength: 1; maxLength: 1000
query.max_results — Optional Maximum search matches to request, an integer from 1 to 50. Defaults to 20 when omitted or empty; multiple matches from one article can produce fewer returned articles.
query.max_results string Optional anyOf[1]; enum: [""]
query.max_results string Optional anyOf[2]
query.feed_id string Optional Optional feed UUID that restricts results to articles from that feed. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "query": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Threat Signals skills — cloudflare.rssskilllist

Run List Threat Signals skills with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional Page number (≥ 1, default 1). default: 1; minimum: 1
query.per_page integer Optional Results per page (1–100, default 20). default: 20; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Threat Signals skill — cloudflare.rssskillcreate

Run Create Threat Signals skill with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Optional
body.name string Required Custom Skill name (1–100 characters). minLength: 1; maxLength: 100
body.output_schema string Required JSON Schema serialized as a string (max 4096 characters). minLength: 1; maxLength: 4096
body.prompt string Required AI prompt (1–4000 characters) defining the skill's instructions. minLength: 1; maxLength: 4000
body.type string Optional Optional label; does not affect execution. Defaults to "summary". enum: ["summary","tags"]; default: "summary"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Threat Signals skill — cloudflare.rssskilldelete

Run Delete Threat Signals skill with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.skill_id string Required Custom Skill UUID or a Managed Default Skill ID

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "skill_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Threat Signals skill — cloudflare.rssskillget

Run Get Threat Signals skill with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.skill_id string Required Custom Skill UUID or a Managed Default Skill ID

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "skill_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Threat Signals skill — cloudflare.rssskillupdate

Run Update Threat Signals skill with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.skill_id string Required Custom Skill UUID or a Managed Default Skill ID
body object Optional
body.config string Optional Optional skill configuration (stored but not currently interpreted).
body.is_active boolean Optional Whether the skill is active and eligible for feed assignment.
body.name string Optional Custom Skill name (1–100 characters). minLength: 1; maxLength: 100
body.output_schema string Optional JSON Schema serialized as a string (max 4096 characters). minLength: 1; maxLength: 4096
body.prompt string Optional AI prompt (1–4000 characters) defining the skill's instructions. minLength: 1; maxLength: 4000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "skill_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Threat Signals skill tag categories — cloudflare.rssskilltagcategoriesget

Run Get Threat Signals skill tag categories with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.skill_id string Required Must be default-tagging-skill; configures the managed default tagging skill enum: ["default-tagging-skill"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "skill_id": "default-tagging-skill"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace Threat Signals skill tag categories — cloudflare.rssskilltagcategoriesreplace

Run Replace Threat Signals skill tag categories with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.skill_id string Required Must be default-tagging-skill; configures the managed default tagging skill enum: ["default-tagging-skill"]
body object Optional
body.category_uuids array Required Up to 100 unique tag category UUIDs that the managed default tagging skill may select tags from. maxItems: 100; uniqueItems: true
body.category_uuids[] string Optional format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "skill_id": "default-tagging-skill"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List existing CNI objects — cloudflare.list_cnis

Run List existing CNI objects with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.slot string | null Optional If specified, only show CNIs associated with the specified slot
query.tunnel_id string | null Optional If specified, only show cnis associated with the specified tunnel id
query.cursor integer | null Optional
query.limit integer | null Optional minimum: 0
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new CNI object — cloudflare.create_cni

Run Create a new CNI object with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"
body — Required $ref: "#/definitions/nsc_CniCreate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "interconnect": "example",
    "account": "example",
    "magic": {
      "conduit_name": "example",
      "description": "example",
      "mtu": 1
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a specified CNI object — cloudflare.delete_cni

Run Delete a specified CNI object with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.cni string Required CNI ID to retrieve information about format: "uuid"
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "cni": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get information about a CNI object — cloudflare.get_cni

Run Get information about a CNI object with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.cni string Required CNI ID to retrieve information about format: "uuid"
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "cni": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Modify stored information about a CNI object — cloudflare.update_cni

Run Modify stored information about a CNI object with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.cni string Required CNI ID to retrieve information about format: "uuid"
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"
body — Required $ref: "#/definitions/nsc_Cni"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "cni": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  },
  "body": {
    "id": "00000000-0000-4000-8000-000000000000",
    "interconnect": "example",
    "account": "example",
    "p2p_ip": "192.168.3.4/31",
    "cust_ip": "192.168.3.4/31",
    "magic": {
      "conduit_name": "example",
      "description": "example",
      "mtu": 1
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List existing interconnects — cloudflare.list_interconnects

Run List existing interconnects with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.site string | null Optional If specified, only show interconnects located at the given site
query.type string | null Optional If specified, only show interconnects of the given type
query.cursor integer | null Optional
query.limit integer | null Optional minimum: 0
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new interconnect — cloudflare.create_interconnect

Run Create a new interconnect with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"
body — Required $ref: "#/definitions/nsc_InterconnectCreate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "type": "example",
    "account": "example",
    "slot_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an interconnect object — cloudflare.delete_interconnect

Run Delete an interconnect object with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.icon string Required Interconnect name to retrieve information about
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "icon": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get information about an interconnect object — cloudflare.get_interconnect

Run Get information about an interconnect object with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.icon string Required Interconnect name to retrieve information about
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "icon": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Generate the Letter of Authorization (LOA) for a given interconnect — cloudflare.get_interconnect_loa

Run Generate the Letter of Authorization (LOA) for a given interconnect with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.icon string Required Interconnect name to retrieve information about
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"
query object Optional additionalProperties: false
query.name string | null Optional Custom name to use in the LOA instead of the account name (200 Character limit)

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "icon": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the default customer name for LOA generation — cloudflare.get_interconnect_loa_default_name

Run Get the default customer name for LOA generation with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.icon string Required Interconnect name to retrieve information about
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "icon": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the current status of an interconnect object — cloudflare.get_interconnect_status

Run Get the current status of an interconnect object with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.icon string Required Interconnect name to retrieve information about
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "icon": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the current settings for the active account — cloudflare.get_settings

Run Get the current settings for the active account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account tag to retrieve settings for

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the current settings for the active account — cloudflare.update_settings

Run Update the current settings for the active account with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account tag to update settings for
body — Required $ref: "#/definitions/nsc_SettingsRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve a list of all slots matching the specified parameters — cloudflare.list_slots

Run Retrieve a list of all slots matching the specified parameters with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.address_contains string | null Optional If specified, only show slots with the given text in their address field
query.site string | null Optional If specified, only show slots located at the given site
query.speed string | null Optional If specified, only show slots that support the given speed
query.occupied boolean | null Optional If specified, only show slots with a specific occupied/unoccupied state
query.cursor integer | null Optional
query.limit integer | null Optional minimum: 0
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get information about the specified slot — cloudflare.get_slot

Run Get information about the specified slot with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.slot string Required format: "uuid"
path.account_id — Required $ref: "#/definitions/nsc_AccountTag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "slot": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Workers VPC connectivity services — cloudflare.connectivity-services-list

Run List Workers VPC connectivity services with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/infra_AccountTag"
query object Optional additionalProperties: false
query.type string | null Optional
query.type — Optional oneOf[1]; $ref: "#/definitions/infra_ServiceType"
query.page integer Optional Current page in the response default: 1; minimum: 1
query.per_page integer Optional Max amount of entries returned per page default: 1000; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Workers VPC connectivity service — cloudflare.connectivity-services-delete

Run Delete Workers VPC connectivity service with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.service_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "service_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workers VPC connectivity service — cloudflare.connectivity-services-get

Run Get Workers VPC connectivity service with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.service_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "service_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Applications associated with your account — cloudflare.listapplications

Run List Applications associated with your account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
query object Optional additionalProperties: false
query.per_page integer Optional Maximum number of applications to return per page. Defaults to all, or 100 when page_token is set. minimum: 1; maximum: 500
query.page_token string Optional Opaque token from a previous response to retrieve the next page.
query.name — Optional Filter applications by name. $ref: "#/definitions/cc_ApplicationName"
query.image — Optional Filter applications by image. $ref: "#/definitions/cc_Image"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new application — cloudflare.createapplication

Run Create a new application with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
body — Required $ref: "#/definitions/cc_ContainersCreateApplicationRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  },
  "body": {
    "name": "example",
    "scheduling_policy": "default",
    "instances": 1,
    "max_instances": 1,
    "configuration": {
      "image": "example"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a single application by id — cloudflare.deleteapplication

Run Delete a single application by id with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
path.application_id — Required $ref: "#/definitions/cc_ApplicationID"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "application_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a single application by id — cloudflare.getapplication

Run Get a single application by id with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
path.application_id — Required $ref: "#/definitions/cc_ApplicationID"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "application_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Modify an application — cloudflare.modifyapplication

Run Modify an application with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
path.application_id — Required $ref: "#/definitions/cc_ApplicationID"
body — Required $ref: "#/definitions/cc_ContainersModifyApplicationRequestBody"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "application_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List container instances — cloudflare.listcontainerinstances_v2

Run List container instances with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
path.application_id — Required $ref: "#/definitions/cc_ApplicationID"
query object Optional additionalProperties: false
query.per_page integer Optional Maximum number of instances to return per page. Defaults to 100. minimum: 1; maximum: 1000
query.page_token string Optional Opaque token from a previous response to retrieve the next page.
query.state string Optional Filters instances by lifecycle state. active includes provisioning, running, and stopping instances; not-active includes stopped and failed instances. When omitted, all instances are returned. enum: ["active","not-active"]
query.name_prefix string Optional Filter instances by a case-sensitive name prefix, falling back to the actor ID when no name is known. Keep the same prefix when using a page token.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "application_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new rollout for an application — cloudflare.createapplicationrollout

Run Create a new rollout for an application with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
path.application_id — Required $ref: "#/definitions/cc_ApplicationID"
body — Required $ref: "#/definitions/cc_ContainersCreateApplicationRolloutRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "application_id": "example"
  },
  "body": {
    "target_configuration": {},
    "strategy": "rolling",
    "description": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all application versions — cloudflare.listapplicationversions

Run List all application versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
path.application_id — Required $ref: "#/definitions/cc_ApplicationID"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "application_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Prepare a container image — cloudflare.preparecontainerimage

Run Prepare a container image with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
body — Required $ref: "#/definitions/cc_PrepareContainerImageRequestBody"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  },
  "body": {
    "image": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the list of configured registries in the account — cloudflare.listimageregistries

Run Get the list of configured registries in the account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Configure a private external image registry — cloudflare.createimageregistry

Run Configure a private external image registry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
body — Required $ref: "#/definitions/cc_ContainersCreateImageRegistryRequestBody"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123"
  },
  "body": {
    "domain": "docker.io",
    "auth": {
      "public_credential": "example-user",
      "private_credential": {
        "store_id": "14758f1afd44c09b7992073ccf00b43d",
        "secret_name": "API_KEY"
      }
    },
    "kind": "ECR"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a registry from the account — cloudflare.deleteimageregistry

Run Delete a registry from the account with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
path.domain string Required The domain to delete.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "domain": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Generate a JWT to interact with the specified image registry. — cloudflare.generateimageregistrycredentials

Run Generate a JWT to interact with the specified image registry. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier.
path.domain string Required The domain to get credentials for.
body — Required $ref: "#/definitions/cc_ImageRegistryCredentialsConfiguration"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "account-123",
    "domain": "registry.cloudflare.com"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Custom CSRs — cloudflare.custom-csrs-for-an-account-list-custom-csrs

Run List Custom CSRs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of custom CSRs per page. default: 50; minimum: 5; maximum: 50
query.order string Optional The field to sort the returned custom CSRs by. enum: ["name","account_tag","created_at"]; default: "created_at"
query.direction string Optional The direction to sort by. enum: ["asc","desc"]; default: "asc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Custom CSR — cloudflare.custom-csrs-for-an-account-create-custom-csr

Run Create Custom CSR with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_csr_create_request-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "country": "US",
    "state": "California",
    "locality": "San Francisco",
    "organization": "Cloudflare, Inc.",
    "common_name": "example.com",
    "sans": [
      "example.com",
      "www.example.com"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Custom CSR — cloudflare.custom-csrs-for-an-account-delete-custom-csr

Run Delete Custom CSR with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_csr_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_csr_identifier"
path.account_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_csr_id": "7b163417-1d2b-4c84-a38a-2fb7a0cd7752",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Custom CSR Details — cloudflare.custom-csrs-for-an-account-custom-csr-details

Run Custom CSR Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_csr_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_csr_identifier"
path.account_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_csr_id": "7b163417-1d2b-4c84-a38a-2fb7a0cd7752",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Account Custom Nameservers — cloudflare.account-level-custom-nameservers-list-account-custom-nameservers

Run List Account Custom Nameservers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-custom-nameservers_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "372e67954025e0ba6aaa6d586b9e0b59"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add Account Custom Nameserver — cloudflare.account-level-custom-nameservers-add-account-custom-nameserver

Run Add Account Custom Nameserver with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-custom-nameservers_identifier"
body — Required $ref: "#/definitions/dns-custom-nameservers_CustomNSInput"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "372e67954025e0ba6aaa6d586b9e0b59"
  },
  "body": {
    "ns_name": "ns1.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Account Custom Nameserver — cloudflare.account-level-custom-nameservers-delete-account-custom-nameserver

Run Delete Account Custom Nameserver with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_ns_id — Required $ref: "#/definitions/dns-custom-nameservers_ns_name"
path.account_id — Required $ref: "#/definitions/dns-custom-nameservers_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_ns_id": "ns1.example.com",
    "account_id": "372e67954025e0ba6aaa6d586b9e0b59"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List custom pages — cloudflare.custom-pages-for-an-account-list-custom-pages

Run List custom pages with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifier of the Cloudflare account. $ref: "#/definitions/custom-pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List custom assets — cloudflare.custom-assets-for-an-account-list-custom-assets

Run List custom assets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifier of the Cloudflare account. $ref: "#/definitions/custom-pages_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Number of custom assets per page. default: 20; minimum: 1; maximum: 200

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a custom asset — cloudflare.custom-assets-for-an-account-create-a-custom-asset

Run Create a custom asset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifier of the Cloudflare account. $ref: "#/definitions/custom-pages_identifier"
body object Required
body.description — Required $ref: "#/definitions/custom-pages_asset_description"
body.name — Required $ref: "#/definitions/custom-pages_asset_name"
body.url — Required $ref: "#/definitions/custom-pages_asset_url"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "my_custom_error_page",
    "description": "Custom 500 error page",
    "url": "https://example.com/error.html"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a custom asset — cloudflare.custom-assets-for-an-account-delete-a-custom-asset

Run Delete a custom asset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asset_name — Required $ref: "#/definitions/custom-pages_asset_name"
path.account_id — Required Identifier of the Cloudflare account. $ref: "#/definitions/custom-pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asset_name": "my_custom_error_page",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a custom asset — cloudflare.custom-assets-for-an-account-get-a-custom-asset

Run Get a custom asset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asset_name — Required $ref: "#/definitions/custom-pages_asset_name"
path.account_id — Required Identifier of the Cloudflare account. $ref: "#/definitions/custom-pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asset_name": "my_custom_error_page",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a custom asset — cloudflare.custom-assets-for-an-account-update-a-custom-asset

Run Update a custom asset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asset_name — Required $ref: "#/definitions/custom-pages_asset_name"
path.account_id — Required Identifier of the Cloudflare account. $ref: "#/definitions/custom-pages_identifier"
body object Required
body.description — Required $ref: "#/definitions/custom-pages_asset_description"
body.url — Required $ref: "#/definitions/custom-pages_asset_url"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asset_name": "my_custom_error_page",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "description": "Custom 500 error page",
    "url": "https://example.com/error.html"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a preview token — cloudflare.custom-pages-for-an-account-create-preview-token

Run Create a preview token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifier of the Cloudflare account. $ref: "#/definitions/custom-pages_identifier"
body — Required $ref: "#/definitions/custom-pages_preview_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "act": "preview",
    "target": "block:waf",
    "url": "https://example.com/error.html"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a custom page — cloudflare.custom-pages-for-an-account-get-a-custom-page

Run Get a custom page with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/custom-pages_error_page_type"
path.account_id — Required Identifier of the Cloudflare account. $ref: "#/definitions/custom-pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ratelimit_block",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a custom page — cloudflare.custom-pages-for-an-account-update-a-custom-page

Run Update a custom page with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/custom-pages_error_page_type"
path.account_id — Required Identifier of the Cloudflare account. $ref: "#/definitions/custom-pages_identifier"
body object Required
body.state — Required $ref: "#/definitions/custom-pages_state"
body.url — Required $ref: "#/definitions/custom-pages_url"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ratelimit_block",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "url": "http://www.example.com",
    "state": "default"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List D1 Databases — cloudflare.d1-list-databases

Run List D1 Databases with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
query object Optional additionalProperties: false
query.name string Optional a database name to search for.
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of items per page. default: 1000; minimum: 10; maximum: 10000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create D1 Database — cloudflare.d1-create-database

Run Create D1 Database with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
body object Required
body.jurisdiction — Optional $ref: "#/definitions/d1_jurisdiction"
body.name — Required $ref: "#/definitions/d1_database-name"
body.primary_location_hint — Optional $ref: "#/definitions/d1_primary-location-hint"
body.read_replication — Optional $ref: "#/definitions/d1_read-replication-details-for-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "my-database"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete D1 Database — cloudflare.d1-delete-database

Run Delete D1 Database with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
path.database_id — Required $ref: "#/definitions/d1_database-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "database_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update D1 Database partially — cloudflare.d1-update-partial-database

Run Update D1 Database partially with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
path.database_id — Required $ref: "#/definitions/d1_database-identifier"
body — Required $ref: "#/definitions/d1_database-update-partial-request-body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "database_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update D1 Database — cloudflare.d1-update-database

Run Update D1 Database with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
path.database_id — Required $ref: "#/definitions/d1_database-identifier"
body — Required $ref: "#/definitions/d1_database-update-request-body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "database_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  },
  "body": {
    "read_replication": {
      "mode": "auto"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Export D1 Database as SQL — cloudflare.d1-export-database

Run Export D1 Database as SQL with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
path.database_id — Required $ref: "#/definitions/d1_database-identifier"
body object Required
body.current_bookmark string Optional To poll an in-progress export, provide the current bookmark (returned by your first polling response)
body.dump_options object Optional
body.dump_options.no_data boolean Optional Export only the table definitions, not their contents
body.dump_options.no_schema boolean Optional Export only each table's contents, not its definition
body.dump_options.tables array Optional Filter the export to just one or more tables. Passing an empty array is the same as not passing anything and means: export all tables.
body.dump_options.tables[] string Optional
body.output_format string Required Specifies that you will poll this endpoint until the export completes enum: ["polling"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "database_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  },
  "body": {
    "output_format": "polling"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Import SQL into your D1 Database — cloudflare.d1-import-database

Run Import SQL into your D1 Database with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
path.database_id — Required $ref: "#/definitions/d1_database-identifier"
body — Required
body object Required init oneOf[1]
body.action string Required Indicates you have a new SQL file to upload. oneOf[1]; enum: ["init"]
body.etag string Required Required when action is 'init' or 'ingest'. An md5 hash of the file you're uploading. Used to check if it already exists, and validate its contents before ingesting. oneOf[1]
body object Required ingest oneOf[2]
body.action string Required Indicates you've finished uploading to tell the D1 to start consuming it oneOf[2]; enum: ["ingest"]
body.etag string Required An md5 hash of the file you're uploading. Used to check if it already exists, and validate its contents before ingesting. oneOf[2]
body.filename string Required The filename you have successfully uploaded. oneOf[2]
body object Required poll oneOf[3]
body.action string Required Indicates you've finished uploading to tell the D1 to start consuming it oneOf[3]; enum: ["poll"]
body.current_bookmark string Required This identifies the currently-running import, checking its status. oneOf[3]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "database_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  },
  "body": {
    "action": "init",
    "etag": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query D1 Database — cloudflare.d1-query-database

Run Query D1 Database with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
path.database_id — Required $ref: "#/definitions/d1_database-identifier"
body — Required $ref: "#/definitions/d1_batch-query"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "database_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  },
  "body": {
    "sql": "SELECT * FROM myTable WHERE field = ? OR field = ?;"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Raw D1 Database query — cloudflare.d1-raw-database-query

Run Raw D1 Database query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
path.database_id — Required $ref: "#/definitions/d1_database-identifier"
body — Required $ref: "#/definitions/d1_batch-query"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "database_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  },
  "body": {
    "sql": "SELECT * FROM myTable WHERE field = ? OR field = ?;"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get D1 database bookmark — cloudflare.d1-time-travel-get-bookmark

Run Get D1 database bookmark with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
path.database_id — Required $ref: "#/definitions/d1_database-identifier"
query object Optional additionalProperties: false
query.timestamp — Optional An optional ISO 8601 timestamp. If provided, returns the nearest available bookmark at or before this timestamp. If omitted, returns the current bookmark. $ref: "#/definitions/d1_time-travel-timestamp"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "database_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Restore D1 Database to a bookmark or point in time — cloudflare.d1-time-travel-restore

Run Restore D1 Database to a bookmark or point in time with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
path.database_id — Required $ref: "#/definitions/d1_database-identifier"
query object Optional additionalProperties: false
query.bookmark — Optional A bookmark to restore the database to. Required if timestamp is not provided. $ref: "#/definitions/d1_time-travel-bookmark"
query.timestamp — Optional An ISO 8601 timestamp to restore the database to. Required if bookmark is not provided. $ref: "#/definitions/d1_time-travel-timestamp"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "database_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Undelete D1 Database — cloudflare.d1-undelete-database

Run Undelete D1 Database with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/d1_account-identifier"
path.database_id — Required $ref: "#/definitions/d1_database-identifier"
body object Optional additionalProperties: false
body.new_name — Optional Restore the database with this name instead of the name it had when it was deleted. Required if another database in the account already uses that name.
body.new_name — Optional allOf[1]; $ref: "#/definitions/d1_database-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "database_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List asset schemas — cloudflare.listassetschemas

Run List asset schemas with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
query object Optional additionalProperties: false
query.vendor string Optional Restrict the result to a single vendor. Unknown values return 400. enum: ["ANTHROPIC","AWS","BITBUCKET","BOX","CONFLUENCE","DROPBOX","GITHUB","GOOGLE_CLOUD_PLATFORM","GOOGLE_WORKSPACE","JIRA","MICROSOFT","OPENAI","SALESFORCE","SERVICENOW","SLACK","WORKDAY","ZOOM"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get asset schema by asset class — cloudflare.getassetschema

Run Get asset schema by asset class with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.asset_class string Required Asset class identifier (PascalCase), e.g. AnthropicApiKey.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "asset_class": "AnthropicApiKey"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List DLP content findings — cloudflare.listcontentassets

Run List DLP content findings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
query object Optional additionalProperties: false
query.direction string Optional Direction to order results. enum: ["asc","desc"]
query.dlp_profile_id string Optional Filter by an DLP profile ID format: "uuid"
query.integration_id string Optional Filter by an integration ID format: "uuid"
query.max_affliction_date string Optional Filter to view findings that occurred on or before the affliction date. Can be a date-time in ISO 8601 format or an epoch timestamp. format: "date-time"
query.min_affliction_date string Optional Filter to view findings that occurred on or after the affliction date. Can be a date-time in ISO 8601 format or an epoch timestamp. format: "date-time"
query.order string Optional Which field to use when ordering content assets. enum: ["asset_name","dlp_profile_count","integration_name","latest_affliction_date"]
query.page integer Optional A page number within the paginated result set.
query.per_page integer Optional Number of results to return per page.
query.search string Optional A search term.
query.vendor — Optional Filter by vendor $ref: "#/definitions/posture-api_VendorsEnum"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a content export — cloudflare.createcontentexport

Run Create a content export with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
body — Optional $ref: "#/definitions/posture-api_ContentExportRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all export jobs — cloudflare.listexportjobs

Run List all export jobs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
query object Optional additionalProperties: false
query.page integer Optional A page number within the paginated result set.
query.per_page integer Optional Number of results to return per page.
query.status — Optional Filter on export job's status $ref: "#/definitions/posture-api_StatusEnum"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all finding types — cloudflare.listfindingtypes

Run List all finding types with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
query object Optional additionalProperties: false
query.page integer Optional A page number within the paginated result set.
query.per_page integer Optional Number of results to return per page.
query.vendors array Optional Filter finding types by vendor. Supports multiple comma-separated values. Each value may be either the vendor enum (GOOGLE_WORKSPACE) or the friendly name returned by the read routes (Google Workspace).
query.vendors[] — Optional $ref: "#/definitions/posture-api_FindingTypeVendorsEnum"
query.types array Optional Filter finding types by category type. Supports multiple comma-separated, case-insensitive values.
query.types[] — Optional $ref: "#/definitions/posture-api_FindingCategoryTypeEnum"
query.origins array Optional Filter finding types by origin. Supports multiple comma-separated, case-insensitive values.
query.origins[] — Optional $ref: "#/definitions/posture-api_FindingTypeOriginEnum"
query.severities array Optional Filter finding types by severity. Supports multiple comma-separated, case-insensitive values.
query.severities[] — Optional $ref: "#/definitions/posture-api_FindingTypeSeverityEnum"
query.search string Optional Filter finding types by name or ID (case-insensitive substring match).
query.quarantined boolean Optional When true, return only quarantined finding types; when false, return only non-quarantined finding types. Omit to return both.
query.min_updated_at string Optional Return only finding types updated at or after this RFC 3339 timestamp (inclusive). format: "date-time"
query.max_updated_at string Optional Return only finding types updated at or before this RFC 3339 timestamp (inclusive). format: "date-time"
query.order string Optional Field to sort by (case-insensitive). Defaults to 'created'. Name and vendor sorting is case-insensitive; vendor uses friendly provider names. Ascending order: type Content then Posture; origin custom then system; severity Low, Medium, High, Critical. enum: ["created","updated","match_count","name","vendor","type","origin","severity"]
query.direction string Optional Sort direction for the primary field. Defaults to 'desc'. Ties are resolved by case-insensitive name, then ID, both ascending regardless of direction. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a custom finding type — cloudflare.createfindingtype

Run Create a custom finding type with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
body — Required $ref: "#/definitions/posture-api_create-finding-type-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  },
  "body": {
    "name": "Excessive File Sharing",
    "description": "Detects files shared with too many users",
    "asset_vendor": "GOOGLE_WORKSPACE",
    "asset_class": "GoogleWorkspaceFile",
    "severity": "High",
    "expression": "default result := \"pass\"\n\nresult := \"fail\" if input.asset.publicLinkDisabled == false\n",
    "applies_to_all_integrations": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate a custom finding type — cloudflare.validatefindingtype

Run Validate a custom finding type with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
body — Required $ref: "#/definitions/posture-api_create-finding-type-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  },
  "body": {
    "name": "Excessive File Sharing",
    "description": "Detects files shared with too many users",
    "asset_vendor": "GOOGLE_WORKSPACE",
    "asset_class": "GoogleWorkspaceFile",
    "severity": "High",
    "expression": "default result := \"pass\"\n\nresult := \"fail\" if input.asset.publicLinkDisabled == false\n",
    "applies_to_all_integrations": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a custom finding type — cloudflare.deletefindingtype

Run Delete a custom finding type with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.finding_type_id string Required A UUID string identifying the finding type. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "finding_type_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get finding by ID — cloudflare.getfindingtype

Run Get finding by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.finding_type_id string Required A UUID string identifying the finding type. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "finding_type_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a custom finding type — cloudflare.updatefindingtype

Run Update a custom finding type with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.finding_type_id string Required A UUID string identifying the finding type. format: "uuid"
body — Required $ref: "#/definitions/posture-api_update-finding-type-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "finding_type_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "applies_to_all_integrations": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List remediation types for a finding type — cloudflare.getremediationtypesforfindingtype

Run List remediation types for a finding type with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.finding_type_id string Required A UUID string identifying the finding type. format: "uuid"
query object Optional additionalProperties: false
query.integration_id string Optional Filter by an integration ID format: "uuid"
query.cursor string Optional A cursor for pagination.
query.page integer Optional A page number within the paginated result set.
query.per_page integer Optional Number of results to return per page.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "finding_type_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List posture findings — cloudflare.listfindings

Run List posture findings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
query object Optional additionalProperties: false
query.cursor string Optional A cursor for pagination. Obtained from the result_info.cursor field of a previous response.
query.direction string Optional Direction to order results. enum: ["asc","desc"]
query.ignored boolean Optional Filter for only the ignored findings. Set to false to only see "active" items
query.integration_id string Optional Filter by an integration ID format: "uuid"
query.max_affliction_date string Optional Filter to view findings that occurred on or before the affliction date. Can be a date-time in ISO 8601 format or an epoch timestamp. format: "date-time"
query.min_affliction_date string Optional Filter to view findings that occurred on or after the affliction date. Can be a date-time in ISO 8601 format or an epoch timestamp. format: "date-time"
query.observation string Optional Filter by observation type of the finding enum: ["Activity","Insight","Issue"]
query.order string Optional Which field to use when ordering the findings. enum: ["finding.name","instance_count","integration.name","latest_affliction_date","severity"]
query.page integer Optional A page number within the paginated result set.
query.per_page integer Optional Number of results to return per page.
query.product string Optional Filter by product category of the finding enum: ["Cloud","Saas"]
query.search string Optional A search term.
query.severity string Optional Filter by severity enum: ["Critical","High","Medium","Low"]
query.type string Optional Filter by type of the finding enum: ["Content","Posture"]
query.vendor — Optional Filter by vendor $ref: "#/definitions/posture-api_VendorsEnum"
query.finding_type_ids string Optional A comma separated list of UUIDs identifying the finding type(s). format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create new findings export request — cloudflare.createfindingexportcsv

Run Create new findings export request with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
body — Optional $ref: "#/definitions/posture-api_FindingExportFilterRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Mark a finding as ignored — cloudflare.ignorefinding

Run Mark a finding as ignored with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
body — Required $ref: "#/definitions/posture-api_FindingBulkActionRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  },
  "body": {
    "checks": [
      "MDAwMDAwMDAtMDAwMC0wMDAwLTAwMDAtMDAwMDAwMDAwMDAxOjAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMgo="
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove ignore marker from a finding — cloudflare.unignorefinding

Run Remove ignore marker from a finding with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
body — Required $ref: "#/definitions/posture-api_FindingBulkActionRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  },
  "body": {
    "checks": [
      "MDAwMDAwMDAtMDAwMC0wMDAwLTAwMDAtMDAwMDAwMDAwMDAxOjAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMgo="
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a posture finding — cloudflare.getfinding

Run Get a posture finding with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.finding_id string Required The id of a finding, as returned in each item of the List posture findings response. It is a base64-encoded identifier. format: "byte"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "finding_id": "aGVsbG8="
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List instances of a finding — cloudflare.listfindinginstances

Run List instances of a finding with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.finding_id string Required The id of a finding, as returned in each item of the List posture findings response. It is a base64-encoded identifier. format: "byte"
query object Optional additionalProperties: false
query.archived boolean Optional Archived
query.cursor string Optional A cursor for pagination. Obtained from the result_info.cursor field of a previous response.
query.direction string Optional Direction to order results. enum: ["asc","desc"]
query.max_affliction_date string Optional Filter to view findings that occurred on or before the affliction date. Can be a date-time in ISO 8601 format or an epoch timestamp. format: "date-time"
query.min_affliction_date string Optional Filter to view findings that occurred on or after the affliction date. Can be a date-time in ISO 8601 format or an epoch timestamp. format: "date-time"
query.order string Optional Which field to use when ordering the Finding's instances. When ordering by 'remediation.status', only the most recent non-stale remediation job is considered. Stale jobs (created before the instance's affliction_date) are treated as having no status for ordering purposes. enum: ["affliction_date","asset.name","remediation.status"]
query.page integer Optional A page number within the paginated result set.
query.per_page integer Optional Number of results to return per page.
query.search string Optional A search term.
query.remediation_statuses array Optional Filter finding instances by most recent remediation job status. Supports multiple comma-separated values. Use 'none' to filter instances with no remediation jobs or instances where the most recent job is stale. Note: Stale jobs (created before the instance's affliction_date) are ignored for filtering purposes, but are still included in the 'remediations' array with stale=true.
query.remediation_statuses[] string Optional enum: ["none","pending","processing","validating","completed","failed"]
query.finding_instance_ids array Optional Filter finding instances by an array of finding instance IDs. Supports multiple comma-separated values.
query.finding_instance_ids[] string Optional format: "uuid"
query.asset_ids array Optional Filter finding instances by an array of asset IDs. Supports multiple comma-separated values.
query.asset_ids[] string Optional format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "finding_id": "aGVsbG8="
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Archive a finding — cloudflare.archivefindinginstance

Run Archive a finding with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.finding_id string Required The id of a finding, as returned in each item of the List posture findings response. It is a base64-encoded identifier. format: "byte"
body — Optional $ref: "#/definitions/posture-api_FindingInstanceBulkActionRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "finding_id": "aGVsbG8="
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove the archive marking from a finding instance — cloudflare.unarchivefindinginstance

Run Remove the archive marking from a finding instance with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.finding_id string Required The id of a finding, as returned in each item of the List posture findings response. It is a base64-encoded identifier. format: "byte"
body — Optional $ref: "#/definitions/posture-api_FindingInstanceBulkActionRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "finding_id": "aGVsbG8="
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a finding instance using an instance ID — cloudflare.getfindinginstance

Run Get a finding instance using an instance ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.finding_id string Required The id of a finding, as returned in each item of the List posture findings response. It is a base64-encoded identifier. format: "byte"
path.instance_id string Required A uuid ID identifying this Finding instance. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "finding_id": "aGVsbG8=",
    "instance_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Reset severity for a finding back to the default — cloudflare.resetfindingseverity

Run Reset severity for a finding back to the default with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.finding_id string Required The id of a finding, as returned in each item of the List posture findings response. It is a base64-encoded identifier. format: "byte"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "finding_id": "aGVsbG8="
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the severity for a finding — cloudflare.changefindingseverity

Run Update the severity for a finding with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.finding_id string Required The id of a finding, as returned in each item of the List posture findings response. It is a base64-encoded identifier. format: "byte"
body — Required $ref: "#/definitions/posture-api_TuneFindingSeverityRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "finding_id": "aGVsbG8="
  },
  "body": {
    "new_severity": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a finding instances export — cloudflare.createfindinginstancesexportcsv

Run Create a finding instances export with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.storage_namespace_id string Required Identifies the finding whose instances to export, in the form &lt;integration_id&gt;-&lt;finding_type_id&gt;. Take integration.id and finding.id from the finding in the List posture findings response and join them with a hyphen. pattern: "^[\\da-f]{8}-([\\da-f]{4}-){3}[\\da-f]{12}-[\\da-f]{8}-([\\da-f]{4}-){3}[\\da-f]{12}$"
body — Optional $ref: "#/definitions/posture-api_FindingInstanceExportFilterRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "storage_namespace_id": "00000000-0000-0000-0000-000000000001-00000000-0000-0000-0000-000000000002"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List policy configurations — cloudflare.listpolicies

Run List policy configurations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
query object Optional additionalProperties: false
query.cursor string Optional Cursor for pagination. Obtained from the result_info.cursor field of a previous response.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a policy configuration — cloudflare.deletepolicy

Run Delete a policy configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.policy_id string Required A UUID identifying the policy. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "policy_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a policy configuration by ID — cloudflare.getpolicybyid

Run Get a policy configuration by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.policy_id string Required The UUID of the policy configuration to retrieve. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "policy_id": "497f6eca-6276-4993-bfeb-53cbbbba6f08"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List policy invocation logs — cloudflare.listpolicylogentries

Run List policy invocation logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
query object Optional additionalProperties: false
query.since string Optional Lower bound on the log entry timestamp. Accepts ISO 8601 / RFC3339 or epoch seconds. Defaults to 7 days before until. The window between since and until cannot exceed 180 days. format: "date-time"
query.until string Optional Upper bound on the log entry timestamp. Accepts ISO 8601 / RFC3339 or epoch seconds. Defaults to the current time. Must be greater than or equal to since. format: "date-time"
query.integration_id string Optional Comma-separated list of CASB integration IDs to filter by. At most 100 values, each at most 128 characters. Values outside the account's tenancy allowlist are silently ignored. When omitted, results are scoped to the full allowlist.
query.policy_name string Optional Comma-separated list of policy display names to filter by. At most 100 values, each at most 255 characters.
query.page integer Optional A page number within the paginated result set.
query.per_page integer Optional Number of results to return per page.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List remediation jobs — cloudflare.listremediationjobs

Run List remediation jobs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
query object Optional additionalProperties: false
query.cursor string Optional A cursor for pagination.
query.page integer Optional A page number within the paginated result set.
query.per_page integer Optional Number of results to return per page.
query.search string Optional A search term.
query.min_updated_at string Optional Filter to view remediations updated on or after the min updated datetime. Can be a date-time in ISO 8601 format or an epoch timestamp. format: "date-time"
query.max_updated_at string Optional Filter to view remediations updated on or before the max updated datetime. Can be a date-time in ISO 8601 format or an epoch timestamp. format: "date-time"
query.status — Optional Filter to view remediations with the given status. $ref: "#/definitions/posture-api_RemediationJobStatusEnum"
query.triggered_by_actor array Optional Filter remediations by what kind of actor triggered them. Supports multiple comma-separated values.
query.triggered_by_actor[] — Optional $ref: "#/definitions/posture-api_RemediationJobActorTypeEnum"
query.integration_id string Optional Filter by an integration ID format: "uuid"
query.order string Optional An optional param to sort the results by the given field. enum: ["created_at","affliction_date","integration_name","status","last_updated_at","asset_name","finding_type_name"]
query.direction string Optional Direction to order results. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Creates remediation jobs — cloudflare.createremediationjobs

Run Creates remediation jobs with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
body — Optional $ref: "#/definitions/posture-api_RemediationJobsCreateRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a remediation jobs export — cloudflare.createremediationjobsexportcsv

Run Create a remediation jobs export with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
body — Optional $ref: "#/definitions/posture-api_RemediationJobsExportFilterRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List webhook configurations — cloudflare.listwebhooks

Run List webhook configurations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new webhook configuration — cloudflare.createwebhook

Run Create a new webhook configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
body — Required $ref: "#/definitions/posture-api_CreateWebhookRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  },
  "body": {
    "label": "Send to Slack",
    "destination_url": "https://example.com/webhook",
    "authentication_type": "HMAC-Signing"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Test a webhook configuration before creating it — cloudflare.evaluatenewwebhook

Run Test a webhook configuration before creating it with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
body — Required $ref: "#/definitions/posture-api_EvaluateNewWebhookRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  },
  "body": {
    "destination_url": "https://example.com/webhook",
    "authentication_type": "HMAC-Signing"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create webhook jobs — cloudflare.createwebhookjobs

Run Create webhook jobs with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
body — Required $ref: "#/definitions/posture-api_CreateWebhookJobsRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6"
  },
  "body": {
    "webhook_ids": [
      "550e8400-e29b-41d4-a716-446655440000",
      "660e8400-e29b-41d4-a716-446655440001"
    ],
    "finding_instance_ids": [
      "770e8400-e29b-41d4-a716-446655440002",
      "660e8400-e29b-41d4-a716-446655440001"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a webhook configuration — cloudflare.deletewebhook

Run Delete a webhook configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.webhook_id string Required A UUID identifying the webhook configuration. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "webhook_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get webhook configuration by ID — cloudflare.getwebhookconfigbyid

Run Get webhook configuration by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.webhook_id string Required A UUID identifying the webhook configuration. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "webhook_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an existing webhook configuration — cloudflare.updatewebhook

Run Update an existing webhook configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.webhook_id string Required A UUID identifying the webhook configuration. format: "uuid"
body — Required $ref: "#/definitions/posture-api_UpdateWebhookRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "webhook_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "label": "Send to Slack",
    "destination_url": "https://example.com/webhook",
    "authentication_type": "HMAC-Signing",
    "status": "enabled"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Test an existing webhook configuration — cloudflare.evaluateexistingwebhook

Run Test an existing webhook configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID for the user making the request.
path.webhook_id string Required A UUID identifying the webhook configuration. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "46148281d8a93d002ef242d8b0d5f9f6",
    "webhook_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List client versions — cloudflare.list-client-versions

Run List client versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Required additionalProperties: false
query.target_environment string Required The target environment for the client version (e.g., windows, macos).
query.release_track string Required The release track (ga for General Availability, beta for Beta releases). enum: ["ga","beta"]
query.page integer Optional The page number to return. default: 1; minimum: 1
query.per_page integer Optional The maximum number of versions to return per page. default: 20; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "target_environment": "example",
    "release_track": "ga"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List available target environments — cloudflare.list-client-target-environments

Run List available target environments with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List deployment groups — cloudflare.list-deployment-groups

Run List deployment groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional The page number to return. default: 1; minimum: 1
query.per_page integer Optional The maximum number of deployment groups to return per page. default: 50; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create deployment group — cloudflare.create-deployment-group

Run Create deployment group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/teams-devices_deployment_group_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "Engineering Ring 0",
    "version_config": [
      {
        "version": "2026.6.234.0",
        "target_environment": "windows"
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete deployment group — cloudflare.delete-deployment-group

Run Delete deployment group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.group_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "group_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get deployment group — cloudflare.get-deployment-group

Run Get deployment group with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.group_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "group_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update deployment group — cloudflare.update-deployment-group

Run Update deployment group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.group_id string Required
body — Required $ref: "#/definitions/teams-devices_deployment_group_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "group_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List IP profiles — cloudflare.list-ip-profiles

Run List IP profiles with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.page integer Optional The page number to return. default: 1; minimum: 1
query.per_page integer Optional The number of IP profiles to return per page. default: 50; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create IP profile — cloudflare.create-ip-profile

Run Create IP profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/teams-devices_ip_profile_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "IPv4 Cloudflare Source IPs",
    "subnet_id": "b70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
    "precedence": 100,
    "match": "identity.email == \"test@cloudflare.com\""
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete IP profile — cloudflare.delete-ip-profile

Run Delete IP profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get IP profile — cloudflare.get-ip-profile

Run Get IP profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update IP profile — cloudflare.update-ip-profile

Run Update IP profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required
body — Required $ref: "#/definitions/teams-devices_ip_profile_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List your device managed networks — cloudflare.device-managed-networks-list-device-managed-networks

Run List your device managed networks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a device managed network — cloudflare.device-managed-networks-create-device-managed-network

Run Create a device managed network with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body object Required
body.config — Required
body.config — Required allOf[1]; $ref: "#/definitions/teams-devices_schemas-config_request"
body.name — Required $ref: "#/definitions/teams-devices_device-managed-networks_components-schemas-name"
body.type — Required $ref: "#/definitions/teams-devices_components-schemas-type"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "managed-network-1",
    "type": "tls",
    "config": {
      "sha256": "b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c",
      "tls_sockaddr": "foo.bar:1234"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a device managed network — cloudflare.device-managed-networks-delete-device-managed-network

Run Delete a device managed network with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.network_id — Required $ref: "#/definitions/teams-devices_uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "network_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get device managed network details — cloudflare.device-managed-networks-device-managed-network-details

Run Get device managed network details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.network_id — Required $ref: "#/definitions/teams-devices_uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "network_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a device managed network — cloudflare.device-managed-networks-update-device-managed-network

Run Update a device managed network with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.network_id — Required $ref: "#/definitions/teams-devices_uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body object Required
body.config — Optional
body.config — Optional allOf[1]; $ref: "#/definitions/teams-devices_schemas-config_request"
body.name — Optional $ref: "#/definitions/teams-devices_device-managed-networks_components-schemas-name"
body.type — Optional $ref: "#/definitions/teams-devices_components-schemas-type"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "network_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Generate an uninstall protection override code — cloudflare.create-override-code

Run Generate an uninstall protection override code with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/teams-devices_override_code_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "type": "uninstall_protection",
    "scope": "account",
    "duration_hours": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List devices — cloudflare.list-devices

Run List devices with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.cursor string Optional Opaque token indicating the starting position when requesting the next set of records. A cursor value can be obtained from the result_info.cursor field in the response.
query.sort_by string Optional The device field to order results by. enum: ["name","id","client_version","last_seen_user.email","last_seen_at","active_registrations","created_at"]
query.sort_order string Optional Sort direction. enum: ["asc","desc"]
query.last_seen_user.email string Optional Filter by the last seen user's email.
query.seen_after string Optional Filter by the last_seen timestamp - returns only devices last seen after this timestamp.
query.seen_before string Optional Filter by the last_seen timestamp - returns only devices last seen before this timestamp.
query.per_page integer Optional The maximum number of devices to return in a single response.
query.search string Optional Search by device details.
query.active_registrations string Optional Include or exclude devices with active registrations. The default is "only" - return only devices with active registrations. enum: ["include","only","exclude"]
query.has_registration_type — Optional Filter by the type of active registration associated with the device. $ref: "#/definitions/teams-devices_registration_type"
query.id array Optional Filter by a one or more device IDs.
query.id[] string Optional
query.tag array Optional Filter by one or more device tags in key:value format. Devices must match all provided tags. maxItems: 10
query.tag[] string Optional
query.last_seen_registration.policy.id string Optional Filter by the ID of the device settings profile assigned to the device registration. format: "uuid"
query.include string Optional Comma-separated list of additional information that should be included in the device response. Supported values are: "last_seen_registration.policy".

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete device — cloudflare.delete-device

Run Delete device with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.device_id string Required
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "device_id": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get device — cloudflare.get-device

Run Get device with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.device_id string Required
path.account_id string Required
query object Optional additionalProperties: false
query.include string Optional Comma-separated list of additional information that should be included in the device response. Supported values are: "last_seen_registration.policy".

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "device_id": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update device — cloudflare.patch-device

Run Update device with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.device_id string Required
path.account_id string Required
body — Required $ref: "#/definitions/teams-devices_physical_device_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "device_id": "example",
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List device settings profiles — cloudflare.devices-list-device-settings-policies

Run List device settings profiles with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
query object Optional additionalProperties: false
query.profile_type — Optional Filter profiles by client type. When omitted, only WARP profiles are returned. $ref: "#/definitions/teams-devices_profile_type"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the default device settings profile — cloudflare.devices-get-default-device-settings-policy

Run Get the default device settings profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the default device settings profile — cloudflare.devices-update-default-device-settings-policy

Run Update the default device settings profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body object Required
body.allow_mode_switch — Optional $ref: "#/definitions/teams-devices_allow_mode_switch"
body.allow_updates — Optional $ref: "#/definitions/teams-devices_allow_updates"
body.allowed_to_leave — Optional $ref: "#/definitions/teams-devices_allowed_to_leave"
body.auto_connect — Optional $ref: "#/definitions/teams-devices_auto_connect"
body.captive_portal — Optional $ref: "#/definitions/teams-devices_captive_portal"
body.disable_auto_fallback — Optional $ref: "#/definitions/teams-devices_disable_auto_fallback"
body.dns_search_suffixes — Optional $ref: "#/definitions/teams-devices_dns_search_suffixes"
body.enable_device_credential_authentication — Optional $ref: "#/definitions/teams-devices_enable_device_credential_authentication"
body.exclude — Optional $ref: "#/definitions/teams-devices_exclude_request"
body.exclude_office_ips — Optional $ref: "#/definitions/teams-devices_exclude_office_ips"
body.global_acceleration — Optional $ref: "#/definitions/teams-devices_global_acceleration"
body.include — Optional $ref: "#/definitions/teams-devices_include_request"
body.lan_allow_minutes — Optional $ref: "#/definitions/teams-devices_lan_allow_minutes"
body.lan_allow_subnet_size — Optional $ref: "#/definitions/teams-devices_lan_allow_subnet_size"
body.register_interface_ip_with_dns — Optional $ref: "#/definitions/teams-devices_register_interface_ip_with_dns"
body.sccm_vpn_boundary_support — Optional $ref: "#/definitions/teams-devices_sccm_vpn_boundary_support"
body.service_mode_v2 — Optional $ref: "#/definitions/teams-devices_service_mode_v2"
body.support_url — Optional $ref: "#/definitions/teams-devices_support_url"
body.switch_locked — Optional $ref: "#/definitions/teams-devices_switch_locked"
body.tunnel_protocol — Optional $ref: "#/definitions/teams-devices_tunnel_protocol"
body.uninstall_protection — Optional $ref: "#/definitions/teams-devices_uninstall_protection"
body.virtual_networks — Optional $ref: "#/definitions/teams-devices_virtual_networks"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a device settings profile — cloudflare.devices-create-device-settings-policy

Run Create a device settings profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body object Required
body.allow_mode_switch — Optional $ref: "#/definitions/teams-devices_allow_mode_switch"
body.allow_updates — Optional $ref: "#/definitions/teams-devices_allow_updates"
body.allowed_to_leave — Optional $ref: "#/definitions/teams-devices_allowed_to_leave"
body.auto_connect — Optional $ref: "#/definitions/teams-devices_auto_connect"
body.browser_extension_config — Optional $ref: "#/definitions/teams-devices_browser_extension_config"
body.captive_portal — Optional $ref: "#/definitions/teams-devices_captive_portal"
body.default — Optional $ref: "#/definitions/teams-devices_default"
body.description — Optional
body.description — Optional allOf[1]; $ref: "#/definitions/teams-devices_schemas-description"
body.description string Optional allOf[2]; default: ""
body.disable_auto_fallback — Optional $ref: "#/definitions/teams-devices_disable_auto_fallback"
body.dns_search_suffixes — Optional $ref: "#/definitions/teams-devices_dns_search_suffixes"
body.enable_device_credential_authentication — Optional $ref: "#/definitions/teams-devices_enable_device_credential_authentication"
body.enabled boolean Optional Whether the policy will be applied to matching devices. default: true
body.exclude — Optional $ref: "#/definitions/teams-devices_exclude_request"
body.exclude_office_ips — Optional $ref: "#/definitions/teams-devices_exclude_office_ips"
body.global_acceleration — Optional $ref: "#/definitions/teams-devices_global_acceleration"
body.include — Optional $ref: "#/definitions/teams-devices_include_request"
body.lan_allow_minutes — Optional $ref: "#/definitions/teams-devices_lan_allow_minutes"
body.lan_allow_subnet_size — Optional $ref: "#/definitions/teams-devices_lan_allow_subnet_size"
body.match — Optional $ref: "#/definitions/teams-devices_schemas-match"
body.name string Required The name of the device settings profile. maxLength: 100
body.precedence — Optional $ref: "#/definitions/teams-devices_precedence"
body.profile_type — Optional $ref: "#/definitions/teams-devices_profile_type"
body.register_interface_ip_with_dns — Optional $ref: "#/definitions/teams-devices_register_interface_ip_with_dns"
body.sccm_vpn_boundary_support — Optional $ref: "#/definitions/teams-devices_sccm_vpn_boundary_support"
body.service_mode_v2 — Optional $ref: "#/definitions/teams-devices_service_mode_v2"
body.support_url — Optional $ref: "#/definitions/teams-devices_support_url"
body.switch_locked — Optional $ref: "#/definitions/teams-devices_switch_locked"
body.tunnel_protocol — Optional $ref: "#/definitions/teams-devices_tunnel_protocol"
body.uninstall_protection — Optional $ref: "#/definitions/teams-devices_uninstall_protection"
body.virtual_networks — Optional $ref: "#/definitions/teams-devices_virtual_networks"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "Allow Developers"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Reset Split Tunnel exclude list — cloudflare.devices-delete-split-tunnel-exclude-list

Run Reset Split Tunnel exclude list with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
query object Optional additionalProperties: false
query.reset_defaults boolean Optional Deprecated and ignored. Deleting the list always restores the defaults. default: true

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Split Tunnel exclude list — cloudflare.devices-get-split-tunnel-exclude-list

Run Get the Split Tunnel exclude list with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set the Split Tunnel exclude list — cloudflare.devices-set-split-tunnel-exclude-list

Run Set the Split Tunnel exclude list with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body array Required
body[] — Optional $ref: "#/definitions/teams-devices_split_tunnel"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Reset Local Domain Fallback — cloudflare.devices-delete-local-domain-fallback-list

Run Reset Local Domain Fallback with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
query object Optional additionalProperties: false
query.reset_defaults boolean Optional Deprecated and ignored. Deleting the list always restores the defaults. default: true

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get your Local Domain Fallback list — cloudflare.devices-get-local-domain-fallback-list

Run Get your Local Domain Fallback list with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set your Local Domain Fallback list — cloudflare.devices-set-local-domain-fallback-list

Run Set your Local Domain Fallback list with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body array Required
body[] — Optional $ref: "#/definitions/teams-devices_fallback_domain"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Split Tunnel include list — cloudflare.devices-get-split-tunnel-include-list

Run Get the Split Tunnel include list with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set the Split Tunnel include list — cloudflare.devices-set-split-tunnel-include-list

Run Set the Split Tunnel include list with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body array Required
body[] — Optional $ref: "#/definitions/teams-devices_split_tunnel_include"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a device settings profile — cloudflare.devices-delete-device-settings-policy

Run Delete a device settings profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/teams-devices_schemas-uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get device settings profile by ID — cloudflare.devices-get-device-settings-policy-by-id

Run Get device settings profile by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/teams-devices_schemas-uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a device settings profile — cloudflare.devices-update-device-settings-policy

Run Update a device settings profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/teams-devices_schemas-uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body object Required
body.allow_mode_switch — Optional $ref: "#/definitions/teams-devices_allow_mode_switch"
body.allow_updates — Optional $ref: "#/definitions/teams-devices_allow_updates"
body.allowed_to_leave — Optional $ref: "#/definitions/teams-devices_allowed_to_leave"
body.auto_connect — Optional $ref: "#/definitions/teams-devices_auto_connect"
body.browser_extension_config — Optional $ref: "#/definitions/teams-devices_browser_extension_config"
body.captive_portal — Optional $ref: "#/definitions/teams-devices_captive_portal"
body.default — Optional $ref: "#/definitions/teams-devices_default"
body.description — Optional $ref: "#/definitions/teams-devices_schemas-description"
body.disable_auto_fallback — Optional $ref: "#/definitions/teams-devices_disable_auto_fallback"
body.dns_search_suffixes — Optional $ref: "#/definitions/teams-devices_dns_search_suffixes"
body.enable_device_credential_authentication — Optional $ref: "#/definitions/teams-devices_enable_device_credential_authentication"
body.enabled boolean Optional Whether the policy will be applied to matching devices.
body.exclude — Optional $ref: "#/definitions/teams-devices_exclude_request"
body.exclude_office_ips — Optional $ref: "#/definitions/teams-devices_exclude_office_ips"
body.global_acceleration — Optional $ref: "#/definitions/teams-devices_global_acceleration"
body.include — Optional $ref: "#/definitions/teams-devices_include_request"
body.lan_allow_minutes — Optional $ref: "#/definitions/teams-devices_lan_allow_minutes"
body.lan_allow_subnet_size — Optional $ref: "#/definitions/teams-devices_lan_allow_subnet_size"
body.match — Optional $ref: "#/definitions/teams-devices_schemas-match"
body.name string Optional The name of the device settings profile. maxLength: 100
body.precedence — Optional $ref: "#/definitions/teams-devices_precedence"
body.register_interface_ip_with_dns — Optional $ref: "#/definitions/teams-devices_register_interface_ip_with_dns"
body.sccm_vpn_boundary_support — Optional $ref: "#/definitions/teams-devices_sccm_vpn_boundary_support"
body.service_mode_v2 — Optional $ref: "#/definitions/teams-devices_service_mode_v2"
body.support_url — Optional $ref: "#/definitions/teams-devices_support_url"
body.switch_locked — Optional $ref: "#/definitions/teams-devices_switch_locked"
body.tunnel_protocol — Optional $ref: "#/definitions/teams-devices_tunnel_protocol"
body.uninstall_protection — Optional $ref: "#/definitions/teams-devices_uninstall_protection"
body.virtual_networks — Optional $ref: "#/definitions/teams-devices_virtual_networks"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Reset Split Tunnel exclude list — cloudflare.devices-delete-split-tunnel-exclude-list-for-a-device-settings-policy

Run Reset Split Tunnel exclude list with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/teams-devices_schemas-uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
query object Optional additionalProperties: false
query.reset_defaults boolean Optional Deprecated and ignored. Deleting the list always restores the defaults. default: true

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Split Tunnel exclude list for a device settings profile — cloudflare.devices-get-split-tunnel-exclude-list-for-a-device-settings-policy

Run Get the Split Tunnel exclude list for a device settings profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/teams-devices_schemas-uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set the Split Tunnel exclude list for a device settings profile — cloudflare.devices-set-split-tunnel-exclude-list-for-a-device-settings-policy

Run Set the Split Tunnel exclude list for a device settings profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/teams-devices_schemas-uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body array Required
body[] — Optional $ref: "#/definitions/teams-devices_split_tunnel"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Reset Local Domain Fallback — cloudflare.devices-delete-local-domain-fallback-list-for-a-device-set-d98d3493e3

Run Reset Local Domain Fallback with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/teams-devices_schemas-uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
query object Optional additionalProperties: false
query.reset_defaults boolean Optional Deprecated and ignored. Deleting the list always restores the defaults. default: true

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Local Domain Fallback list for a device settings profile — cloudflare.devices-get-local-domain-fallback-list-for-a-device-settings-policy

Run Get the Local Domain Fallback list for a device settings profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/teams-devices_schemas-uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set the Local Domain Fallback list for a device settings profile — cloudflare.devices-set-local-domain-fallback-list-for-a-device-settings-policy

Run Set the Local Domain Fallback list for a device settings profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/teams-devices_schemas-uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body array Required
body[] — Optional $ref: "#/definitions/teams-devices_fallback_domain"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Split Tunnel include list for a device settings profile — cloudflare.devices-get-split-tunnel-include-list-for-a-device-settings-policy

Run Get the Split Tunnel include list for a device settings profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/teams-devices_schemas-uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set the Split Tunnel include list for a device settings profile — cloudflare.devices-set-split-tunnel-include-list-for-a-device-settings-policy

Run Set the Split Tunnel include list for a device settings profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/teams-devices_schemas-uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body array Required
body[] — Optional $ref: "#/definitions/teams-devices_split_tunnel_include"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List posture rules — cloudflare.device-posture-rules-list-device-posture-rules

Run List posture rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create posture rule — cloudflare.device-posture-rules-create-device-posture-rule

Run Create posture rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body object Required
body.description — Optional $ref: "#/definitions/teams-devices_description"
body.expiration — Optional $ref: "#/definitions/teams-devices_expiration"
body.input — Optional $ref: "#/definitions/teams-devices_input"
body.match — Optional $ref: "#/definitions/teams-devices_match"
body.name — Required $ref: "#/definitions/teams-devices_name"
body.schedule — Optional $ref: "#/definitions/teams-devices_schedule"
body.type — Required $ref: "#/definitions/teams-devices_type"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "Admin Serial Numbers",
    "type": "file"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List posture integrations — cloudflare.device-posture-integrations-list-device-posture-integrations

Run List posture integrations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete posture integration — cloudflare.device-posture-integrations-delete-device-posture-integration

Run Delete posture integration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.integration_id — Required $ref: "#/definitions/teams-devices_uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "integration_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get posture integration — cloudflare.device-posture-integrations-device-posture-integration-details

Run Get posture integration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.integration_id — Required $ref: "#/definitions/teams-devices_uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "integration_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update posture integration — cloudflare.device-posture-integrations-update-device-posture-integration

Run Update posture integration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.integration_id — Required $ref: "#/definitions/teams-devices_uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body object Required
body.config — Optional
body.config — Optional allOf[1]; $ref: "#/definitions/teams-devices_config_request"
body.interval — Optional $ref: "#/definitions/teams-devices_interval"
body.name — Optional $ref: "#/definitions/teams-devices_components-schemas-name"
body.type — Optional $ref: "#/definitions/teams-devices_schemas-type"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "integration_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete posture rule — cloudflare.device-posture-rules-delete-device-posture-rule

Run Delete posture rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/teams-devices_uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get posture rule — cloudflare.device-posture-rules-device-posture-rules-details

Run Get posture rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/teams-devices_uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update posture rule — cloudflare.device-posture-rules-update-device-posture-rule

Run Update posture rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/teams-devices_uuid"
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body object Required
body.description — Optional $ref: "#/definitions/teams-devices_description"
body.expiration — Optional $ref: "#/definitions/teams-devices_expiration"
body.input — Optional $ref: "#/definitions/teams-devices_input"
body.match — Optional $ref: "#/definitions/teams-devices_match"
body.name — Required $ref: "#/definitions/teams-devices_name"
body.schedule — Optional $ref: "#/definitions/teams-devices_schedule"
body.type — Required $ref: "#/definitions/teams-devices_type"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "Admin Serial Numbers",
    "type": "file"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete registrations — cloudflare.delete-registrations

Run Delete registrations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Required additionalProperties: false
query.id array Required A list of registration IDs to delete.
query.id[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "id": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List registrations — cloudflare.list-registrations

Run List registrations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.user.id array Optional Filter by user ID.
query.user.id[] string Optional
query.seen_after string Optional Filter by the last_seen timestamp - returns only registrations last seen after this timestamp.
query.seen_before string Optional Filter by the last_seen timestamp - returns only registrations last seen before this timestamp.
query.status string Optional Filter by registration status. Defaults to 'active'. enum: ["active","all","revoked"]
query.registration_type — Optional Filter by registration client type. $ref: "#/definitions/teams-devices_registration_type"
query.per_page integer Optional The maximum number of devices to return in a single response.
query.search string Optional Filter by registration details.
query.sort_by string Optional The registration field to order results by. enum: ["id","user.name","user.email","last_seen_at","created_at"]
query.sort_order string Optional Sort direction. enum: ["asc","desc"]
query.cursor string Optional Opaque token indicating the starting position when requesting the next set of records. A cursor value can be obtained from the result_info.cursor field in the response.
query.id array Optional Filter by registration ID.
query.id[] string Optional
query.device.id string Optional Filter by WARP device ID.
query.policy.id string Optional Filter by the ID of the device settings profile assigned to the registration. format: "uuid"
query.include string Optional Comma-separated list of additional information that should be included in the registration response. Supported values are: "policy".

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete registration — cloudflare.delete-registration

Run Delete registration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.registration_id string Required
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "registration_id": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get registration — cloudflare.get-registration

Run Get registration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.registration_id string Required
path.account_id string Required
query object Optional additionalProperties: false
query.include string Optional Comma-separated list of additional information that should be included in the registration response. Supported values are: "policy".

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "registration_id": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get override codes — cloudflare.get-registration-override-codes

Run Get override codes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.registration_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "registration_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Global Disconnect — cloudflare.devices-resilience-retrieve-global-warp-override

Run Get Global Disconnect with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set Global Disconnect — cloudflare.devices-resilience-set-global-warp-override

Run Set Global Disconnect with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body — Required $ref: "#/definitions/teams-devices_global_warp_override_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "disconnect": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Reset device settings — cloudflare.zero-trust-accounts-delete-device-settings-for-zero-trust-account

Run Reset device settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get device settings — cloudflare.zero-trust-accounts-get-device-settings-for-zero-trust-account

Run Get device settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update device settings — cloudflare.zero-trust-accounts-patch-device-settings-for-the-zero-trust-account

Run Update device settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/teams-devices_identifier"
body — Required $ref: "#/definitions/teams-devices_zero-trust-account-device-settings"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Cloudflare colos — cloudflare.dex-endpoints-list-colos

Run List Cloudflare colos with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
query object Required additionalProperties: false
query.from string Required Start time for connection period in ISO (RFC3339 - ISO 8601) format.
query.to string Required End time for connection period in ISO (RFC3339 - ISO 8601) format.
query.sortBy string Optional Type of usage that colos should be sorted by. If unspecified, returns all Cloudflare colos sorted alphabetically. enum: ["fleet-status-usage","application-tests-usage"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "query": {
    "from": "2023-08-20T20:45:00Z",
    "to": "2023-08-24T20:45:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List account commands — cloudflare.get-commands

Run List account commands with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
query object Required additionalProperties: false
query.page number Required Page number of paginated results. default: 1; minimum: 1
query.per_page number Required Number of results per page. minimum: 1; maximum: 50
query.from string Optional Start time for the query in ISO (RFC3339 - ISO 8601) format. format: "date-time"
query.to string Optional End time for the query in ISO (RFC3339 - ISO 8601) format. format: "date-time"
query.device_id string Optional Unique identifier for a device.
query.user_email string Optional Email tied to the device.
query.command_type string Optional Optionally filter executed commands by command type. enum: ["pcap","speed-test","warp-diag"]
query.status string Optional Optionally filter executed commands by status. enum: ["PENDING_EXEC","PENDING_UPLOAD","SUCCESS","FAILED"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "query": {
    "page": 1,
    "per_page": 10
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create account commands — cloudflare.post-commands

Run Create account commands with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
body object Required
body.commands array Required List of device-level commands to execute maxItems: 20
body.commands[] object Optional
body.commands[].args object Optional Command arguments. Allowed fields depend on type.
body.commands[].args object Optional warp-diag args oneOf[1]; additionalProperties: false
body.commands[].args.test-all-routes boolean Optional Test an IP address from all included or excluded ranges. Essentially the same as running 'route get <ip>' and collecting the results. This option may increase the time taken to collect the warp-diag. oneOf[1]; default: true
body.commands[].args object Optional pcap args oneOf[2]; additionalProperties: false
body.commands[].args.max-file-size-mb number Optional Maximum file size (in MB) for the capture file. If the capture artifact exceeds the specified max file size, it will NOT be uploaded. oneOf[2]; default: 5; minimum: 1
body.commands[].args.packet-size-bytes number Optional Maximum number of bytes to save for each packet oneOf[2]; default: 160; minimum: 1
body.commands[].args.time-limit-min number Optional Limit on capture duration (in minutes) oneOf[2]; default: 5; minimum: 1
body.commands[].args object Optional speed-test args oneOf[3]; additionalProperties: false
body.commands[].args.interfaces array Optional List of interfaces to run the speed test on oneOf[3]
body.commands[].args.interfaces[] string Optional oneOf[3]; enum: ["default","tunnel"]
body.commands[].device_id string Required Unique identifier for the physical device
body.commands[].registration_id string Optional Unique identifier for the device registration. Required for multi-user devices to target the correct user session.
body.commands[].type string Required Type of command to execute on the device enum: ["pcap","speed-test","warp-diag"]
body.commands[].user_email string Required Email tied to the device

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "body": {
    "commands": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List devices eligible for remote captures — cloudflare.get-commands-eligible-devices

Run List devices eligible for remote captures with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
query object Required additionalProperties: false
query.page number Required Page number of paginated results. default: 1; minimum: 1
query.per_page number Required Number of results per page. minimum: 1; maximum: 50
query.search string Optional Filter devices by name or email.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "query": {
    "page": 1,
    "per_page": 10
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Returns account commands usage, quota, and reset time — cloudflare.get-commands-quota

Run Returns account commands usage, quota, and reset time with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Device DEX tests — cloudflare.device-dex-test-details

Run List Device DEX tests with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of results per page. default: 10; minimum: 1; maximum: 50
query.testName string Optional Filter by test name.
query.kind string Optional Filter by test type. enum: ["http","traceroute"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Device DEX test — cloudflare.device-dex-test-create-device-dex-test

Run Create Device DEX test with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
body — Required $ref: "#/definitions/digital-experience-monitoring_device-dex-test-schemas-http"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "body": {
    "name": "HTTP dash health check",
    "interval": "30m",
    "enabled": true,
    "data": {
      "host": "https://dash.cloudflare.com",
      "kind": "http",
      "method": "GET"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Device DEX test — cloudflare.device-dex-test-delete-device-dex-test

Run Delete Device DEX test with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.dex_test_id — Required Unique identifier for a DEX test. $ref: "#/definitions/digital-experience-monitoring_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "dex_test_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Device DEX test — cloudflare.device-dex-test-get-device-dex-test

Run Get Device DEX test with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.dex_test_id — Required Unique identifier for a DEX test. $ref: "#/definitions/digital-experience-monitoring_schemas-test-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "dex_test_id": "372e67954025e0ba6aaa6d586b9e0b59"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Device DEX test — cloudflare.device-dex-test-update-device-dex-test

Run Update Device DEX test with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.dex_test_id — Required Unique identifier for a DEX test. $ref: "#/definitions/digital-experience-monitoring_uuid"
body — Required $ref: "#/definitions/digital-experience-monitoring_device-dex-test-schemas-http"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "dex_test_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "name": "HTTP dash health check",
    "interval": "30m",
    "enabled": true,
    "data": {
      "host": "https://dash.cloudflare.com",
      "kind": "http",
      "method": "GET"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the latest status of a device. — cloudflare.devices-live-status

Run Get the latest status of a device. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.device_id — Required Device-specific ID, given as UUID. $ref: "#/definitions/digital-experience-monitoring_device_id"
query object Required additionalProperties: false
query.since_minutes — Required Number of minutes before current time. $ref: "#/definitions/digital-experience-monitoring_since_minutes"
query.time_now — Optional Current time in ISO format. $ref: "#/definitions/digital-experience-monitoring_time_now"
query.colo — Optional List of data centers to filter results. $ref: "#/definitions/digital-experience-monitoring_colo"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "device_id": "cb49c27f-7f97-49c5-b6f3-f7c01ead0fd7"
  },
  "query": {
    "since_minutes": 10
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the status over time for a device — cloudflare.dex-device-status-over-time

Run Get the status over time for a device with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.device_id — Required Device-specific ID, given as UUID. $ref: "#/definitions/digital-experience-monitoring_device_id"
query object Required additionalProperties: false
query.from — Required Start of the time range to query. Timestamp can be provided in ISO 8601 datetime format or milliseconds since epoch. $ref: "#/definitions/digital-experience-monitoring_timestamp"
query.to — Required End of the time range to query. Timestamp can be provided in ISO 8601 datetime format or milliseconds since epoch. $ref: "#/definitions/digital-experience-monitoring_timestamp"
query.interval string Required Time interval for aggregate time slots. enum: ["minute","hour"]
query.colo — Optional List of data centers to filter results. $ref: "#/definitions/digital-experience-monitoring_colo"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "device_id": "cb49c27f-7f97-49c5-b6f3-f7c01ead0fd7"
  },
  "query": {
    "from": "2023-10-11 00:00:00+00",
    "to": "2023-10-11 00:00:00+00",
    "interval": "minute"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List device ISPs — cloudflare.dex-endpoints-list-device-isps

Run List device ISPs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.device_id — Required Device-specific ID, given as UUID. $ref: "#/definitions/digital-experience-monitoring_uuid"
query object Required additionalProperties: false
query.page integer Optional Page number of paginated results. Mutually exclusive with cursor. default: 1; minimum: 1
query.per_page integer Required Number of items per page minimum: 1; maximum: 50
query.cursor string Optional Cursor for cursor-based pagination. Mutually exclusive with page.
query.sort_by string Optional The field to sort results by. enum: ["time_start"]; default: "time_start"
query.sort_order string Optional The order to sort results. enum: ["ASC","DESC"]; default: "DESC"
query.from string Optional Start time for the query in ISO 8601 format. format: "date-time"
query.to string Optional End time for the query in ISO 8601 format. format: "date-time"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "device_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "query": {
    "per_page": 10
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List details of devices using WARP. — cloudflare.dex-fleet-status-devices

Run List details of devices using WARP. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
query object Required additionalProperties: false
query.to — Required End of the time range to query. Timestamp can be provided in ISO 8601 datetime format or milliseconds since epoch. $ref: "#/definitions/digital-experience-monitoring_timestamp"
query.from — Required Start of the time range to query. Timestamp can be provided in ISO 8601 datetime format or milliseconds since epoch. $ref: "#/definitions/digital-experience-monitoring_timestamp"
query.page — Required Page number of paginated results. $ref: "#/definitions/digital-experience-monitoring_page"
query.per_page — Required Number of results per page. $ref: "#/definitions/digital-experience-monitoring_per_page"
query.sort_by — Optional Dimension to sort results by. $ref: "#/definitions/digital-experience-monitoring_sort_by"
query.colo — Optional Cloudflare colo airport code. $ref: "#/definitions/digital-experience-monitoring_colo"
query.device_id — Optional Device-specific ID, given as UUID. $ref: "#/definitions/digital-experience-monitoring_device_id"
query.mode — Optional The mode under which the WARP client is run. $ref: "#/definitions/digital-experience-monitoring_mode"
query.status — Optional Network status. $ref: "#/definitions/digital-experience-monitoring_status"
query.platform — Optional Operating system. $ref: "#/definitions/digital-experience-monitoring_platform"
query.version — Optional WARP client version. $ref: "#/definitions/digital-experience-monitoring_version"
query.source — Optional Source: * hourly - device details aggregated hourly, up to 7 days prior * last_seen - device details, up to 60 minutes prior. Time windows exceeding 60 minutes will be rejected from June 1st, 2026. Please use 'hourly' or 'raw' instead for longer time ranges. * raw - device details, up to 7 days prior $ref: "#/definitions/digital-experience-monitoring_source"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "query": {
    "to": "2023-10-11 00:00:00+00",
    "from": "2023-10-11 00:00:00+00",
    "page": 1,
    "per_page": 10
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get live aggregate device details by dimension — cloudflare.dex-fleet-status-live

Run Get live aggregate device details by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
query object Required additionalProperties: false
query.since_minutes — Required Number of minutes before current time. $ref: "#/definitions/digital-experience-monitoring_since_minutes"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "query": {
    "since_minutes": 10
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get over time aggregate details for devices by dimension — cloudflare.dex-fleet-status-over-time

Run Get over time aggregate details for devices by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
query object Required additionalProperties: false
query.to — Required End of the time range to query. Timestamp can be provided in ISO 8601 datetime format or milliseconds since epoch. $ref: "#/definitions/digital-experience-monitoring_timestamp"
query.from — Required Start of the time range to query. Timestamp can be provided in ISO 8601 datetime format or milliseconds since epoch. $ref: "#/definitions/digital-experience-monitoring_timestamp"
query.colo — Optional Cloudflare colo airport code. $ref: "#/definitions/digital-experience-monitoring_colo"
query.device_id — Optional Device-specific ID, given as UUID. $ref: "#/definitions/digital-experience-monitoring_device_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "query": {
    "to": "2023-10-11 00:00:00+00",
    "from": "2023-10-11 00:00:00+00"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get percentiles for an http test — cloudflare.dex-endpoints-http-test-percentiles

Run Get percentiles for an http test with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.test_id — Required Unique identifier for a specific test. $ref: "#/definitions/digital-experience-monitoring_uuid"
query object Required additionalProperties: false
query.deviceId array Optional Optionally filter result stats to a specific device(s). Cannot be used in combination with colo param.
query.deviceId[] string Optional Unique identifier for the physical device (UUID).
query.from string Required Start time for the query in ISO (RFC3339 - ISO 8601) format.
query.to string Required End time for the query in ISO (RFC3339 - ISO 8601) format.
query.colo string Optional Optionally filter result stats to a Cloudflare colo. Cannot be used in combination with deviceId param.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "test_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "query": {
    "from": "2023-09-20T17:00:00Z",
    "to": "2023-09-20T17:00:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List DEX Rules — cloudflare.list-dex-rules

Run List DEX Rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
query object Required additionalProperties: false
query.page number Required Page number of paginated results. default: 1; minimum: 1
query.per_page number Required Number of results per page. minimum: 1; maximum: 50
query.sort_order string Optional Sort direction for sort_by property. enum: ["ASC","DESC"]; default: "ASC"
query.sort_by string Optional Which property to sort results by. enum: ["name","created_at","updated_at"]; default: "name"
query.name string Optional Filter results by rule name.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "query": {
    "page": 1,
    "per_page": 10
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a DEX Rule — cloudflare.create-dex-rule

Run Create a DEX Rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
body — Required $ref: "#/definitions/digital-experience-monitoring_create_rule_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "body": {
    "name": "example",
    "match": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a DEX Rule — cloudflare.delete-dex-rule

Run Delete a DEX Rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.rule_id — Required Unique identifier of the rule. $ref: "#/definitions/digital-experience-monitoring_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get DEX Rule — cloudflare.get-dex-rule

Run Get DEX Rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.rule_id — Required Unique identifier of the rule. $ref: "#/definitions/digital-experience-monitoring_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a DEX Rule — cloudflare.update-dex-rule

Run Update a DEX Rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.rule_id — Required Unique identifier of the rule. $ref: "#/definitions/digital-experience-monitoring_uuid"
body — Required $ref: "#/definitions/digital-experience-monitoring_patch_rule_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List DEX test analytics — cloudflare.dex-endpoints-list-tests-overview

Run List DEX test analytics with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
query object Optional additionalProperties: false
query.colo string Optional Optionally filter result stats to a Cloudflare colo. Cannot be used in combination with deviceId param.
query.testName string Optional Optionally filter results by test name.
query.deviceId array Optional Optionally filter result stats to a specific device(s). Cannot be used in combination with colo param.
query.deviceId[] string Optional Unique identifier for the physical device (UUID).
query.registration_id string Optional Optionally filter results to a specific device registration. Must be used in combination with a single deviceId.
query.page number Optional Page number of paginated results default: 1; minimum: 1
query.per_page number Optional Number of items per page default: 10; minimum: 1; maximum: 50
query.kind string Optional Filter by test type. enum: ["http","traceroute"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get count of devices targeted — cloudflare.dex-endpoints-tests-unique-devices

Run Get count of devices targeted with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
query object Optional additionalProperties: false
query.testName string Optional Optionally filter results by test name.
query.deviceId array Optional Optionally filter result stats to a specific device(s). Cannot be used in combination with colo param.
query.deviceId[] string Optional Unique identifier for the physical device (UUID).

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get details for a specific traceroute test run — cloudflare.dex-endpoints-traceroute-test-result-network-path

Run Get details for a specific traceroute test run with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.test_result_id — Required Unique identifier for a specific traceroute test. $ref: "#/definitions/digital-experience-monitoring_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "test_result_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get percentiles for a traceroute test — cloudflare.dex-endpoints-traceroute-test-percentiles

Run Get percentiles for a traceroute test with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
path.test_id — Required Unique identifier for a specific test. $ref: "#/definitions/digital-experience-monitoring_uuid"
query object Required additionalProperties: false
query.deviceId array Optional Optionally filter result stats to a specific device(s). Cannot be used in combination with colo param.
query.deviceId[] string Optional
query.from string Required Start time for the query in ISO (RFC3339 - ISO 8601) format.
query.to string Required End time for the query in ISO (RFC3339 - ISO 8601) format.
query.colo string Optional Optionally filter result stats to a Cloudflare colo. Cannot be used in combination with deviceId param.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823",
    "test_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "query": {
    "from": "2023-09-20T17:00:00Z",
    "to": "2023-09-20T17:00:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List WARP change events. — cloudflare.list-warp-change-events

Run List WARP change events. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Unique Cloudflare account ID. $ref: "#/definitions/digital-experience-monitoring_account_identifier"
query object Required additionalProperties: false
query.page number Required Page number of paginated results. default: 1; minimum: 1
query.per_page number Required Number of results per page. minimum: 1; maximum: 50
query.from string Required Start time for the query in ISO (RFC3339 - ISO 8601) format.
query.to string Required End time for the query in ISO (RFC3339 - ISO 8601) format.
query.type string Optional Filter events by type 'config' or 'toggle'. enum: ["config","toggle"]
query.toggle string Optional Filter events by type toggle value. Applicable to type='toggle' events only. enum: ["on","off"]
query.config_name string Optional Filter events by WARP configuration name changed from or to. Applicable to type='config' events only.
query.account_name string Optional Filter events by account name.
query.sort_order string Optional Sort response by event timestamp. enum: ["ASC","DESC"]; default: "ASC"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "query": {
    "page": 1,
    "per_page": 10,
    "from": "2023-09-20T17:00:00Z",
    "to": "2023-09-20T17:00:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Endpoint Health Checks — cloudflare.diagnostics-endpoint-healthcheck-list

Run List Endpoint Health Checks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-transit_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Endpoint Health Check — cloudflare.diagnostics-endpoint-healthcheck-create

Run Endpoint Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-transit_identifier"
body — Required $ref: "#/definitions/magic-transit_endpoint_health_check"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "check_type": "icmp",
    "endpoint": "203.0.113.1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Endpoint Health Check — cloudflare.diagnostics-endpoint-healthcheck-delete

Run Delete Endpoint Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-transit_identifier"
path.id — Required $ref: "#/definitions/magic-transit_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Endpoint Health Check — cloudflare.diagnostics-endpoint-healthcheck-get

Run Get Endpoint Health Check with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-transit_identifier"
path.id — Required $ref: "#/definitions/magic-transit_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Endpoint Health Check — cloudflare.diagnostics-endpoint-healthcheck-update

Run Update Endpoint Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-transit_identifier"
path.id — Required $ref: "#/definitions/magic-transit_uuid"
body — Required $ref: "#/definitions/magic-transit_endpoint_health_check"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "check_type": "icmp",
    "endpoint": "203.0.113.1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Traceroute — cloudflare.diagnostics-traceroute

Run Traceroute with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-transit_identifier"
body object Required
body.colos — Optional $ref: "#/definitions/magic-transit_colos"
body.options — Optional $ref: "#/definitions/magic-transit_options"
body.targets — Required $ref: "#/definitions/magic-transit_targets"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "targets": [
      "203.0.113.1",
      "cloudflare.com"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List custom prompt topics — cloudflare.dlp-custom-prompt-topics-list

Run List custom prompt topics with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create custom prompt topic — cloudflare.dlp-custom-prompt-topics-create

Run Create custom prompt topic with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_NewCustomPromptTopic"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example",
    "enabled": false,
    "topic": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete custom prompt topic — cloudflare.dlp-custom-prompt-topics-delete

Run Delete custom prompt topic with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.entry_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "entry_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get custom prompt topic — cloudflare.dlp-custom-prompt-topics-get

Run Get custom prompt topic with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.entry_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "entry_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update custom prompt topic — cloudflare.dlp-custom-prompt-topics-update

Run Update custom prompt topic with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.entry_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_CustomPromptTopicUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "entry_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "example",
    "enabled": false,
    "topic": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve all data classes in an account — cloudflare.dlp-data-classes-list

Run Retrieve all data classes in an account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Creates a new data class — cloudflare.dlp-data-classes-create

Run Creates a new data class with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_NewDataClass"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example",
    "expression": "example",
    "sensitivity_levels": [],
    "data_tags": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a single data class — cloudflare.dlp-data-classes-delete

Run Delete a single data class with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.data_class_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "data_class_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve a specific data class — cloudflare.dlp-data-classes-read

Run Retrieve a specific data class with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.data_class_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "data_class_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the attributes of a single data class — cloudflare.dlp-data-classes-update

Run Update the attributes of a single data class with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.data_class_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_DataClassUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "data_class_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve all data tag categories in an account — cloudflare.dlp-data-tag-categories-list

Run Retrieve all data tag categories in an account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Creates a new data tag category. — cloudflare.dlp-data-tag-categories-create

Run Creates a new data tag category. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_NewDataTagCategory"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a single data tag category. — cloudflare.dlp-data-tag-categories-delete

Run Delete a single data tag category. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.category_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve a specific data tag category. — cloudflare.dlp-data-tag-categories-read

Run Retrieve a specific data tag category. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.category_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the attributes of a single data tag category. — cloudflare.dlp-data-tag-categories-update

Run Update the attributes of a single data tag category. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.category_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_DataTagCategoryUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve all data tags in a data tag category — cloudflare.dlp-data-tags-list

Run Retrieve all data tags in a data tag category with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.category_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Creates a new data tag. — cloudflare.dlp-data-tags-create

Run Creates a new data tag. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.category_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_NewDataTag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a single data tag. — cloudflare.dlp-data-tags-delete

Run Delete a single data tag. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.category_id string Required format: "uuid"
path.tag_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000",
    "tag_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve a specific data tag. — cloudflare.dlp-data-tags-read

Run Retrieve a specific data tag. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.category_id string Required format: "uuid"
path.tag_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000",
    "tag_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the attributes of a single data tag. — cloudflare.dlp-data-tags-update

Run Update the attributes of a single data tag. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.category_id string Required format: "uuid"
path.tag_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_DataTagUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "category_id": "00000000-0000-4000-8000-000000000000",
    "tag_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve all data tag category templates in an account — cloudflare.dlp-data-tag-category-templates-list

Run Retrieve all data tag category templates in an account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve a specific data tag category template. — cloudflare.dlp-data-tag-category-template-read

Run Retrieve a specific data tag category template. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.template_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "template_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch all datasets — cloudflare.dlp-datasets-read-all

Run Fetch all datasets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new dataset — cloudflare.dlp-datasets-create

Run Create a new dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_NewDataset"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a dataset — cloudflare.dlp-datasets-delete

Run Delete a dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.dataset_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch a specific dataset — cloudflare.dlp-datasets-read

Run Fetch a specific dataset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.dataset_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update details about a dataset — cloudflare.dlp-datasets-update

Run Update details about a dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.dataset_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_DatasetUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Prepare to upload a new version of a dataset — cloudflare.dlp-datasets-create-version

Run Prepare to upload a new version of a dataset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.dataset_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Sets the column information for a multi-column upload — cloudflare.dlp-datasets-define-columns

Run Sets the column information for a multi-column upload with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.dataset_id string Required format: "uuid"
path.version integer Required
body array Required
body[] — Optional $ref: "#/definitions/dlp_NewDatasetColumn"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "dataset_id": "00000000-0000-4000-8000-000000000000",
    "version": 1
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve data about all document fingerprints. — cloudflare.dlp-document-fingerprints-read-all

Run Retrieve data about all document fingerprints. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Creates a new document fingerprint. — cloudflare.dlp-document-fingerprints-create

Run Creates a new document fingerprint. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_NewDocumentFingerprint"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example",
    "match_percent": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a single document fingerprint. — cloudflare.dlp-document-fingerprints-delete

Run Delete a single document fingerprint. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.document_fingerprint_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "document_fingerprint_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve data about a specific document fingerprint. — cloudflare.dlp-document-fingerprints-read

Run Retrieve data about a specific document fingerprint. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.document_fingerprint_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "document_fingerprint_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the attributes of a single document fingerprint. — cloudflare.dlp-document-fingerprints-update

Run Update the attributes of a single document fingerprint. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.document_fingerprint_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_UpdateDocumentFingerprint"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "document_fingerprint_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get mapping — cloudflare.dlp-email-scanner-get-account-mapping

Run Get mapping with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create mapping — cloudflare.dlp-email-scanner-create-account-mapping

Run Create mapping with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_UpdateAddinAccountMapping"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "auth_requirements": {
      "allowed_microsoft_organizations": [],
      "type": "Org"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all email scanner rules — cloudflare.dlp-email-scanner-list-all-rules

Run List all email scanner rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update email scanner rule priorities — cloudflare.dlp-email-scanner-update-rule-priorities

Run Update email scanner rule priorities with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_UpdateEmailRulePriorities"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "new_priorities": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create email scanner rule — cloudflare.dlp-email-scanner-create-rule

Run Create email scanner rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_CreateEmailRule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example",
    "enabled": false,
    "conditions": [],
    "action": {
      "action": "Block"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete email scanner rule — cloudflare.dlp-email-scanner-delete-rule

Run Delete email scanner rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.rule_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "rule_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an email scanner rule — cloudflare.dlp-email-scanner-get-rule

Run Get an email scanner rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.rule_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "rule_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update email scanner rule — cloudflare.dlp-email-scanner-update-rule

Run Update email scanner rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.rule_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_CreateEmailRule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "rule_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "example",
    "enabled": false,
    "conditions": [],
    "action": {
      "action": "Block"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all entries — cloudflare.dlp-entries-list-all-entries

Run List all entries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create custom entry — cloudflare.dlp-entries-create-entry

Run Create custom entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_NewEntry"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example",
    "pattern": {
      "regex": "example"
    },
    "enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update custom entry — cloudflare.dlp-entries-update-custom-entry

Run Update custom entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.entry_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_CustomEntryUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "entry_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "example",
    "pattern": {
      "regex": "example"
    },
    "enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create integration entry — cloudflare.dlp-entries-create-integration-entry

Run Create integration entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_NewPredefinedEntry"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "enabled": false,
    "entry_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete integration entry — cloudflare.dlp-entries-delete-integration-entry

Run Delete integration entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.entry_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "entry_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update integration entry — cloudflare.dlp-entries-update-integration-entry

Run Update integration entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.entry_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_PredefinedEntryUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "entry_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create predefined entry — cloudflare.dlp-entries-create-predefined-entry

Run Create predefined entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_NewPredefinedEntry"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "enabled": false,
    "entry_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete predefined entry — cloudflare.dlp-entries-delete-predefined-entry

Run Delete predefined entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.entry_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "entry_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update predefined entry — cloudflare.dlp-entries-update-predefined-entry

Run Update predefined entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.entry_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_PredefinedEntryUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "entry_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete custom entry — cloudflare.dlp-entries-delete-entry

Run Delete custom entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.entry_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "entry_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get DLP Entry — cloudflare.dlp-entries-get-dlp-entry

Run Get DLP Entry with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.entry_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "entry_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update entry — cloudflare.dlp-entries-update-entry

Run Update entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.entry_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_EntryUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "entry_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "example",
    "pattern": {
      "regex": "example"
    },
    "type": "custom",
    "enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch limits associated with DLP for account — cloudflare.dlp-limits-get

Run Fetch limits associated with DLP for account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate a DLP regex pattern — cloudflare.dlp-pattern-validate

Run Validate a DLP regex pattern with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body — Required $ref: "#/definitions/dlp_RegexValidationQuery"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "regex": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all profiles — cloudflare.dlp-profiles-list-all-profiles

Run List all profiles with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.all boolean Optional Return all profiles, including those that current account does not have access to.
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all custom profiles — cloudflare.dlp-profiles-list-all-custom-profiles

Run List all custom profiles with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create custom profile — cloudflare.dlp-profiles-create-custom-profiles

Run Create custom profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_NewCustomProfile"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete custom profile — cloudflare.dlp-profiles-delete-custom-profile

Run Delete custom profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get custom profile — cloudflare.dlp-profiles-get-custom-profile

Run Get custom profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update custom profile — cloudflare.dlp-profiles-update-custom-profile

Run Update custom profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_CustomProfileUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete integration profile — cloudflare.dlp-profiles-delete-integration-profile

Run Delete integration profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.recursive integer Optional Set to 1 to also delete the entries owned by the profile and remove all references to them, as listed by the references endpoint. Required if the profile owns any entries. Defaults to 0. minimum: 0; maximum: 1
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List integration profile references — cloudflare.dlp-profiles-list-integration-profile-references

Run List integration profile references with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create predefined profile — cloudflare.dlp-profiles-create-predefined-profile

Run Create predefined profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_NewPredefinedProfile"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "profile_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete predefined profile — cloudflare.dlp-profiles-delete-predefined-profile

Run Delete predefined profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get predefined profile — cloudflare.dlp-profiles-get-predefined-profile

Run Get predefined profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update predefined profile — cloudflare.dlp-profiles-update-predefined-profile

Run Update predefined profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_PredefinedProfileUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get predefined profile config — cloudflare.dlp-profiles-get-predefined-profile-config

Run Get predefined profile config with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create predefined profile — cloudflare.dlp-profiles-create-predefined-profile-config

Run Create predefined profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_PredefinedProfileConfigUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update predefined profile config — cloudflare.dlp-profiles-update-predefined-profile-config

Run Update predefined profile config with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_PredefinedProfileConfigUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get DLP Profile — cloudflare.dlp-profiles-get-dlp-profile

Run Get DLP Profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.profile_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "profile_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve all sensitivity groups in an account — cloudflare.dlp-sensitivity-groups-list

Run Retrieve all sensitivity groups in an account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Creates a new sensitivity group. — cloudflare.dlp-sensitivity-groups-create

Run Creates a new sensitivity group. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_NewSensitivityGroup"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve all sensitivity group templates in an account — cloudflare.dlp-sensitivity-group-templates-list

Run Retrieve all sensitivity group templates in an account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve a specific sensitivity group template. — cloudflare.dlp-sensitivity-group-template-read

Run Retrieve a specific sensitivity group template. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.template_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "template_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a single sensitivity group. — cloudflare.dlp-sensitivity-groups-delete

Run Delete a single sensitivity group. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.sensitivity_group_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "sensitivity_group_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve a specific sensitivity group. — cloudflare.dlp-sensitivity-groups-read

Run Retrieve a specific sensitivity group. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.sensitivity_group_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "sensitivity_group_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the attributes of a single sensitivity group. — cloudflare.dlp-sensitivity-groups-update

Run Update the attributes of a single sensitivity group. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.sensitivity_group_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_SensitivityGroupUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "sensitivity_group_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve the ordered list of level IDs for a sensitivity group. — cloudflare.dlp-sensitivity-groups-get-level-order

Run Retrieve the ordered list of level IDs for a sensitivity group. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.sensitivity_group_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "sensitivity_group_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set the ordering of levels within a sensitivity group. — cloudflare.dlp-sensitivity-groups-put-level-order

Run Set the ordering of levels within a sensitivity group. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.sensitivity_group_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_SensitivityLevelOrder"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "sensitivity_group_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "level_ids": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve all sensitivity levels in a sensitivity group — cloudflare.dlp-sensitivity-levels-list

Run Retrieve all sensitivity levels in a sensitivity group with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.sensitivity_group_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "sensitivity_group_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Creates a new sensitivity level. — cloudflare.dlp-sensitivity-levels-create

Run Creates a new sensitivity level. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.sensitivity_group_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_NewSensitivityLevel"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "sensitivity_group_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a single sensitivity level. — cloudflare.dlp-sensitivity-levels-delete

Run Delete a single sensitivity level. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.sensitivity_group_id string Required format: "uuid"
path.sensitivity_level_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "sensitivity_group_id": "00000000-0000-4000-8000-000000000000",
    "sensitivity_level_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve a specific sensitivity level. — cloudflare.dlp-sensitivity-levels-read

Run Retrieve a specific sensitivity level. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.sensitivity_group_id string Required format: "uuid"
path.sensitivity_level_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "sensitivity_group_id": "00000000-0000-4000-8000-000000000000",
    "sensitivity_level_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the attributes of a single sensitivity level. — cloudflare.dlp-sensitivity-levels-update

Run Update the attributes of a single sensitivity level. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.sensitivity_group_id string Required format: "uuid"
path.sensitivity_level_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_SensitivityLevelUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "sensitivity_group_id": "00000000-0000-4000-8000-000000000000",
    "sensitivity_level_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete (reset) DLP account-level settings to initial values. — cloudflare.dlp-settings-delete

Run Delete (reset) DLP account-level settings to initial values. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get DLP account-level settings. — cloudflare.dlp-settings-get

Run Get DLP account-level settings. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Partially update DLP account-level settings. — cloudflare.dlp-settings-edit

Run Partially update DLP account-level settings. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_DlpSettingsUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update DLP account-level settings (full replacement). — cloudflare.dlp-settings-update

Run Update DLP account-level settings (full replacement). with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_DlpSettingsUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List validators — cloudflare.dlp-validators-list-validators

Run List validators with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.kind — Optional Only return validators of this kind. Omit to return every kind.
query.kind — Optional allOf[1]; $ref: "#/definitions/dlp_ValidatorKind"
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List proximity word validators — cloudflare.dlp-validators-list-proximity-words-validators

Run List proximity word validators with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a proximity word validator — cloudflare.dlp-validators-create-proximity-words-validator

Run Create a proximity word validator with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_ProximityWordValidatorWrite"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "HIPAA context words",
    "words": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a proximity word validator — cloudflare.dlp-validators-delete-proximity-words-validator

Run Delete a proximity word validator with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.validator_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "validator_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a proximity word validator — cloudflare.dlp-validators-get-proximity-words-validator

Run Get a proximity word validator with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.validator_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "validator_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a proximity word validator — cloudflare.dlp-validators-update-proximity-words-validator

Run Update a proximity word validator with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.validator_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_ProximityWordValidatorWrite"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "validator_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "HIPAA context words",
    "words": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List worker validators — cloudflare.dlp-validators-list-worker-validators

Run List worker validators with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a worker validator — cloudflare.dlp-validators-create-worker-validator

Run Create a worker validator with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_WorkerValidatorWrite"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "Invoice scorer",
    "script_tag": "0123456789abcdef0123456789abcdef"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a worker validator — cloudflare.dlp-validators-delete-worker-validator

Run Delete a worker validator with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.validator_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "validator_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a worker validator — cloudflare.dlp-validators-get-worker-validator

Run Get a worker validator with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.validator_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "validator_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a worker validator — cloudflare.dlp-validators-update-worker-validator

Run Update a worker validator with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.validator_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_WorkerValidatorWrite"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "validator_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "Invoice scorer",
    "script_tag": "0123456789abcdef0123456789abcdef"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a worker validator status — cloudflare.dlp-validators-get-worker-validator-status

Run Get a worker validator status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.validator_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "validator_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a validator — cloudflare.dlp-validators-get-validator

Run Get a validator with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.validator_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "validator_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List DLS prefix bindings for an account — cloudflare.publiclistprefixbindings

Run List DLS prefix bindings for an account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dls_account_identifier"
query object Optional additionalProperties: false
query.cursor string Optional Opaque token for cursor-based pagination. Omit for the first page. Pass the value from a previous response to fetch the next page.
query.per_page integer Optional default: 25; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a DLS prefix binding — cloudflare.publiccreateprefixbinding

Run Create a DLS prefix binding with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dls_account_identifier"
body — Required $ref: "#/definitions/dls_CreatePrefixBindingInput"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "prefix_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "cidr": "10.0.1.0/24",
    "region_key": "eu"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a DLS prefix binding — cloudflare.publicdeleteprefixbinding

Run Delete a DLS prefix binding with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dls_account_identifier"
path.binding_id string Required Unique identifier for the prefix binding.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "binding_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a DLS prefix binding — cloudflare.publicgetprefixbinding

Run Get a DLS prefix binding with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dls_account_identifier"
path.binding_id string Required Unique identifier for the prefix binding.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "binding_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a DLS prefix binding — cloudflare.publicpatchprefixbinding

Run Update a DLS prefix binding with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dls_account_identifier"
path.binding_id string Required Unique identifier for the prefix binding.
body — Required $ref: "#/definitions/dls_UpdatePrefixBindingInput"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "binding_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890"
  },
  "body": {
    "region_key": "eu"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List DLS regions for an account — cloudflare.publiclistregions

Run List DLS regions for an account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dls_account_identifier"
query object Optional additionalProperties: false
query.cursor string Optional Opaque token for cursor-based pagination. Omit for the first page. Pass the value from a previous response to fetch the next page.
query.per_page integer Optional default: 25; minimum: 1; maximum: 100
query.type string Optional Filter regions by type. Omit to return all regions. enum: ["managed","custom"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a DLS region — cloudflare.publicgetregion

Run Get a DLS region with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dls_account_identifier"
path.region_id string Required UUID of the region (custom or managed) or region_key of a managed region. maxLength: 255

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "region_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List DNS Firewall Clusters — cloudflare.dns-firewall-list-dns-firewall-clusters

Run List DNS Firewall Clusters with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-firewall_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results default: 1; minimum: 1
query.per_page number Optional Number of clusters per page default: 20; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete DNS Firewall Cluster — cloudflare.dns-firewall-delete-dns-firewall-cluster

Run Delete DNS Firewall Cluster with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dns_firewall_id — Required $ref: "#/definitions/dns-firewall_identifier"
path.account_id — Required $ref: "#/definitions/dns-firewall_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dns_firewall_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

DNS Firewall Cluster Details — cloudflare.dns-firewall-dns-firewall-cluster-details

Run DNS Firewall Cluster Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dns_firewall_id — Required $ref: "#/definitions/dns-firewall_identifier"
path.account_id — Required $ref: "#/definitions/dns-firewall_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dns_firewall_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update DNS Firewall Cluster — cloudflare.dns-firewall-update-dns-firewall-cluster

Run Update DNS Firewall Cluster with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dns_firewall_id — Required $ref: "#/definitions/dns-firewall_identifier"
path.account_id — Required $ref: "#/definitions/dns-firewall_identifier"
body — Required $ref: "#/definitions/dns-firewall_dns-firewall-cluster-patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dns_firewall_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Show DNS Firewall Cluster Reverse DNS — cloudflare.dns-firewall-show-dns-firewall-cluster-reverse-dns

Run Show DNS Firewall Cluster Reverse DNS with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dns_firewall_id — Required $ref: "#/definitions/dns-firewall_identifier"
path.account_id — Required $ref: "#/definitions/dns-firewall_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dns_firewall_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update DNS Firewall Cluster Reverse DNS — cloudflare.dns-firewall-update-dns-firewall-cluster-reverse-dns

Run Update DNS Firewall Cluster Reverse DNS with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dns_firewall_id — Required $ref: "#/definitions/dns-firewall_identifier"
path.account_id — Required $ref: "#/definitions/dns-firewall_identifier"
body — Required $ref: "#/definitions/dns-firewall_dns-firewall-reverse-dns-patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dns_firewall_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get DNS Record Usage for Account — cloudflare.dns-records-for-an-account-get-usage

Run Get DNS Record Usage for Account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-records_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Show DNS Settings — cloudflare.dns-settings-for-an-account-list-dns-settings

Run Show DNS Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update DNS Settings — cloudflare.dns-settings-for-an-account-update-dns-settings

Run Update DNS Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"
body — Required $ref: "#/definitions/dns-settings_account_settings_patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Custom Nameserver Sets — cloudflare.dns-settings-for-an-account-list-custom-nameserver-sets

Run List Custom Nameserver Sets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"
query object Optional additionalProperties: false
query.page — Optional $ref: "#/definitions/dns-settings_page"
query.per_page integer Optional Number of results per page. default: 100; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Custom Nameserver Set — cloudflare.dns-settings-for-an-account-create-custom-nameserver-set

Run Create Custom Nameserver Set with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"
body — Required $ref: "#/definitions/dns-settings_nameserver-set-create"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Production nameservers",
    "nameservers": [
      {
        "name": "ns1.example.com"
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Custom Nameserver Set — cloudflare.dns-settings-for-an-account-delete-custom-nameserver-set

Run Delete Custom Nameserver Set with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"
path.nameserver_set_id — Required $ref: "#/definitions/dns-settings_nameserver-set-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "nameserver_set_id": "0123456789abcdef0123456789abcdef"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Custom Nameserver Set — cloudflare.dns-settings-for-an-account-get-custom-nameserver-set

Run Get Custom Nameserver Set with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"
path.nameserver_set_id — Required $ref: "#/definitions/dns-settings_nameserver-set-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "nameserver_set_id": "0123456789abcdef0123456789abcdef"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Custom Nameserver Set — cloudflare.dns-settings-for-an-account-update-custom-nameserver-set

Run Update Custom Nameserver Set with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"
path.nameserver_set_id — Required $ref: "#/definitions/dns-settings_nameserver-set-id"
body — Required $ref: "#/definitions/dns-settings_nameserver-set-patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "nameserver_set_id": "0123456789abcdef0123456789abcdef"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Internal DNS Views — cloudflare.dns-views-for-an-account-list-internal-dns-views

Run List Internal DNS Views with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"
query object Optional additionalProperties: false
query.name string Optional Exact value of the DNS view name. This is a convenience alias for name.exact.
query.name.exact string Optional Exact value of the DNS view name.
query.name.contains string Optional Substring of the DNS view name.
query.name.startswith string Optional Prefix of the DNS view name.
query.name.endswith string Optional Suffix of the DNS view name.
query.zone_id string Optional A zone ID that exists in the zones list for the view.
query.zone_name string Optional A zone name that exists in the zones list for the view.
query.match — Optional $ref: "#/definitions/dns-settings_match"
query.page — Optional $ref: "#/definitions/dns-settings_page"
query.per_page — Optional $ref: "#/definitions/dns-settings_per_page"
query.order — Optional $ref: "#/definitions/dns-settings_order"
query.direction — Optional $ref: "#/definitions/dns-settings_direction"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Internal DNS View — cloudflare.dns-views-for-an-account-create-internal-dns-views

Run Create Internal DNS View with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"
body — Required $ref: "#/definitions/dns-settings_dns-view-post"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "my view",
    "zones": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Internal DNS View — cloudflare.dns-views-for-an-account-delete-internal-dns-view

Run Delete Internal DNS View with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"
path.view_id — Required $ref: "#/definitions/dns-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "view_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

DNS Internal View Details — cloudflare.dns-views-for-an-account-get-internal-dns-view

Run DNS Internal View Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"
path.view_id — Required $ref: "#/definitions/dns-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "view_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Internal DNS View — cloudflare.dns-views-for-an-account-update-internal-dns-view

Run Update Internal DNS View with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/dns-settings_identifier"
path.view_id — Required $ref: "#/definitions/dns-settings_identifier"
body — Required $ref: "#/definitions/dns-settings_dns-view-patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "view_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get monthly report — cloudflare.email_security_get_monthly_report

Run Get monthly report with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Search email messages — cloudflare.email_security_investigate

Run Search email messages with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.start string Optional The beginning of the search date range. Defaults to now - 30 days. Must not be in the future. format: "date-time"
query.end string Optional The end of the search date range. Defaults to now. format: "date-time"
query.query string Optional Space-delimited term matched case-insensitively against message metadata — sender, recipient, subject, attachment names and hashes, and message ID.
query.detections_only boolean Optional Whether to include only detections in search results. default: true
query.final_disposition string Optional Dispositions to filter by. enum: ["MALICIOUS","SUSPICIOUS","SPOOF","SPAM","BULK","NONE"]
query.metric string Optional Metric to aggregate the results by.
query.message_action string Optional Message actions to filter by. enum: ["PREVIEW","QUARANTINE_RELEASED","MOVED"]
query.recipient string Optional Filter by recipient. Matches an email address or a domain.
query.sender string Optional Filter by sender. Matches an email address or a domain.
query.smtp_helo_ip string Optional Matches messages whose SMTP HELO server IP address equals this value.
query.alert_id string Optional Filter by alert ID.
query.domain string Optional Filter by a domain found in the email — sender domain, recipient domain, or a domain in a link.
query.message_id string Optional Filter by the RFC 5322 Message-ID header.
query.subject string Optional Search for messages containing individual keywords in any order within the subject.
query.delivery_status — Optional Delivery status to filter by. $ref: "#/definitions/email-security_MessageDeliveryStatus"
query.cursor string Optional Pagination cursor from the previous response's result_info.
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000
query.page integer | null Optional Deprecated: Use cursor pagination instead. End of life: November 1, 2026. default: 1; minimum: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List bulk action jobs — cloudflare.email_security_get_bulk_jobs

Run List bulk action jobs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000
query.action_type string Optional Filter jobs by the action they perform. enum: ["MOVE","RELEASE"]
query.status — Optional Filter jobs by their processing status. $ref: "#/definitions/email-security_BulkJobStatus"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a bulk action job — cloudflare.email_security_create_bulk_job

Run Create a bulk action job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body — Required $ref: "#/definitions/email-security_BulkActionRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "action": "MOVE",
    "search_params": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a bulk action job — cloudflare.email_security_delete_bulk_job

Run Delete a bulk action job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.job_id — Required Identifier of the bulk action job. $ref: "#/definitions/email-security_BulkJobId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "job_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get bulk action job details — cloudflare.email_security_get_bulk_job

Run Get bulk action job details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.job_id — Required Identifier of the bulk action job. $ref: "#/definitions/email-security_BulkJobId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "job_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Cancel a bulk action job — cloudflare.email_security_cancel_bulk_job

Run Cancel a bulk action job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.job_id — Required Identifier of the bulk action job to cancel. $ref: "#/definitions/email-security_BulkJobId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "job_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List messages for a bulk action job — cloudflare.email_security_get_bulk_job_messages

Run List messages for a bulk action job with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.job_id — Required Identifier of the bulk action job whose messages to list. $ref: "#/definitions/email-security_BulkJobId"
query object Optional additionalProperties: false
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000
query.status — Optional Filter the job's messages by their processing status. $ref: "#/definitions/email-security_BulkActionMessageStatus"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "job_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Move messages — cloudflare.email_security_post_bulk_move

Run Move messages with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body object Required
body.destination — Required $ref: "#/definitions/email-security_MailboxDestination"
body.expected_disposition string | null Optional Nonfunctional field. End of life: December 1, 2026.
body.expected_disposition — Optional allOf[1]; $ref: "#/definitions/email-security_DispositionLabel"
body.ids array Required List of message IDs to move. minItems: 1; maxItems: 1000
body.ids[] — Optional $ref: "#/definitions/email-security_InvestigateId"
body.postfix_ids array Optional Deprecated, use ids instead. End of life: November 1, 2026.
body.postfix_ids[] — Optional $ref: "#/definitions/email-security_PostfixId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination": "Inbox",
    "ids": [
      "4Njp3P0STMz2c02Q-2024-01-05T10:00:00-12345678"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Generate preview for a non-detection message — cloudflare.email_security_post_preview

Run Generate preview for a non-detection message with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body object Required
body.id — Required $ref: "#/definitions/email-security_InvestigateId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "id": "4Njp3P0STMz2c02Q-2024-01-05T10:00:00-12345678"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Release messages from quarantine — cloudflare.email_security_post_release

Run Release messages from quarantine with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body object Required
body.ids array Required Investigate IDs of the messages to release. minItems: 1
body.ids[] — Optional $ref: "#/definitions/email-security_InvestigateId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "ids": [
      "4Njp3P0STMz2c02Q-2024-01-05T10:00:00-12345678"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get message details — cloudflare.email_security_get_message

Run Get message details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.investigate_id — Required $ref: "#/definitions/email-security_InvestigateId"
query object Optional additionalProperties: false
query.submission boolean Optional When true, search the submissions datastore only. When false or omitted, search the regular datastore only.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "investigate_id": "4Njp3P0STMz2c02Q-2024-01-05T10:00:00-12345678"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List post-delivery actions for a message — cloudflare.email_security_get_message_action_log

Run List post-delivery actions for a message with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.investigate_id — Required $ref: "#/definitions/email-security_InvestigateId"
query object Optional additionalProperties: false
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "investigate_id": "4Njp3P0STMz2c02Q-2024-01-05T10:00:00-12345678"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get message detection details — cloudflare.email_security_get_message_detections

Run Get message detection details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.investigate_id — Required $ref: "#/definitions/email-security_InvestigateId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "investigate_id": "4Njp3P0STMz2c02Q-2024-01-05T10:00:00-12345678"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Move a message — cloudflare.email_security_post_message_move

Run Move a message with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.investigate_id — Required $ref: "#/definitions/email-security_InvestigateId"
body object Required
body.destination — Required $ref: "#/definitions/email-security_MailboxDestination"
body.expected_disposition string | null Optional Nonfunctional field. End of life: December 1, 2026.
body.expected_disposition — Optional allOf[1]; $ref: "#/definitions/email-security_DispositionLabel"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "investigate_id": "4Njp3P0STMz2c02Q-2024-01-05T10:00:00-12345678"
  },
  "body": {
    "destination": "Inbox"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get preview for a detection — cloudflare.email_security_get_message_preview

Run Get preview for a detection with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.investigate_id — Required $ref: "#/definitions/email-security_InvestigateId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "investigate_id": "4Njp3P0STMz2c02Q-2024-01-05T10:00:00-12345678"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get raw email content — cloudflare.email_security_get_message_raw

Run Get raw email content with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.investigate_id — Required $ref: "#/definitions/email-security_InvestigateId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "investigate_id": "4Njp3P0STMz2c02Q-2024-01-05T10:00:00-12345678"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get email trace — cloudflare.email_security_get_message_trace

Run Get email trace with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.investigate_id — Required $ref: "#/definitions/email-security_InvestigateId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "investigate_id": "4Njp3P0STMz2c02Q-2024-01-05T10:00:00-12345678"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List PhishGuard reports — cloudflare.email_security_get_phishguard_reports

Run List PhishGuard reports with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.start string Optional Start of the time range (RFC3339). Takes precedence over from_date. format: "date-time"
query.end string Optional End of the time range (RFC3339). Takes precedence over to_date. format: "date-time"
query.from_date string Optional Deprecated, use start instead. Start date in YYYY-MM-DD format. format: "date"
query.to_date string Optional Deprecated, use end instead. End date in YYYY-MM-DD format. format: "date"
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List email allow policies — cloudflare.email_security_list_allow_policies

Run List email allow policies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000
query.search string Optional Search term for filtering records. Behavior may change.
query.order string Optional Field to sort by. enum: ["pattern","created_at"]
query.direction string Optional The sorting direction. enum: ["asc","desc"]
query.is_exempt_recipient boolean Optional Filter to show only policies where messages to the recipient bypass all detections.
query.is_trusted_sender boolean Optional Filter to show only policies where messages from the sender bypass all detections and link following.
query.is_acceptable_sender boolean Optional Filter to show only policies where messages from the sender are exempted from Spam, Spoof, and Bulk dispositions (not Malicious or Suspicious).
query.verify_sender boolean Optional Filter to show only policies that enforce DMARC, SPF, or DKIM authentication.
query.pattern_type — Optional Filter by pattern type.
query.pattern_type — Optional allOf[1]; $ref: "#/definitions/email-security_PatternType"
query.pattern string Optional Filter by exact pattern value.
query.expired boolean Optional Filter to return only expired policies (true) or only policies that still apply (false). Omit to return both.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create email allow policy — cloudflare.email_security_create_allow_policy

Run Create email allow policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body — Required $ref: "#/definitions/email-security_CreateAllowPolicy"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "is_exempt_recipient": false,
    "is_trusted_sender": true,
    "is_acceptable_sender": false,
    "pattern": "test@example.com",
    "is_regex": false,
    "verify_sender": true,
    "pattern_type": "EMAIL"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch allow policy operations — cloudflare.email_security_batch_allow_policies

Run Batch allow policy operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body object Required
body.deletes array Required IDs of the allow policies to delete. maxItems: 1000
body.deletes[] object Optional
body.deletes[].id — Required $ref: "#/definitions/email-security_AllowPolicyId"
body.patches array Required Partial updates to apply — each entry carries the policy's ID and only the fields to change. maxItems: 1000
body.patches[] — Optional
body.patches[] — Optional allOf[1]; $ref: "#/definitions/email-security_UpdateAllowPolicy"
body.patches[] object Optional allOf[2]
body.patches[].id — Required allOf[2]
body.patches[].id — Required allOf[2]; allOf[1]; $ref: "#/definitions/email-security_AllowPolicyId"
body.posts array Required Allow policies to create. maxItems: 1000
body.posts[] — Optional $ref: "#/definitions/email-security_CreateAllowPolicy"
body.puts array Required Full replacements to apply — each entry carries the policy's ID and every field of its new value. maxItems: 1000
body.puts[] — Optional
body.puts[] — Optional allOf[1]; $ref: "#/definitions/email-security_CreateAllowPolicy"
body.puts[] object Optional allOf[2]
body.puts[].id — Required allOf[2]
body.puts[].id — Required allOf[2]; allOf[1]; $ref: "#/definitions/email-security_AllowPolicyId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "deletes": [],
    "patches": [],
    "puts": [],
    "posts": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an email allow policy — cloudflare.email_security_delete_allow_policy

Run Delete an email allow policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.policy_id — Required $ref: "#/definitions/email-security_AllowPolicyId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an email allow policy — cloudflare.email_security_get_allow_policy

Run Get an email allow policy with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.policy_id — Required $ref: "#/definitions/email-security_AllowPolicyId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace an email allow policy — cloudflare.email_security_replace_allow_policy

Run Replace an email allow policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.policy_id — Required $ref: "#/definitions/email-security_AllowPolicyId"
body — Required $ref: "#/definitions/email-security_CreateAllowPolicy"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "is_exempt_recipient": false,
    "is_trusted_sender": true,
    "is_acceptable_sender": false,
    "pattern": "test@example.com",
    "is_regex": false,
    "verify_sender": true,
    "pattern_type": "EMAIL"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List blocked email senders — cloudflare.email_security_list_blocked_senders

Run List blocked email senders with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000
query.search string Optional Search term for filtering records. Behavior may change.
query.order string Optional Field to sort by. enum: ["pattern","created_at"]
query.direction string Optional The sorting direction. enum: ["asc","desc"]
query.pattern_type — Optional Filter by pattern type.
query.pattern_type — Optional allOf[1]; $ref: "#/definitions/email-security_PatternType"
query.pattern string Optional Filter by pattern value.
query.expired boolean Optional Filter to return only expired patterns (true) or only patterns that still apply (false). Omit to return both.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create blocked email sender — cloudflare.email_security_create_blocked_sender

Run Create blocked email sender with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body — Required $ref: "#/definitions/email-security_CreateBlockedSender"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "pattern": "test@example.com",
    "is_regex": false,
    "pattern_type": "EMAIL"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch blocked sender operations — cloudflare.email_security_batch_blocked_senders

Run Batch blocked sender operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body object Required
body.deletes array Required IDs of the blocked sender patterns to delete. maxItems: 1000
body.deletes[] object Optional
body.deletes[].id — Required $ref: "#/definitions/email-security_BlockedSenderId"
body.patches array Required Partial updates to apply — each entry carries the pattern's ID and only the fields to change. maxItems: 1000
body.patches[] — Optional
body.patches[] — Optional allOf[1]; $ref: "#/definitions/email-security_UpdateBlockedSender"
body.patches[] object Optional allOf[2]
body.patches[].id — Required allOf[2]
body.patches[].id — Required allOf[2]; allOf[1]; $ref: "#/definitions/email-security_BlockedSenderId"
body.posts array Required Blocked sender patterns to create. maxItems: 1000
body.posts[] — Optional $ref: "#/definitions/email-security_CreateBlockedSender"
body.puts array Required Full replacements to apply — each entry carries the pattern's ID and every field of its new value. maxItems: 1000
body.puts[] — Optional
body.puts[] — Optional allOf[1]; $ref: "#/definitions/email-security_CreateBlockedSender"
body.puts[] object Optional allOf[2]
body.puts[].id — Required allOf[2]
body.puts[].id — Required allOf[2]; allOf[1]; $ref: "#/definitions/email-security_BlockedSenderId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "deletes": [],
    "patches": [],
    "puts": [],
    "posts": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a blocked email sender — cloudflare.email_security_delete_blocked_sender

Run Delete a blocked email sender with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.pattern_id — Required $ref: "#/definitions/email-security_BlockedSenderId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "pattern_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a blocked email sender — cloudflare.email_security_get_blocked_sender

Run Get a blocked email sender with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.pattern_id — Required $ref: "#/definitions/email-security_BlockedSenderId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "pattern_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace a blocked email sender — cloudflare.email_security_replace_blocked_sender

Run Replace a blocked email sender with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.pattern_id — Required $ref: "#/definitions/email-security_BlockedSenderId"
body — Required $ref: "#/definitions/email-security_CreateBlockedSender"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "pattern_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "pattern": "test@example.com",
    "is_regex": false,
    "pattern_type": "EMAIL"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List content policies — cloudflare.email_security_list_content_policies

Run List content policies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000
query.search string Optional Search term for filtering records. Behavior may change.
query.order string Optional Field to sort by. enum: ["name","created_at"]
query.direction string Optional The sorting direction. enum: ["asc","desc"]
query.enabled boolean Optional Filter by enabled status.
query.name string Optional Filter by exact policy name.
query.expired boolean Optional Filter to return only expired policies (true) or only policies that still apply (false). Omit to return both.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a content policy — cloudflare.email_security_create_content_policy

Run Create a content policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body — Required $ref: "#/definitions/email-security_CreateContentPolicy"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Block phishing keywords",
    "pattern": "urgent.*verify.*account",
    "targets": [
      "SUBJECT"
    ],
    "enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch content policy operations — cloudflare.email_security_batch_content_policies

Run Batch content policy operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body object Required
body.deletes array Required IDs of the content policies to delete. maxItems: 1000
body.deletes[] object Optional
body.deletes[].id — Required $ref: "#/definitions/email-security_ContentPolicyId"
body.patches array Required Partial updates to apply — each entry carries the policy's ID and only the fields to change. maxItems: 1000
body.patches[] — Optional
body.patches[] — Optional allOf[1]; $ref: "#/definitions/email-security_UpdateContentPolicy"
body.patches[] object Optional allOf[2]
body.patches[].id — Required allOf[2]
body.patches[].id — Required allOf[2]; allOf[1]; $ref: "#/definitions/email-security_ContentPolicyId"
body.posts array Required Content policies to create. maxItems: 1000
body.posts[] — Optional $ref: "#/definitions/email-security_CreateContentPolicy"
body.puts array Required Full replacements to apply — each entry carries the policy's ID and every field of its new value. maxItems: 1000
body.puts[] — Optional
body.puts[] — Optional allOf[1]; $ref: "#/definitions/email-security_CreateContentPolicy"
body.puts[] object Optional allOf[2]
body.puts[].id — Required allOf[2]
body.puts[].id — Required allOf[2]; allOf[1]; $ref: "#/definitions/email-security_ContentPolicyId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "deletes": [],
    "patches": [],
    "puts": [],
    "posts": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a content policy — cloudflare.email_security_delete_content_policy

Run Delete a content policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.policy_id — Required $ref: "#/definitions/email-security_ContentPolicyId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a content policy — cloudflare.email_security_get_content_policy

Run Get a content policy with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.policy_id — Required $ref: "#/definitions/email-security_ContentPolicyId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List protected email domains — cloudflare.email_security_list_domains

Run List protected email domains with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000
query.search string Optional Search term for filtering records. Behavior may change.
query.order string Optional Field to sort by. enum: ["domain","created_at"]
query.direction string Optional The sorting direction. enum: ["asc","desc"]
query.allowed_delivery_mode — Optional Delivery mode to filter by. $ref: "#/definitions/email-security_DeliveryMode"
query.domain array Optional Domain names to filter by.
query.domain[] string Optional
query.active_delivery_mode — Optional Currently active delivery mode to filter by. $ref: "#/definitions/email-security_DeliveryMode"
query.integration_id string Optional Integration ID to filter by. format: "uuid"
query.status — Optional Filters response to domains with the provided status. $ref: "#/definitions/email-security_DomainStatus"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add a new email domain — cloudflare.email_security_create_domains

Run Add a new email domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body — Required $ref: "#/definitions/email-security_CreateDomain"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "domain": "example",
    "allowed_delivery_modes": [
      "DIRECT"
    ],
    "ip_restrictions": [
      "192.0.2.0/24",
      "2001:db8::/32"
    ],
    "drop_dispositions": [],
    "regions": [
      "GLOBAL"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch domain operations — cloudflare.email_security_batch_domains

Run Batch domain operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body object Required
body.deletes array Required IDs of the domains to remove protection from. maxItems: 1000
body.deletes[] object Optional
body.deletes[].id — Required $ref: "#/definitions/email-security_DomainId"
body.patches array Required Partial updates to apply — each entry carries the domain's ID and only the fields to change. maxItems: 1000
body.patches[] — Optional
body.patches[] — Optional allOf[1]; $ref: "#/definitions/email-security_UpdateDomain"
body.patches[] object Optional allOf[2]
body.patches[].id — Required allOf[2]; $ref: "#/definitions/email-security_DomainId"
body.posts array Required Domains to add protection for. maxItems: 1000
body.posts[] — Optional $ref: "#/definitions/email-security_CreateDomain"
body.puts array Required Full replacements to apply — each entry carries the domain's ID and every field of its new value. maxItems: 1000
body.puts[] — Optional
body.puts[] — Optional allOf[1]; $ref: "#/definitions/email-security_ReplaceDomain"
body.puts[] object Optional allOf[2]
body.puts[].id — Required allOf[2]; $ref: "#/definitions/email-security_DomainId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "deletes": [],
    "patches": [],
    "puts": [],
    "posts": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Unprotect an email domain — cloudflare.email_security_delete_domain

Run Unprotect an email domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.domain_id — Required $ref: "#/definitions/email-security_DomainId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an email domain — cloudflare.email_security_get_domain

Run Get an email domain with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.domain_id — Required $ref: "#/definitions/email-security_DomainId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an email domain — cloudflare.email_security_update_domain

Run Update an email domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.domain_id — Required $ref: "#/definitions/email-security_DomainId"
body — Required $ref: "#/definitions/email-security_UpdateDomain"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace an email domain — cloudflare.email_security_replace_domain

Run Replace an email domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.domain_id — Required $ref: "#/definitions/email-security_DomainId"
body — Required $ref: "#/definitions/email-security_ReplaceDomain"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "allowed_delivery_modes": [
      "DIRECT"
    ],
    "ip_restrictions": [
      "192.0.2.0/24",
      "2001:db8::/32"
    ],
    "drop_dispositions": [],
    "regions": [
      "GLOBAL"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get domain verification details — cloudflare.email_security_get_domain_verification

Run Get domain verification details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.domain_id — Required $ref: "#/definitions/email-security_DomainId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List impersonation registry entries — cloudflare.email_security_list_impersonation_registry

Run List impersonation registry entries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000
query.search string Optional Search term for filtering records. Behavior may change.
query.order string Optional Field to sort by. enum: ["name","email","created_at"]
query.direction string Optional The sorting direction. enum: ["asc","desc"]
query.provenance — Optional $ref: "#/definitions/email-security_Provenance"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create impersonation registry entry — cloudflare.email_security_create_impersonation_registry

Run Create impersonation registry entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body — Required $ref: "#/definitions/email-security_CreateImpersonationRegistry"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "John Doe",
    "email": "john.doe@example.com",
    "is_email_regex": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an impersonation registry entry — cloudflare.email_security_delete_impersonation_registry

Run Delete an impersonation registry entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.impersonation_registry_id — Required $ref: "#/definitions/email-security_ImpersonationRegistryId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "impersonation_registry_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an impersonation registry entry — cloudflare.email_security_get_impersonation_registry

Run Get an impersonation registry entry with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.impersonation_registry_id — Required $ref: "#/definitions/email-security_ImpersonationRegistryId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "impersonation_registry_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List sending domain restrictions — cloudflare.email_security_list_sending_domain_restrictions

Run List sending domain restrictions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000
query.search string Optional Search term for filtering records. Behavior may change.
query.order string Optional Field to sort by. enum: ["domain","created_at"]
query.direction string Optional The sorting direction. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a sending domain restriction — cloudflare.email_security_create_sending_domain_restriction

Run Create a sending domain restriction with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body — Required $ref: "#/definitions/email-security_CreateSendingDomainRestriction"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "domain": "example.com",
    "exclude": [
      "subdomain.example.com"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch sending domain restriction operations — cloudflare.email_security_batch_sending_domain_restrictions

Run Batch sending domain restriction operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body object Required
body.deletes array Required IDs of the sending domain restrictions to delete. maxItems: 1000
body.deletes[] object Optional
body.deletes[].id — Required $ref: "#/definitions/email-security_SendingDomainRestrictionId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "deletes": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a sending domain restriction — cloudflare.email_security_delete_sending_domain_restriction

Run Delete a sending domain restriction with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.sending_domain_restriction_id — Required $ref: "#/definitions/email-security_SendingDomainRestrictionId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sending_domain_restriction_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a sending domain restriction — cloudflare.email_security_get_sending_domain_restriction

Run Get a sending domain restriction with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.sending_domain_restriction_id — Required $ref: "#/definitions/email-security_SendingDomainRestrictionId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sending_domain_restriction_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List trusted email domains — cloudflare.email_security_list_trusted_domains

Run List trusted email domains with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000
query.search string Optional Search term for filtering records. Behavior may change.
query.order string Optional Field to sort by. enum: ["pattern","created_at"]
query.direction string Optional The sorting direction. enum: ["asc","desc"]
query.is_recent boolean Optional Filter to show only recently registered domains that are trusted to prevent triggering Suspicious or Malicious dispositions.
query.is_similarity boolean Optional Filter to show only proximity domains (partner or approved domains with similar spelling to connected domains) that prevent Spoof dispositions.
query.pattern string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create trusted email domain — cloudflare.email_security_create_trusted_domain

Run Create trusted email domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body — Required $ref: "#/definitions/email-security_CreateTrustedDomain"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "pattern": "example.com",
    "is_regex": false,
    "is_recent": true,
    "is_similarity": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch trusted domain operations — cloudflare.email_security_batch_trusted_domains

Run Batch trusted domain operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body object Required
body.deletes array Required IDs of the trusted domain patterns to delete. maxItems: 1000
body.deletes[] object Optional
body.deletes[].id — Required $ref: "#/definitions/email-security_TrustedDomainId"
body.patches array Required Partial updates to apply — each entry carries the pattern's ID and only the fields to change. maxItems: 1000
body.patches[] — Optional
body.patches[] — Optional allOf[1]; $ref: "#/definitions/email-security_UpdateTrustedDomain"
body.patches[] object Optional allOf[2]
body.patches[].id — Required allOf[2]
body.patches[].id — Required allOf[2]; allOf[1]; $ref: "#/definitions/email-security_TrustedDomainId"
body.posts array Required Trusted domain patterns to create. maxItems: 1000
body.posts[] — Optional $ref: "#/definitions/email-security_CreateTrustedDomain"
body.puts array Required Full replacements to apply — each entry carries the pattern's ID and every field of its new value. maxItems: 1000
body.puts[] — Optional
body.puts[] — Optional allOf[1]; $ref: "#/definitions/email-security_CreateTrustedDomain"
body.puts[] object Optional allOf[2]
body.puts[].id — Required allOf[2]
body.puts[].id — Required allOf[2]; allOf[1]; $ref: "#/definitions/email-security_TrustedDomainId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "deletes": [],
    "patches": [],
    "puts": [],
    "posts": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a trusted email domain — cloudflare.email_security_delete_trusted_domain

Run Delete a trusted email domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.trusted_domain_id — Required $ref: "#/definitions/email-security_TrustedDomainId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "trusted_domain_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a trusted email domain — cloudflare.email_security_get_trusted_domain

Run Get a trusted email domain with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.trusted_domain_id — Required $ref: "#/definitions/email-security_TrustedDomainId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "trusted_domain_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace a trusted email domain — cloudflare.email_security_replace_trusted_domain

Run Replace a trusted email domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.trusted_domain_id — Required $ref: "#/definitions/email-security_TrustedDomainId"
body — Required $ref: "#/definitions/email-security_CreateTrustedDomain"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "trusted_domain_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "pattern": "example.com",
    "is_regex": false,
    "is_recent": true,
    "is_similarity": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List URL ignore patterns — cloudflare.email_security_list_url_ignore_patterns

Run List URL ignore patterns with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a URL ignore pattern — cloudflare.email_security_create_url_ignore_pattern

Run Create a URL ignore pattern with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body — Required $ref: "#/definitions/email-security_CreateUrlIgnorePattern"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "pattern": "https://example\\.com/.*"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch URL ignore pattern operations — cloudflare.email_security_batch_url_ignore_patterns

Run Batch URL ignore pattern operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body object Required
body.deletes array Required IDs of the URL ignore patterns to delete. maxItems: 1000
body.deletes[] object Optional
body.deletes[].id — Required $ref: "#/definitions/email-security_UrlIgnorePatternId"
body.patches array Required Partial updates to apply — each entry carries the pattern's ID and only the fields to change. maxItems: 1000
body.patches[] — Optional
body.patches[] — Optional allOf[1]; $ref: "#/definitions/email-security_UpdateUrlIgnorePattern"
body.patches[] object Optional allOf[2]
body.patches[].id — Required allOf[2]
body.patches[].id — Required allOf[2]; allOf[1]; $ref: "#/definitions/email-security_UrlIgnorePatternId"
body.posts array Required URL ignore patterns to create. maxItems: 1000
body.posts[] — Optional $ref: "#/definitions/email-security_CreateUrlIgnorePattern"
body.puts array Required Full replacements to apply — each entry carries the pattern's ID and every field of its new value. maxItems: 1000
body.puts[] — Optional
body.puts[] — Optional allOf[1]; $ref: "#/definitions/email-security_CreateUrlIgnorePattern"
body.puts[] object Optional allOf[2]
body.puts[].id — Required allOf[2]
body.puts[].id — Required allOf[2]; allOf[1]; $ref: "#/definitions/email-security_UrlIgnorePatternId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "deletes": [],
    "patches": [],
    "puts": [],
    "posts": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a URL ignore pattern — cloudflare.email_security_delete_url_ignore_pattern

Run Delete a URL ignore pattern with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.pattern_id — Required $ref: "#/definitions/email-security_UrlIgnorePatternId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "pattern_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a URL ignore pattern — cloudflare.email_security_get_url_ignore_pattern

Run Get a URL ignore pattern with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
path.pattern_id — Required $ref: "#/definitions/email-security_UrlIgnorePatternId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "pattern_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List reclassify submissions — cloudflare.email_security_submissions

Run List reclassify submissions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
query object Optional additionalProperties: false
query.start string Optional The beginning of the search date range. Defaults to now - 30 days. format: "date-time"
query.end string Optional The end of the search date range. Defaults to now. format: "date-time"
query.type string Optional Filter by who created the submission — TEAM for security team members or USER for end users. enum: ["TEAM","USER"]
query.submission_id string Optional Filter by a specific submission ID.
query.original_disposition — Optional $ref: "#/definitions/email-security_SubmissionDisposition"
query.requested_disposition — Optional $ref: "#/definitions/email-security_SubmissionDisposition"
query.outcome_disposition — Optional $ref: "#/definitions/email-security_SubmissionDisposition"
query.status string Optional Filter by review status — escalated, reviewed, or unreviewed.
query.query string | null Optional Search term for filtering submissions.
query.escalated_from_user boolean Optional When true, return only submissions that were escalated by an end user (vs. by the security team). When false, return only submissions that were not escalated by an end user. When omitted, no filter is applied.
query.order string Optional Field to sort by. enum: ["submission_id","subject","original_disposition","requested_disposition","outcome_disposition","requested_at"]; default: "requested_at"
query.direction string Optional The sorting direction. enum: ["asc","desc"]
query.page integer Optional Current page within paginated list of results. default: 1; minimum: 1
query.per_page integer Optional The number of results per page. Maximum value is 1000. default: 20; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create new submissions — cloudflare.email_security_create_submissions

Run Create new submissions with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier tag. $ref: "#/definitions/email-security_identifier"
body — Required
body object Required oneOf[1]
body.messages array Required oneOf[1]
body.messages[] — Optional oneOf[1]; $ref: "#/definitions/email-security_ReclassificationSubmission"
body.type string Required oneOf[1]; enum: ["reclassification"]
body object Required oneOf[2]
body.messages array Required oneOf[2]
body.messages[] — Optional oneOf[2]; $ref: "#/definitions/email-security_MissedDetectionSubmission"
body.type string Required oneOf[2]; enum: ["missed_detection"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "type": "reclassification",
    "messages": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Email Domain changes — cloudflare.email-domains-changes

Run List Email Domain changes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"
query object Optional additionalProperties: false
query.per_page integer Optional Maximum changes to return in one page. default: 20; minimum: 1; maximum: 100
query.cursor string Optional Opaque cursor returned by the previous change page. Omit it for the first page.
query.modified_since string Optional Optional RFC 3339 lower bound for the first request only. Values outside the retained history return error 2086. A value up to one minute ahead of the server clock is read as the current time; a later value returns 400. format: "date-time"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Email Domains — cloudflare.email-domains-list

Run List Email Domains with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"
query object Optional additionalProperties: false
query.per_page integer Optional default: 20; minimum: 1; maximum: 100
query.cursor string Optional Opaque cursor returned by the previous page. Omit it for the first page.
query.hostname string Optional Exact hostname filter for recovering an ambiguous create response.
query.include string Optional Include DNS instructions on each list result. enum: ["dns_records"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an Email Domain — cloudflare.email-domains-create

Run Create an Email Domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_email_domain_create"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "hostname": "agents.customer.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an Email Domain — cloudflare.email-domains-delete

Run Delete an Email Domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"
path.email_domain_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "email_domain_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an Email Domain — cloudflare.email-domains-get

Run Get an Email Domain with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"
path.email_domain_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "email_domain_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Verify an Email Domain — cloudflare.email-domains-verify

Run Verify an Email Domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"
path.email_domain_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "email_domain_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List destination addresses — cloudflare.email-routing-destination-addresses-list-destination-addresses

Run List destination addresses with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.direction string Optional Sorts results in an ascending or descending order. enum: ["asc","desc"]; default: "asc"
query.verified boolean Optional Filter by verified destination addresses. enum: [true,false]; default: true

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a destination address — cloudflare.email-routing-destination-addresses-create-a-destination-address

Run Create a destination address with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_create_destination_address_properties"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "email": "user@example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete destination address — cloudflare.email-routing-destination-addresses-delete-destination-address

Run Delete destination address with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.destination_address_identifier — Required $ref: "#/definitions/email_destination_address_identifier"
path.account_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "destination_address_identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a destination address — cloudflare.email-routing-destination-addresses-get-a-destination-address

Run Get a destination address with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.destination_address_identifier — Required $ref: "#/definitions/email_destination_address_identifier"
path.account_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "destination_address_identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update destination address — cloudflare.email-routing-destination-addresses-update-destination-address

Run Update destination address with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.destination_address_identifier — Required $ref: "#/definitions/email_destination_address_identifier"
path.account_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_update_destination_address_properties"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "destination_address_identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "status": "verified"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List account routing rules — cloudflare.email-routing-routing-rules-list-account-routing-rules

Run List account routing rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.enabled boolean Optional Filter by enabled routing rules. enum: [true,false]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Plan account routing rule changes — cloudflare.email-routing-routing-rules-plan-account-routing-rules

Run Plan account routing rule changes with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_account_rules_plan_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "catch_all_rules": [
      {
        "rule": {
          "actions": [
            {
              "type": "worker",
              "value": [
                "my-worker"
              ]
            }
          ],
          "matchers": [
            {
              "type": "all"
            }
          ]
        },
        "target": "*@example.com"
      }
    ],
    "owner_worker_tag": "a7e6fb77503c41d8a7f3113c6918f10c",
    "rules": [
      {
        "actions": [
          {
            "type": "worker",
            "value": [
              "my-worker"
            ]
          }
        ],
        "matchers": [
          {
            "field": "to",
            "type": "literal",
            "value": "support@example.com"
          }
        ]
      },
      {
        "actions": [
          {
            "type": "worker",
            "value": [
              "my-worker"
            ]
          }
        ],
        "matchers": [
          {
            "field": "to",
            "type": "literal",
            "value": "info@example.com"
          }
        ]
      },
      {
        "actions": [
          {
            "type": "worker",
            "value": [
              "my-worker"
            ]
          }
        ],
        "matchers": [
          {
            "field": "to",
            "type": "literal",
            "value": "billing@example.com"
          }
        ]
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get sending limits — cloudflare.email-sending-get-sending-limits

Run Get sending limits with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account reputation — cloudflare.email-sending-get-reputation

Run Get account reputation with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Send an email — cloudflare.email-sending-account-send-builder

Run Send an email with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Identifier of the account.
body — Required $ref: "#/definitions/email-sending_EmailBuilder"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "attachments": [
      {
        "content": "JVBERi0xLjQK...",
        "disposition": "attachment",
        "filename": "report.pdf",
        "type": "application/pdf"
      }
    ],
    "from": "sender@example.com",
    "html": "<h1>Hello</h1><p>Please find your report attached.</p>",
    "subject": "Monthly Report",
    "text": "Hello\n\nPlease find your report attached.",
    "to": [
      "recipient@example.com"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Send a raw MIME email — cloudflare.email-sending-account-send-raw-message

Run Send a raw MIME email with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Identifier of the account.
body — Required $ref: "#/definitions/email-sending_SendRawRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "from": "sender@example.com",
    "mime_message": "From: sender@example.com\r\nTo: recipient@example.com\r\nSubject: Hello\r\nContent-Type: text/plain\r\n\r\nHello, World!",
    "recipients": [
      "recipient@example.com"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List account Email Sending suppressions — cloudflare.get_publiclistsendingsuppressions

Run List account Email Sending suppressions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
query object Optional additionalProperties: false
query.per_page integer Optional Maximum number of suppressions to return per page. default: 100; minimum: 1; maximum: 1000
query.cursor string Optional Opaque pagination cursor returned as result_info.next_cursor. It carries the filters that produced it. maxLength: 2048
query.email string Optional Exact email-address filter. format: "email"
query.search string Optional A complete address is an exact match; a value ending in @ matches that username across every domain. Prefix searches may return short intermediate pages while the bounded account scan advances. minLength: 1; maxLength: 320
query.reason string Optional Filter to suppressions with this reason. enum: ["manual","complaint","hard_bounce","soft_bounce","policy"]
query.scope_type string Optional Filter by scope: account returns only account-wide suppressions, sending_domain only sending-domain suppressions. Omit to list both, sending-domain suppressions first. enum: ["account","sending_domain"]
query.scope_value string Optional Exact sending-domain filter. Requires scope_type=sending_domain. maxLength: 1024

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "12345678"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create account Email Sending suppression — cloudflare.post_publiccreatesendingsuppression

Run Create account Email Sending suppression with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body object Optional
body.email string Required The email address to suppress. format: "email"
body.expires_at string | null Optional Expiration timestamp for the suppression. Omit or set to null for a permanent suppression that never expires. format: "date-time"
body.note string Optional Advisory note for this suppression. Not enforced or validated beyond length. maxLength: 1000
body.scope — Optional Where the suppression applies. Omit for { "type": "account" }, which blocks the recipient for every sending domain of the account.
body.scope object Optional oneOf[1]
body.scope.type string Required Blocks the recipient for every sending domain of the account. oneOf[1]; enum: ["account"]
body.scope object Optional oneOf[2]
body.scope.type string Required Blocks the recipient only for mail whose envelope MAIL FROM uses value. oneOf[2]; enum: ["sending_domain"]
body.scope.value string Required The sending domain to suppress for: the domain part of the envelope MAIL FROM. It is lowercased and trailing dots are removed. Internationalized domains must use the ASCII (punycode) form. Ownership is not checked; a domain the account does not send from never matches. oneOf[2]; maxLength: 1024

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "12345678"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Bulk import account Email Sending suppressions — cloudflare.post_publicbulkcreatesendingsuppressions

Run Bulk import account Email Sending suppressions with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
body object Optional
body.items array Required Suppressions to import. Items with the same email address and scope are deduplicated before processing. maxItems: 1000
body.items[] object Optional
body.items[].email string Required The email address to suppress.
body.items[].expires_at string | null Optional Expiration timestamp for the suppression. Omit or set to null for a permanent suppression that never expires. format: "date-time"
body.items[].note string Optional Advisory note for this suppression. Not enforced or validated beyond length. maxLength: 1000
body.items[].scope — Optional Where the suppression applies. Omit for { "type": "account" }, which blocks the recipient for every sending domain of the account.
body.items[].scope object Optional oneOf[1]
body.items[].scope.type string Required Blocks the recipient for every sending domain of the account. oneOf[1]; enum: ["account"]
body.items[].scope object Optional oneOf[2]
body.items[].scope.type string Required Blocks the recipient only for mail whose envelope MAIL FROM uses value. oneOf[2]; enum: ["sending_domain"]
body.items[].scope.value string Required The sending domain to suppress for: the domain part of the envelope MAIL FROM. It is lowercased and trailing dots are removed. Internationalized domains must use the ASCII (punycode) form. Ownership is not checked; a domain the account does not send from never matches. oneOf[2]; maxLength: 1024

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "12345678"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete account Email Sending suppression — cloudflare.delete_publicdeletesendingsuppression

Run Delete account Email Sending suppression with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.suppression_id string Required The suppression's identifier. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "12345678",
    "suppression_id": "396a5436-d4b0-42a6-b3fc-48e8fa522321"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account Email Sending suppression — cloudflare.get_publicgetsendingsuppression

Run Get account Email Sending suppression with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.suppression_id string Required The suppression's identifier. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "12345678",
    "suppression_id": "396a5436-d4b0-42a6-b3fc-48e8fa522321"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update account Email Sending suppression — cloudflare.patch_publicupdatesendingsuppression

Run Update account Email Sending suppression with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID.
path.suppression_id string Required The suppression's identifier. format: "uuid"
body object Optional
body.expires_at string | null Optional New expiry. Send null to make the suppression permanent; omit to leave it unchanged. format: "date-time"
body.note string Optional Replacement advisory note. Send an empty string to clear it; omit to leave it unchanged. maxLength: 1000
body.scope object Optional Not editable. Scope is fixed when the suppression is created; any value returns 400 with code scope_immutable. Delete and recreate the suppression to change it.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "12345678",
    "suppression_id": "396a5436-d4b0-42a6-b3fc-48e8fa522321"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Account Entitlements — cloudflare.entitlements-get-account-entitlements

Run Get Account Entitlements with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Identifier of the account. $ref: "#/definitions/entitlements_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Event Notification Rules — cloudflare.r2-get-event-notification-configs

Run List Event Notification Rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Event Subscriptions — cloudflare.subscriptions-list

Run List Event Subscriptions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mq_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number for pagination default: 1; minimum: 1
query.per_page integer Optional Number of items per page default: 20; minimum: 1; maximum: 100
query.order string Optional Field to sort by enum: ["created_at","name","enabled","source"]; default: "name"
query.direction string Optional Sort direction enum: ["asc","desc"]; default: "asc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Event Subscription — cloudflare.subscriptions-create

Run Create Event Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mq_identifier"
body object Required
body.destination — Optional $ref: "#/definitions/mq_event-destination"
body.enabled boolean Optional Whether the subscription is active
body.events array Optional List of event types this subscription handles minItems: 1
body.events[] string Optional
body.name string Optional Name of the subscription
body.source — Optional $ref: "#/definitions/mq_event-source"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Event Subscription — cloudflare.subscriptions-delete

Run Delete Event Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mq_identifier"
path.subscription_id — Required $ref: "#/definitions/mq_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "subscription_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Event Subscription — cloudflare.subscriptions-get

Run Get Event Subscription with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mq_identifier"
path.subscription_id — Required $ref: "#/definitions/mq_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "subscription_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Event Subscription — cloudflare.subscriptions-patch

Run Update Event Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mq_identifier"
path.subscription_id — Required $ref: "#/definitions/mq_identifier"
body object Required
body.destination — Optional $ref: "#/definitions/mq_event-destination"
body.enabled boolean Optional Whether the subscription is active
body.events array Optional List of event types this subscription handles minItems: 1
body.events[] string Optional
body.name string Optional Name of the subscription

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "subscription_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Field Extractor — cloudflare.deletefieldextractor

Run Delete Field Extractor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID. minLength: 1
path.extractor string Required Extractor type. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "123456",
    "extractor": "llm_prompts"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Field Extractor — cloudflare.getfieldextractor

Run Get Field Extractor with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID. minLength: 1
path.extractor string Required Extractor type. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "123456",
    "extractor": "llm_prompts"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Field Extractor — cloudflare.updatefieldextractor

Run Update Field Extractor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID. minLength: 1
path.extractor string Required Extractor type. minLength: 1
body object Optional
body.rules array Required minItems: 1; maxItems: 10
body.rules[] object Optional
body.rules[].description string Optional maxLength: 4096
body.rules[].fields array Required minItems: 1
body.rules[].fields[] object Optional
body.rules[].fields[].expression string Required minLength: 1; maxLength: 4096
body.rules[].fields[].name string Required minLength: 1
body.rules[].ref string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_-]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "123456",
    "extractor": "llm_prompts"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List IP Access rules — cloudflare.ip-access-rules-for-an-account-list-ip-access-rules

Run List IP Access rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/firewall_account_identifier"
query object Optional additionalProperties: false
query.mode — Optional $ref: "#/definitions/firewall_schemas-mode"
query.configuration.target string Optional Defines the target to search in existing rules. enum: ["ip","ip_range","asn","country"]
query.configuration.value string Optional Defines the target value to search for in existing rules: an IP address, an IP address range, or a country code, depending on the provided configuration.target. Notes: You can search for a single IPv4 address, an IP address range with a subnet of '/16' or '/24', or a two-letter ISO-3166-1 alpha-2 country code.
query.notes string Optional Defines the string to search for in the notes of existing IP Access rules. Notes: For example, the string 'attack' would match IP Access rules with notes 'Attack 26/02' and 'Attack 27/02'. The search is case insensitive.
query.match string Optional Defines the search requirements. When set to all, all the search requirements must match. When set to any, only one of the search requirements has to match. enum: ["any","all"]; default: "all"
query.page number Optional Defines the requested page within paginated list of results.
query.per_page number Optional Defines the maximum number of results requested.
query.order string Optional Defines the field used to sort returned rules. enum: ["configuration.target","configuration.value","mode"]
query.direction string Optional Defines the direction used to sort returned rules. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an IP Access rule — cloudflare.ip-access-rules-for-an-account-delete-an-ip-access-rule

Run Delete an IP Access rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/firewall_rule_identifier"
path.account_id — Required $ref: "#/definitions/firewall_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an IP Access rule — cloudflare.ip-access-rules-for-an-account-get-an-ip-access-rule

Run Get an IP Access rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/firewall_rule_identifier"
path.account_id — Required $ref: "#/definitions/firewall_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete the payload logging key — cloudflare.payload-logging-keys-for-an-account-delete-the-payload-logging-key

Run Delete the payload logging key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/firewall_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the payload logging key — cloudflare.payload-logging-keys-for-an-account-get-the-payload-logging-key

Run Get the payload logging key with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/firewall_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set the payload logging key — cloudflare.payload-logging-keys-for-an-account-set-the-payload-logging-key

Run Set the payload logging key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/firewall_account_identifier"
body — Required $ref: "#/definitions/firewall_payload_logging_key"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "public_key": "Ycig/Zr/pZmklmFUN99nr+taURlYItL91g+NcHGYpB8="
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List apps — cloudflare.flagship_list_apps

Run List apps with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create app — cloudflare.flagship_create_app

Run Create app with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
body object Required additionalProperties: false
body.name string Required Name of the Flagship app (1–64 letters, numbers, hyphens, or underscores). minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_-]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete app — cloudflare.flagship_delete_app

Run Delete app with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get app — cloudflare.flagship_get_app

Run Get app with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update app — cloudflare.flagship_update_app

Run Update app with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.
body object Required additionalProperties: false
body.name string Optional Name of the Flagship app (1–64 letters, numbers, hyphens, or underscores). minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_-]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get flag definitions — cloudflare.flagship_get_definitions

Run Get flag definitions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.
headers object Optional additionalProperties: false
headers.If-None-Match string Optional Previously returned ETag, or *.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Evaluate flag from query context — cloudflare.flagship_evaluate_flag

Run Evaluate flag from query context with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.
query object Required additionalProperties: false
query.flagKey string Required The flag key to evaluate.
query.targetingKey string Optional Context targeting key (per OpenFeature spec); used for percentage rollout bucketing.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example"
  },
  "query": {
    "flagKey": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Evaluate flag with JSON context — cloudflare.flagship_evaluate_flag_post

Run Evaluate flag with JSON context with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.
body object Required additionalProperties: false
body.context object Optional Evaluation attributes keyed by name. Values may be any JSON value; the context supports up to 100 entries, nesting depth of 10, 10,000 values, and 32 KB. default: {}; additionalProperties: {"$ref":"#/definitions/flagship_JsonValue"}
body.flagKey string Required Key of the flag to evaluate within the app. minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_-]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example"
  },
  "body": {
    "flagKey": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List flags — cloudflare.flagship_list_flags

Run List flags with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.
query object Optional additionalProperties: false
query.limit integer Optional Max items to return (1–200). minimum: 1; maximum: 200
query.cursor string Optional Pagination cursor from a previous response.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create flag — cloudflare.flagship_create_flag

Run Create flag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.
body object Required additionalProperties: false
body.default_variation string Required Variation the API serves when the flag is off, or when it's on but no rule matches the context. Must be a key in variations. minLength: 1
body.description string | null Optional Optional operator-facing description. It does not affect flag evaluation. maxLength: 512
body.enabled boolean Required When false, the flag bypasses all rules and always serves default_variation.
body.key string Required Unique identifier for the flag within an app. Used in all evaluation and SDK calls. minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_-]+$"
body.metadata object | null Optional Key-value metadata associated with the flag. null or an empty object clears existing metadata; omission semantics depend on the endpoint (PUT clears it, PATCH preserves it). maxProperties: 32; additionalProperties: {"anyOf":[{"type":"boolean"},{"type":"string"},{"type":"number"}]}
body.rules array Required Targeting rules evaluated in ascending priority; the first matching rule wins. An empty array means the flag always serves default_variation.
body.rules[] — Optional $ref: "#/definitions/flagship_Rule"
body.type string Optional Deprecated compatibility field. Omit it; the API ignores this value and infers the type from the flag's variations. enum: ["boolean","string","number","json"]
body.variations object Required Map of variation name to value. All values share the same type (boolean, string, number, or JSON object/array), and each serialized value stays within 10KB. additionalProperties: {"$ref":"#/definitions/flagship_JsonValue"}

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example"
  },
  "body": {
    "key": "example",
    "default_variation": "example",
    "variations": {},
    "rules": [],
    "enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete flag — cloudflare.flagship_delete_flag

Run Delete flag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.
path.flag_key string Required Case-sensitive key identifying the flag within the app.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example",
    "flag_key": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get flag — cloudflare.flagship_get_flag

Run Get flag with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.
path.flag_key string Required Case-sensitive key identifying the flag within the app.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example",
    "flag_key": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Partially update flag — cloudflare.flagship_patch_flag

Run Partially update flag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.
path.flag_key string Required Case-sensitive key identifying the flag within the app.
body object Required additionalProperties: false
body.default_variation string Optional Variation the API serves when the flag is off, or when it's on but no rule matches the context. Must be a key in variations. minLength: 1
body.description string | null Optional Optional operator-facing description. It does not affect flag evaluation. maxLength: 512
body.enabled boolean Optional When false, the flag bypasses all rules and always serves default_variation.
body.metadata object | null Optional Key-value metadata associated with the flag. null or an empty object clears existing metadata; omission semantics depend on the endpoint (PUT clears it, PATCH preserves it). maxProperties: 32; additionalProperties: {"anyOf":[{"type":"boolean"},{"type":"string"},{"type":"number"}]}

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example",
    "flag_key": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update flag — cloudflare.flagship_update_flag

Run Update flag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.
path.flag_key string Required Case-sensitive key identifying the flag within the app.
body object Required additionalProperties: false
body.default_variation string Required Variation the API serves when the flag is off, or when it's on but no rule matches the context. Must be a key in variations. minLength: 1
body.description string | null Optional Optional operator-facing description. It does not affect flag evaluation. maxLength: 512
body.enabled boolean Required When false, the flag bypasses all rules and always serves default_variation.
body.key string Required Unique identifier for the flag within an app. Used in all evaluation and SDK calls. minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_-]+$"
body.metadata object | null Optional Key-value metadata associated with the flag. null or an empty object clears existing metadata; omission semantics depend on the endpoint (PUT clears it, PATCH preserves it). maxProperties: 32; additionalProperties: {"anyOf":[{"type":"boolean"},{"type":"string"},{"type":"number"}]}
body.rules array Required Targeting rules evaluated in ascending priority; the first matching rule wins. An empty array means the flag always serves default_variation.
body.rules[] — Optional $ref: "#/definitions/flagship_Rule"
body.type string Optional Deprecated compatibility field. Omit it; the API ignores this value and infers the type from the flag's variations. enum: ["boolean","string","number","json"]
body.variations object Required Map of variation name to value. All values share the same type (boolean, string, number, or JSON object/array), and each serialized value stays within 10KB. additionalProperties: {"$ref":"#/definitions/flagship_JsonValue"}

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example",
    "flag_key": "example"
  },
  "body": {
    "key": "example",
    "default_variation": "example",
    "variations": {},
    "rules": [],
    "enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List flag changelog entries — cloudflare.flagship_get_flag_changelog

Run List flag changelog entries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account ID that owns the Flagship app.
path.app_id string Required Flagship app ID returned when the app was created.
path.flag_key string Required Case-sensitive key identifying the flag within the app.
query object Optional additionalProperties: false
query.limit integer Optional Max items to return (1–200). minimum: 1; maximum: 200
query.cursor string Optional Pagination cursor from a previous response.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "app_id": "example",
    "flag_key": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zero Trust account information — cloudflare.zero-trust-accounts-get-zero-trust-account-information

Run Get Zero Trust account information with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Zero Trust account — cloudflare.zero-trust-accounts-create-zero-trust-account

Run Create Zero Trust account with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List application and application type mappings — cloudflare.zero-trust-gateway-application-and-application-type-mappin-ae71b8b2fb

Run List application and application type mappings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List applications review statuses — cloudflare.zero-trust-applications-review-status-list

Run List applications review statuses with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update applications review statuses — cloudflare.zero-trust-applications-review-status-update

Run Update applications review statuses with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-3"
body object Required
body.approved_apps — Required $ref: "#/definitions/zero-trust-gateway_approved_apps"
body.in_review_apps — Required $ref: "#/definitions/zero-trust-gateway_in_review_apps"
body.unapproved_apps — Required $ref: "#/definitions/zero-trust-gateway_unapproved_apps"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "approved_apps": [],
    "unapproved_apps": [],
    "in_review_apps": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zero Trust SSH settings — cloudflare.zero-trust-get-audit-ssh-settings

Run Get Zero Trust SSH settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Zero Trust SSH settings — cloudflare.zero-trust-update-audit-ssh-settings

Run Update Zero Trust SSH settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.public_key — Required $ref: "#/definitions/zero-trust-gateway_public_key"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "public_key": "1pyl6I1tL7xfJuFYVzXlUW8uXXlpxegHXBzGCBKaSFA="
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rotate Zero Trust SSH account seed — cloudflare.zero-trust-rotate-ssh-account-seed

Run Rotate Zero Trust SSH account seed with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List categories — cloudflare.zero-trust-gateway-categories-list-categories

Run List categories with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Zero Trust certificates — cloudflare.zero-trust-certificates-list-zero-trust-certificates

Run List Zero Trust certificates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Zero Trust certificate — cloudflare.zero-trust-certificates-create-zero-trust-certificate

Run Create Zero Trust certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body — Optional $ref: "#/definitions/zero-trust-gateway_generate-cert-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Zero Trust certificate — cloudflare.zero-trust-certificates-delete-zero-trust-certificate

Run Delete Zero Trust certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/zero-trust-gateway_uuid"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zero Trust certificate details — cloudflare.zero-trust-certificates-zero-trust-certificate-details

Run Get Zero Trust certificate details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/zero-trust-gateway_uuid"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Activate a Zero Trust certificate — cloudflare.zero-trust-certificates-activate-zero-trust-certificate

Run Activate a Zero Trust certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/zero-trust-gateway_uuid"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Deactivate a Zero Trust certificate — cloudflare.zero-trust-certificates-deactivate-zero-trust-certificate

Run Deactivate a Zero Trust certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/zero-trust-gateway_uuid"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zero Trust account configuration — cloudflare.zero-trust-accounts-get-zero-trust-account-configuration

Run Get Zero Trust account configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Zero Trust account configuration — cloudflare.zero-trust-accounts-patch-zero-trust-account-configuration

Run Patch Zero Trust account configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier"
body — Required $ref: "#/definitions/zero-trust-gateway_gateway-account-settings"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Zero Trust account configuration — cloudflare.zero-trust-accounts-update-zero-trust-account-configuration.

Run Update Zero Trust account configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier"
body — Required $ref: "#/definitions/zero-trust-gateway_gateway-account-settings"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Zero Trust Gateway DNS destination IPv4 address pairs — cloudflare.zero-trust-dns-destination-ips-list-dns-destination-ips

Run List Zero Trust Gateway DNS destination IPv4 address pairs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get gateway egress CIDRs pairs assigned to this account — cloudflare.zero-trust-accounts-get-egress-cidr-pairs

Run Get gateway egress CIDRs pairs assigned to this account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Zero Trust lists — cloudflare.zero-trust-lists-list-zero-trust-lists

Run List Zero Trust lists with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
query object Optional additionalProperties: false
query.type — Optional $ref: "#/definitions/zero-trust-gateway_type-2"
query.filter array Optional Filter the returned lists by one or more field:value pairs. Repeat the parameter to apply multiple filters; they are combined with logical AND (a list must satisfy every filter to be returned). Supported fields and their matching behaviour: * name — case-insensitive substring match on the list name. * id — substring match on the list ID (UUID), with or without dashes. * type — exact match on the list type. Supersedes the legacy type query parameter when both are supplied. Must be one of the valid type values. * item_count — exact integer match on the number of items in the list. Each entry must match one of the per-field patterns below: the field must be one of name, id, type, or item_count; name/id accept any value, type is restricted to the valid list type values, and item_count must be a non-negative integer.
query.filter[] string Optional
query.filter[] string Optional anyOf[1]; pattern: "^name:.*$"
query.filter[] string Optional anyOf[2]; pattern: "^id:.*$"
query.filter[] string Optional anyOf[3]; pattern: "^type:(IP|URL|DOMAIN|CATEGORY|EMAIL|SERIAL|LOCATION|DEVICE|AAGUID)$"
query.filter[] string Optional anyOf[4]; pattern: "^item_count:[0-9]+$"
query.search string Optional Case-insensitive substring match on the list name or description. When combined with filter, both must match (logical AND).
query.order_by string Optional Field to sort the returned lists by. When omitted, results are ordered by created_at in ascending order (i.e. creation order) for backwards compatibility. Supported values: * name — sort alphabetically by list name. * created_at — sort by creation time; defaults to descending unless direction is set. * updated_at — sort by last-modified time; defaults to descending unless direction is set. * item_count — sort by number of items in the list. enum: ["name","created_at","updated_at","item_count"]
query.direction string Optional Sort direction. Applies to the field named in order_by; when order_by is omitted it applies to the default created_at ordering. When direction is omitted the default is field-specific: explicitly choosing created_at or updated_at defaults to descending (newest first); name and item_count default to ascending; and the default created_at ordering used when order_by is omitted is ascending (for backwards compatibility). * asc — ascending. * desc — descending. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Zero Trust list — cloudflare.zero-trust-lists-create-zero-trust-list

Run Create Zero Trust list with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.description — Optional $ref: "#/definitions/zero-trust-gateway_description"
body.items — Optional $ref: "#/definitions/zero-trust-gateway_items-input"
body.name — Required $ref: "#/definitions/zero-trust-gateway_name"
body.type — Required $ref: "#/definitions/zero-trust-gateway_type-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "Admin Serial Numbers",
    "type": "SERIAL"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Zero Trust list — cloudflare.zero-trust-lists-delete-zero-trust-list

Run Delete Zero Trust list with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-2"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zero Trust list details — cloudflare.zero-trust-lists-zero-trust-list-details

Run Get Zero Trust list details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-2"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Zero Trust list. — cloudflare.zero-trust-lists-patch-zero-trust-list

Run Patch Zero Trust list. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-2"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.append — Optional $ref: "#/definitions/zero-trust-gateway_items-input"
body.remove array Optional Lists of item values you want to remove.
body.remove[] — Optional $ref: "#/definitions/zero-trust-gateway_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Zero Trust list — cloudflare.zero-trust-lists-update-zero-trust-list

Run Update Zero Trust list with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-2"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.description — Optional $ref: "#/definitions/zero-trust-gateway_description"
body.items — Optional $ref: "#/definitions/zero-trust-gateway_items-input"
body.name — Required $ref: "#/definitions/zero-trust-gateway_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "Admin Serial Numbers"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zero Trust list items — cloudflare.zero-trust-lists-zero-trust-list-items

Run Get Zero Trust list items with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-2"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Number of items per page. default: 50; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Zero Trust Gateway locations — cloudflare.zero-trust-gateway-locations-list-zero-trust-gateway-locations

Run List Zero Trust Gateway locations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
query object Optional additionalProperties: false
query.filter array Optional Filter the returned locations by one or more field:value pairs. Repeat the parameter to apply multiple filters; they are combined with logical AND (a location must satisfy every filter to be returned). Supported fields and their matching behaviour: * name — case-insensitive substring match on the location name. * id — substring match on the location ID (UUID), with or without dashes. * is_default — whether it is the default for the account. Each entry must match one of the per-field patterns below: * the field must be one of name, id, or is_default; * name/id accept any value; * is_default only accepts true or false; any other value returns 400
query.filter[] string Optional
query.filter[] string Optional anyOf[1]; pattern: "^name:.*$"
query.filter[] string Optional anyOf[2]; pattern: "^id:.*$"
query.filter[] string Optional anyOf[3]; pattern: "^is_default:(true|false)$"
query.search string Optional Case-insensitive substring match on the location name. When combined with filter, both must match (logical AND).
query.order_by string Optional Field to sort the returned locations by. When omitted, the order of results is unspecified. Supported values: * name — sort alphabetically by location name. * created_at — sort by creation time; defaults to descending unless direction is set. * updated_at — sort by last-modified time; defaults to descending unless direction is set. enum: ["name","created_at","updated_at"]
query.direction string Optional Sort direction. Only takes effect when order_by is also provided; it is ignored otherwise. When direction is omitted the effective direction is field-specific: created_at and updated_at default to descending (newest first); name defaults to ascending. * asc — ascending. * desc — descending. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Zero Trust Gateway location — cloudflare.zero-trust-gateway-locations-create-zero-trust-gateway-location

Run Create a Zero Trust Gateway location with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.client_default — Optional $ref: "#/definitions/zero-trust-gateway_client-default"
body.dns64_enabled — Optional $ref: "#/definitions/zero-trust-gateway_dns64-enabled"
body.dns_destination_ips_id — Optional $ref: "#/definitions/zero-trust-gateway_dns-destination-ips-id-write"
body.ecs_support — Optional $ref: "#/definitions/zero-trust-gateway_ecs-support"
body.endpoints — Optional $ref: "#/definitions/zero-trust-gateway_endpoints"
body.max_ttl — Optional $ref: "#/definitions/zero-trust-gateway_max-ttl"
body.name — Required $ref: "#/definitions/zero-trust-gateway_name-2"
body.networks — Optional $ref: "#/definitions/zero-trust-gateway_ipv4_networks"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "Austin Office Location"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Zero Trust Gateway location — cloudflare.zero-trust-gateway-locations-delete-zero-trust-gateway-location

Run Delete a Zero Trust Gateway location with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.location_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-3"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "location_id": "ed35569b41ce4d1facfe683550f54086",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zero Trust Gateway location details — cloudflare.zero-trust-gateway-locations-zero-trust-gateway-location-details

Run Get Zero Trust Gateway location details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.location_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-3"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "location_id": "ed35569b41ce4d1facfe683550f54086",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Zero Trust Gateway location — cloudflare.zero-trust-gateway-locations-update-zero-trust-gateway-location

Run Update a Zero Trust Gateway location with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.location_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-3"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.client_default — Optional $ref: "#/definitions/zero-trust-gateway_client-default"
body.dns64_enabled — Optional $ref: "#/definitions/zero-trust-gateway_dns64-enabled"
body.dns_destination_ips_id — Optional $ref: "#/definitions/zero-trust-gateway_dns-destination-ips-id-write"
body.ecs_support — Optional $ref: "#/definitions/zero-trust-gateway_ecs-support"
body.endpoints — Optional $ref: "#/definitions/zero-trust-gateway_endpoints"
body.max_ttl — Optional $ref: "#/definitions/zero-trust-gateway_max-ttl"
body.name — Required $ref: "#/definitions/zero-trust-gateway_name-2"
body.networks — Optional $ref: "#/definitions/zero-trust-gateway_ipv4_networks"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "location_id": "ed35569b41ce4d1facfe683550f54086",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "Austin Office Location"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get logging settings for the Zero Trust account — cloudflare.zero-trust-accounts-get-logging-settings-for-the-zero-trust-account

Run Get logging settings for the Zero Trust account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Zero Trust account logging settings — cloudflare.zero-trust-accounts-update-logging-settings-for-the-zero-t-bc8951dcc5

Run Update Zero Trust account logging settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier"
body — Required $ref: "#/definitions/zero-trust-gateway_gateway-account-logging-settings"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Zero Trust Gateway operations — cloudflare.zero-trust-gateway-operations-list-zero-trust-gateway-operations

Run List Zero Trust Gateway operations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Zero Trust Gateway operation details — cloudflare.zero-trust-gateway-operations-zero-trust-gateway-operation-details

Run Zero Trust Gateway operation details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.operation_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-2"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "operation_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List PAC files — cloudflare.zero-trust-gateway-pacfiles-list

Run List PAC files with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Number of items per page. default: 50; minimum: 1; maximum: 200

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a PAC file — cloudflare.zero-trust-gateway-pacfiles-create-pacfile

Run Create a PAC file with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.contents — Required $ref: "#/definitions/zero-trust-gateway_contents"
body.description — Optional $ref: "#/definitions/zero-trust-gateway_description-4"
body.name — Required $ref: "#/definitions/zero-trust-gateway_name-7"
body.slug string Optional URL-friendly version of the PAC file name. If not provided, it will be auto-generated

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "Devops team",
    "contents": "function FindProxyForURL(url, host) { return \"DIRECT\"; }"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a PAC file — cloudflare.zero-trust-gateway-pacfiles-delete

Run Delete a PAC file with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pacfile_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-3"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pacfile_id": "ed35569b41ce4d1facfe683550f54086",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a PAC file — cloudflare.zero-trust-gateway-pacfiles-details

Run Get a PAC file with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pacfile_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-3"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pacfile_id": "ed35569b41ce4d1facfe683550f54086",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Zero Trust Gateway PAC file — cloudflare.zero-trust-gateway-pacfiles-update

Run Update a Zero Trust Gateway PAC file with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pacfile_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-3"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.contents — Required $ref: "#/definitions/zero-trust-gateway_contents"
body.description — Required $ref: "#/definitions/zero-trust-gateway_description-4"
body.name — Required $ref: "#/definitions/zero-trust-gateway_name-7"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pacfile_id": "ed35569b41ce4d1facfe683550f54086",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "Devops team",
    "description": "PAC file for Devops team",
    "contents": "function FindProxyForURL(url, host) { return \"DIRECT\"; }"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List proxy endpoints — cloudflare.zero-trust-gateway-proxy-endpoints-list-proxy-endpoints

Run List proxy endpoints with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
query object Optional additionalProperties: false
query.filter array Optional Filter the returned proxy endpoints by one or more field:value pairs. Repeat the parameter to apply multiple filters; they are combined with logical AND (an endpoint must satisfy every filter to be returned). Supported fields and their matching behaviour: * name — case-insensitive substring match on the endpoint name. * id — substring match on the endpoint ID (UUID), with or without dashes. * kind — exact match on the endpoint kind. The value must be ip or identity; any other value returns 400. Each entry must match one of the per-field patterns below: the field must be one of name, id, or kind; name/id accept any value, while kind only accepts ip or identity.
query.filter[] string Optional
query.filter[] string Optional anyOf[1]; pattern: "^name:.*$"
query.filter[] string Optional anyOf[2]; pattern: "^id:.*$"
query.filter[] string Optional anyOf[3]; pattern: "^kind:(ip|identity)$"
query.search string Optional Case-insensitive substring match on the endpoint name. When combined with filter, both must match (logical AND).
query.order_by string Optional Field to sort the returned endpoints by. When omitted, the order of results is unspecified. Supported values: * name — sort alphabetically by endpoint name. * created_at — sort by creation time; defaults to descending unless direction is set. * updated_at — sort by last-modified time; defaults to descending unless direction is set. enum: ["name","created_at","updated_at"]
query.direction string Optional Sort direction. Only takes effect when order_by is also provided; it is ignored otherwise. When direction is omitted the effective direction is field-specific: created_at and updated_at default to descending (newest first); name defaults to ascending. * asc — ascending. * desc — descending. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a proxy endpoint — cloudflare.zero-trust-gateway-proxy-endpoints-create-proxy-endpoint

Run Create a proxy endpoint with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.kind string Optional The proxy endpoint kind. enum: ["ip","identity"]; default: "ip"
body — Required oneOf[1]; $ref: "#/definitions/zero-trust-gateway_proxy-endpoint-ip-create"
body — Required oneOf[2]; $ref: "#/definitions/zero-trust-gateway_proxy-endpoint-identity-create"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "Devops team",
    "ips": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a proxy endpoint — cloudflare.zero-trust-gateway-proxy-endpoints-delete-proxy-endpoint

Run Delete a proxy endpoint with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.proxy_endpoint_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-3"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "proxy_endpoint_id": "ed35569b41ce4d1facfe683550f54086",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a proxy endpoint — cloudflare.zero-trust-gateway-proxy-endpoints-proxy-endpoint-details

Run Get a proxy endpoint with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.proxy_endpoint_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-3"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "proxy_endpoint_id": "ed35569b41ce4d1facfe683550f54086",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a proxy endpoint — cloudflare.zero-trust-gateway-proxy-endpoints-update-proxy-endpoint

Run Update a proxy endpoint with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.proxy_endpoint_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-3"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.ips — Optional $ref: "#/definitions/zero-trust-gateway_ips"
body.name — Optional $ref: "#/definitions/zero-trust-gateway_name-6"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "proxy_endpoint_id": "ed35569b41ce4d1facfe683550f54086",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Zero Trust Gateway rules — cloudflare.zero-trust-gateway-rules-list-zero-trust-gateway-rules

Run List Zero Trust Gateway rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
query object Optional additionalProperties: false
query.filter array Optional Filter the returned rules by one or more field:value pairs. Repeat the parameter to combine filters with logical AND. Supported fields are name, id, action, enabled, source_account, is_shared, filters, and expression (max 1024 bytes). The source_account value is matched as a normalized UUID substring. The filters value must be one of the rule filter names and matches a member of the rule's filters array. The expression filter performs a case-insensitive literal substring match across traffic, identity, and device posture expressions.
query.filter[] string Optional
query.filter[] string Optional anyOf[1]; pattern: "^name:.*$"
query.filter[] string Optional anyOf[2]; pattern: "^id:.*$"
query.filter[] string Optional anyOf[3]; pattern: "^action:(on|off|allow|block|scan|noscan|safesearch|ytrestricted|isolate|noisolate|override|l4_override|egress|resolve|quarantine|redirect|forward)$"
query.filter[] string Optional anyOf[4]; pattern: "^enabled:(true|false)$"
query.filter[] string Optional anyOf[5]; pattern: "^source_account:.*$"
query.filter[] string Optional anyOf[6]; pattern: "^is_shared:(true|false)$"
query.filter[] string Optional anyOf[7]; pattern: "^filters:(http|dns|dns_resolver|l4|egress)$"
query.filter[] string Optional anyOf[8]; pattern: "^expression:.*$"
query.search string Optional Case-insensitive substring search across rule name and description.
query.order_by string Optional Field to sort the returned rules by. Supported values are name, created_at, updated_at, and precedence. enum: ["name","created_at","updated_at","precedence"]
query.direction string Optional Sort direction. When order_by is omitted, this controls the direction of the existing precedence ordering. Shared rules remain first in either direction. Accepted values are asc and desc. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch multiple Zero Trust Gateway rules — cloudflare.zero-trust-gateway-rules-patch-multiple-zero-trust-gateway-rules

Run Patch multiple Zero Trust Gateway rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body array Required
body[] object Optional
body[].description — Optional $ref: "#/definitions/zero-trust-gateway_description-2"
body[].enabled — Optional $ref: "#/definitions/zero-trust-gateway_enabled"
body[].id — Required $ref: "#/definitions/zero-trust-gateway_uuid-4"
body[].name — Optional $ref: "#/definitions/zero-trust-gateway_name-3"
body[].precedence — Optional $ref: "#/definitions/zero-trust-gateway_precedence"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Zero Trust Gateway rule — cloudflare.zero-trust-gateway-rules-create-zero-trust-gateway-rule

Run Create a Zero Trust Gateway rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.action — Required $ref: "#/definitions/zero-trust-gateway_action"
body.description — Optional $ref: "#/definitions/zero-trust-gateway_description-2"
body.device_posture — Optional $ref: "#/definitions/zero-trust-gateway_device_posture"
body.enabled — Optional $ref: "#/definitions/zero-trust-gateway_enabled"
body.expiration — Optional $ref: "#/definitions/zero-trust-gateway_expiration"
body.filters — Optional $ref: "#/definitions/zero-trust-gateway_filters"
body.identity — Optional $ref: "#/definitions/zero-trust-gateway_identity"
body.name — Required $ref: "#/definitions/zero-trust-gateway_name-3"
body.precedence — Optional $ref: "#/definitions/zero-trust-gateway_precedence"
body.rule_settings — Optional $ref: "#/definitions/zero-trust-gateway_rule-settings"
body.schedule — Optional $ref: "#/definitions/zero-trust-gateway_schedule"
body.traffic — Optional $ref: "#/definitions/zero-trust-gateway_traffic"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "block bad websites",
    "action": "allow"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Zero Trust Gateway rules inherited from the parent account — cloudflare.zero-trust-gateway-rules-list-zero-trust-gateway-rules-tenant

Run List Zero Trust Gateway rules inherited from the parent account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Zero Trust Gateway rule — cloudflare.zero-trust-gateway-rules-delete-zero-trust-gateway-rule

Run Delete a Zero Trust Gateway rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-4"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zero Trust Gateway rule details. — cloudflare.zero-trust-gateway-rules-zero-trust-gateway-rule-details

Run Get Zero Trust Gateway rule details. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-4"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch a Zero Trust Gateway rule — cloudflare.zero-trust-gateway-rules-patch-zero-trust-gateway-rule

Run Patch a Zero Trust Gateway rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-4"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.description — Optional $ref: "#/definitions/zero-trust-gateway_description-2"
body.enabled — Optional $ref: "#/definitions/zero-trust-gateway_enabled"
body.name — Optional $ref: "#/definitions/zero-trust-gateway_name-3"
body.precedence — Optional $ref: "#/definitions/zero-trust-gateway_precedence"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Zero Trust Gateway rule — cloudflare.zero-trust-gateway-rules-update-zero-trust-gateway-rule

Run Update a Zero Trust Gateway rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-4"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"
body object Required
body.action — Required $ref: "#/definitions/zero-trust-gateway_action"
body.description — Optional $ref: "#/definitions/zero-trust-gateway_description-2"
body.device_posture — Optional $ref: "#/definitions/zero-trust-gateway_device_posture"
body.enabled — Optional $ref: "#/definitions/zero-trust-gateway_enabled"
body.expiration — Optional $ref: "#/definitions/zero-trust-gateway_expiration"
body.filters — Optional $ref: "#/definitions/zero-trust-gateway_filters"
body.identity — Optional $ref: "#/definitions/zero-trust-gateway_identity"
body.name — Required $ref: "#/definitions/zero-trust-gateway_name-3"
body.precedence — Optional $ref: "#/definitions/zero-trust-gateway_precedence"
body.rule_settings — Optional $ref: "#/definitions/zero-trust-gateway_rule-settings"
body.schedule — Optional $ref: "#/definitions/zero-trust-gateway_schedule"
body.traffic — Optional $ref: "#/definitions/zero-trust-gateway_traffic"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "block bad websites",
    "action": "allow"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Reset the expiration of a Zero Trust Gateway Rule — cloudflare.zero-trust-gateway-rules-reset-expiration-zero-trust-gateway-rule

Run Reset the expiration of a Zero Trust Gateway Rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/zero-trust-gateway_uuid-4"
path.account_id — Required $ref: "#/definitions/zero-trust-gateway_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Hyperdrives — cloudflare.list-hyperdrive

Run List Hyperdrives with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The Cloudflare account ID. $ref: "#/definitions/hyperdrive_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Maximum number of results per page. default: 20; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Hyperdrive — cloudflare.create-hyperdrive

Run Create Hyperdrive with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The Cloudflare account ID. $ref: "#/definitions/hyperdrive_identifier"
body — Required $ref: "#/definitions/hyperdrive_hyperdrive-config-create"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "example-hyperdrive",
    "origin": {
      "scheme": "postgres",
      "database": "postgres",
      "user": "postgres",
      "password": "example",
      "host": "database.example.com",
      "port": 5432
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Hyperdrive — cloudflare.delete-hyperdrive

Run Delete Hyperdrive with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The Cloudflare account ID. $ref: "#/definitions/hyperdrive_identifier"
path.hyperdrive_id — Required The unique identifier of the Hyperdrive configuration. $ref: "#/definitions/hyperdrive_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "hyperdrive_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Hyperdrive — cloudflare.get-hyperdrive

Run Get Hyperdrive with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The Cloudflare account ID. $ref: "#/definitions/hyperdrive_identifier"
path.hyperdrive_id — Required The unique identifier of the Hyperdrive configuration. $ref: "#/definitions/hyperdrive_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "hyperdrive_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Hyperdrive — cloudflare.patch-hyperdrive

Run Update Hyperdrive with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The Cloudflare account ID. $ref: "#/definitions/hyperdrive_identifier"
path.hyperdrive_id — Required The unique identifier of the Hyperdrive configuration. $ref: "#/definitions/hyperdrive_identifier"
body — Required $ref: "#/definitions/hyperdrive_hyperdrive-config-patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "hyperdrive_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace Hyperdrive — cloudflare.update-hyperdrive

Run Replace Hyperdrive with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The Cloudflare account ID. $ref: "#/definitions/hyperdrive_identifier"
path.hyperdrive_id — Required The unique identifier of the Hyperdrive configuration. $ref: "#/definitions/hyperdrive_identifier"
body — Required $ref: "#/definitions/hyperdrive_hyperdrive-config"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "hyperdrive_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "id": "023e105f4ecef8ad9ca31a8372d0c353",
    "name": "example-hyperdrive",
    "origin": {
      "scheme": "postgres",
      "database": "postgres",
      "user": "postgres",
      "password": "example",
      "host": "database.example.com",
      "port": 5432
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Restart Hyperdrive — cloudflare.restart-hyperdrive

Run Restart Hyperdrive with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The Cloudflare account ID. $ref: "#/definitions/hyperdrive_identifier"
path.hyperdrive_id — Required The unique identifier of the Hyperdrive configuration. $ref: "#/definitions/hyperdrive_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "hyperdrive_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Database Signature — cloudflare.create-hyperdrive-database-signature

Run Create Database Signature with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The Cloudflare account ID. $ref: "#/definitions/hyperdrive_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Account Permission Groups — cloudflare.account-permission-group-list

Run List Account Permission Groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
query object Optional additionalProperties: false
query.id string Optional ID of the permission group to be fetched. minLength: 32; maxLength: 32
query.name string Optional Name of the permission group to be fetched.
query.label string Optional Label of the permission group to be fetched.
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Permission Group Details — cloudflare.account-permission-group-details

Run Permission Group Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.permission_group_id — Required $ref: "#/definitions/iam_permission_group_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "permission_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Resource Groups — cloudflare.account-resource-group-list

Run List Resource Groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
query object Optional additionalProperties: false
query.id — Optional ID of the resource group to be fetched.
query.id — Optional allOf[1]; $ref: "#/definitions/iam_resource_group_identifier"
query.name string Optional Name of the resource group to be fetched.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Resource Group — cloudflare.account-resource-group-create

Run Create Resource Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
body — Required $ref: "#/definitions/iam_request_create_resource_group"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "NewResourceGroup",
    "scope": {
      "key": "com.cloudflare.api.account.eb78d65290b24279ba6f44721b3ea3c4",
      "objects": []
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove Resource Group — cloudflare.account-resource-group-delete

Run Remove Resource Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.resource_group_id — Required $ref: "#/definitions/iam_resource_group_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "resource_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Resource Group Details — cloudflare.account-resource-group-details

Run Resource Group Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.resource_group_id — Required $ref: "#/definitions/iam_resource_group_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "resource_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Resource Group — cloudflare.account-resource-group-update

Run Update Resource Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.resource_group_id — Required $ref: "#/definitions/iam_resource_group_identifier"
body — Required $ref: "#/definitions/iam_request_update_resource_group"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "resource_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List User Groups — cloudflare.account-user-group-list

Run List User Groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
query object Optional additionalProperties: false
query.id — Optional ID of the user group to be fetched. $ref: "#/definitions/iam_user_group_identifier"
query.name string Optional Name of the user group to be fetched.
query.fuzzyName string Optional A string used for searching for user groups containing that substring.
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. default: 100; minimum: 1; maximum: 500
query.direction string Optional The sort order of returned user groups by name (ascending or descending). enum: ["asc","desc"]; default: "asc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create User Group — cloudflare.account-user-group-create

Run Create User Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
body — Required $ref: "#/definitions/iam_create_user_group_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "My New User Group"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove User Group — cloudflare.account-user-group-delete

Run Remove User Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_group_id — Required $ref: "#/definitions/iam_user_group_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

User Group Details — cloudflare.account-user-group-details

Run User Group Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_group_id — Required $ref: "#/definitions/iam_user_group_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update User Group — cloudflare.account-user-group-update

Run Update User Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_group_id — Required $ref: "#/definitions/iam_user_group_identifier"
body — Required $ref: "#/definitions/iam_update_user_group_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List User Group Members — cloudflare.account-user-group-member-list

Run List User Group Members with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_group_id — Required $ref: "#/definitions/iam_user_group_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. default: 100; minimum: 1; maximum: 500
query.fuzzyEmail string Optional A string used for filtering members by partial email match.
query.direction string Optional The sort order of returned user group members by email. enum: ["asc","desc"]; default: "asc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add User Group Members — cloudflare.account-user-group-member-create

Run Add User Group Members with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_group_id — Required $ref: "#/definitions/iam_user_group_identifier"
body array Required
body[] object Optional
body[].id — Required $ref: "#/definitions/iam_user_group_member_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update User Group Members — cloudflare.account-user-group-members-update

Run Update User Group Members with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_group_id — Required $ref: "#/definitions/iam_user_group_identifier"
body array Required Set/Replace members to a user group.
body[] object Optional
body[].id — Required $ref: "#/definitions/iam_user_group_member_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove User Group Member — cloudflare.account-user-group-member-delete

Run Remove User Group Member with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_group_id — Required $ref: "#/definitions/iam_user_group_identifier"
path.member_id — Required $ref: "#/definitions/iam_user_group_member_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_group_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "member_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get User Group Member — cloudflare.account-user-group-member-get

Run Get User Group Member with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_group_id — Required $ref: "#/definitions/iam_user_group_identifier"
path.member_id — Required $ref: "#/definitions/iam_user_group_member_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_group_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "member_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Signing Keys — cloudflare.cloudflare-images-keys-list-signing-keys

Run List Signing Keys with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Signing Key — cloudflare.cloudflare-images-keys-delete-signing-key

Run Delete Signing Key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.signing_key_name — Required $ref: "#/definitions/images_signing_key_identifier"
path.account_id — Required $ref: "#/definitions/images_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "signing_key_name": "someKey",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new Signing Key — cloudflare.cloudflare-images-keys-add-signing-key

Run Create a new Signing Key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.signing_key_name — Required $ref: "#/definitions/images_signing_key_identifier"
path.account_id — Required $ref: "#/definitions/images_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "signing_key_name": "someKey",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Images usage statistics — cloudflare.cloudflare-images-images-usage-statistics

Run Images usage statistics with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List variants — cloudflare.cloudflare-images-variants-list-variants

Run List variants with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a variant — cloudflare.cloudflare-images-variants-create-a-variant

Run Create a variant with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
body — Required $ref: "#/definitions/images_image_variant_definition"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "id": "hero",
    "options": {
      "fit": "scale-down",
      "metadata": "none",
      "width": 1366,
      "height": 768
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a variant — cloudflare.cloudflare-images-variants-delete-a-variant

Run Delete a variant with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.variant_id — Required $ref: "#/definitions/images_image_variant_identifier"
path.account_id — Required $ref: "#/definitions/images_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "variant_id": "hero",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Variant details — cloudflare.cloudflare-images-variants-variant-details

Run Variant details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.variant_id — Required $ref: "#/definitions/images_image_variant_identifier"
path.account_id — Required $ref: "#/definitions/images_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "variant_id": "hero",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a variant — cloudflare.cloudflare-images-variants-update-a-variant

Run Update a variant with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.variant_id — Required $ref: "#/definitions/images_image_variant_identifier"
path.account_id — Required $ref: "#/definitions/images_account_identifier"
body — Required $ref: "#/definitions/images_image_variant_patch_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "variant_id": "hero",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "options": {
      "fit": "scale-down",
      "metadata": "none",
      "width": 1366,
      "height": 768
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List images V2 — cloudflare.cloudflare-images-list-images-v2

Run List images V2 with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
query object Optional additionalProperties: false
query.continuation_token — Optional $ref: "#/definitions/images_images_list_continuation_token"
query.per_page number Optional Number of items per page default: 1000; minimum: 10; maximum: 10000
query.sort_order string Optional Sorting order by upload time enum: ["asc","desc"]; default: "desc"
query.creator string | null Optional Internal user ID set within the creator field. Setting to empty string "" will return images where creator field is not set
query.meta.<field>[<operator>] string Optional Optional metadata filter(s). Multiple filters can be combined with AND logic. Operators: - eq, eq:string, eq:number, eq:boolean - Exact match - gt, gt:number - Greater than (number only) - gte, gte:number - Greater than or equal (number only) - lt, lt:number - Less than (number only) - lte, lte:number - Less than or equal (number only) - in, in:string, in:number - Match any value in pipe-separated list Examples: - meta.status[eq]=active - meta.priority[eq:number]=5 - meta.enabled[eq:boolean]=true - meta.priority[gte:number]=1 - meta.score[lt:number]=100 - meta.region[in]=us-east&#124;us-west&#124;eu-west Note: Filter consistency is not validated. Contradictory filters (e.g., meta.priority[eq:number]=5&amp;meta.priority[lte:number]=3) will return zero results.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List image metadata keys — cloudflare.cloudflare-images-list-metadata-keys

Run List image metadata keys with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List sourcing kit migrations — cloudflare.cloudflare-images-sourcingkit-list-migrations

Run List sourcing kit migrations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
query object Optional additionalProperties: false
query.offset integer Optional Number of items to skip before returning results. default: 0; minimum: 0
query.limit integer Optional Maximum number of items to return. default: 25; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a sourcing kit migration — cloudflare.cloudflare-images-sourcingkit-create-migration

Run Create a sourcing kit migration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
body — Required $ref: "#/definitions/images_sourcingkit_migration_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "sourceId": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a sourcing kit migration — cloudflare.cloudflare-images-sourcingkit-delete-migration

Run Delete a sourcing kit migration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
path.migration_id — Required $ref: "#/definitions/images_sourcingkit_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "migration_id": "5ca167e6-4e40-4ced-a209-ca1b9dd6a265"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get sourcing kit migration — cloudflare.cloudflare-images-sourcingkit-get-migration

Run Get sourcing kit migration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
path.migration_id — Required $ref: "#/definitions/images_sourcingkit_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "migration_id": "5ca167e6-4e40-4ced-a209-ca1b9dd6a265"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get migration progress — cloudflare.cloudflare-images-sourcingkit-get-migration-progress

Run Get migration progress with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
path.migration_id — Required $ref: "#/definitions/images_sourcingkit_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "migration_id": "5ca167e6-4e40-4ced-a209-ca1b9dd6a265"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Abort a migration — cloudflare.cloudflare-images-sourcingkit-abort-migration

Run Abort a migration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
path.migration_id — Required $ref: "#/definitions/images_sourcingkit_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "migration_id": "5ca167e6-4e40-4ced-a209-ca1b9dd6a265"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start a migration — cloudflare.cloudflare-images-sourcingkit-start-migration

Run Start a migration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
path.migration_id — Required $ref: "#/definitions/images_sourcingkit_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "migration_id": "5ca167e6-4e40-4ced-a209-ca1b9dd6a265"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List migration logs — cloudflare.cloudflare-images-sourcingkit-list-migration-logs

Run List migration logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
path.migration_id — Required $ref: "#/definitions/images_sourcingkit_identifier"
query object Optional additionalProperties: false
query.offset integer Optional Number of items to skip before returning results. default: 0; minimum: 0
query.limit integer Optional Maximum number of items to return. default: 25; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "migration_id": "5ca167e6-4e40-4ced-a209-ca1b9dd6a265"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List sourcing kit sources — cloudflare.cloudflare-images-sourcingkit-list-sources

Run List sourcing kit sources with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
query object Optional additionalProperties: false
query.offset integer Optional Number of items to skip before returning results. default: 0; minimum: 0
query.limit integer Optional Maximum number of items to return. default: 25; minimum: 1; maximum: 100
query.name string Optional Filter sources by name (partial match).

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a sourcing kit source — cloudflare.cloudflare-images-sourcingkit-create-source

Run Create a sourcing kit source with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
body — Required $ref: "#/definitions/images_sourcingkit_source_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "my-s3-bucket",
    "bucket": "my-images-bucket",
    "vendor": "s3",
    "secret": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Precheck source connectivity — cloudflare.cloudflare-images-sourcingkit-precheck-source-connectivity

Run Precheck source connectivity with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
body — Required $ref: "#/definitions/images_sourcingkit_connectivity_precheck_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "bucket": "example",
    "vendor": "s3",
    "secret": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a sourcing kit source — cloudflare.cloudflare-images-sourcingkit-delete-source

Run Delete a sourcing kit source with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
path.source_id — Required $ref: "#/definitions/images_sourcingkit_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "source_id": "5ca167e6-4e40-4ced-a209-ca1b9dd6a265"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get sourcing kit source — cloudflare.cloudflare-images-sourcingkit-get-source

Run Get sourcing kit source with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
path.source_id — Required $ref: "#/definitions/images_sourcingkit_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "source_id": "5ca167e6-4e40-4ced-a209-ca1b9dd6a265"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a sourcing kit source — cloudflare.cloudflare-images-sourcingkit-update-source

Run Update a sourcing kit source with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
path.source_id — Required $ref: "#/definitions/images_sourcingkit_identifier"
body — Required $ref: "#/definitions/images_sourcingkit_source_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "source_id": "5ca167e6-4e40-4ced-a209-ca1b9dd6a265"
  },
  "body": {
    "name": "my-renamed-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get source connectivity status — cloudflare.cloudflare-images-sourcingkit-get-source-connectivity

Run Get source connectivity status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/images_account_identifier"
path.source_id — Required $ref: "#/definitions/images_sourcingkit_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "source_id": "5ca167e6-4e40-4ced-a209-ca1b9dd6a265"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all targets — cloudflare.infra-targets-list

Run List all targets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/infra_AccountTag"
query object Optional additionalProperties: false
query.hostname string | null Optional Hostname of a target
query.hostname_contains string | null Optional Partial match to the hostname of a target
query.virtual_network_id string | null Optional Private virtual network identifier of the target format: "uuid"
query.ip_v4 string | null Optional IPv4 address of the target
query.ip_v6 string | null Optional IPv6 address of the target
query.created_before string | null Optional Date and time at which the target was created before (inclusive) format: "date-time"
query.created_after string | null Optional Date and time at which the target was created after (inclusive) format: "date-time"
query.modified_before string | null Optional Date and time at which the target was modified before (inclusive) format: "date-time"
query.modified_after string | null Optional Date and time at which the target was modified after (inclusive) format: "date-time"
query.ips array Optional Filters for targets that have any of the following IP addresses. Specify ips multiple times in query parameter to build list of candidates.
query.ips[] string Optional
query.target_ids array Optional Filters for targets that have any of the following UUIDs. Specify target_ids multiple times in query parameter to build list of candidates.
query.target_ids[] string Optional format: "uuid"
query.ip_like string | null Optional Filters for targets whose IP addresses look like the specified string. Supports * as a wildcard character
query.ipv4_start string | null Optional Defines an IPv4 filter range's starting value (inclusive). Requires ipv4_end to be specified as well.
query.ipv4_end string | null Optional Defines an IPv4 filter range's ending value (inclusive). Requires ipv4_start to be specified as well.
query.ipv6_start string | null Optional Defines an IPv6 filter range's starting value (inclusive). Requires ipv6_end to be specified as well.
query.ipv6_end string | null Optional Defines an IPv6 filter range's ending value (inclusive). Requires ipv6_start to be specified as well.
query.tag array Optional Filter by tag key:value pairs. Multiple tag params are AND'd. Format: tag=key:value (e.g., tag=environment:production). Key and value must both be non-empty; tag=:value and tag=key: return 400.
query.tag[] string Optional
query.page integer Optional Current page in the response default: 1; minimum: 1
query.per_page integer Optional Max amount of entries returned per page default: 1000; minimum: 1; maximum: 1000
query.order string Optional The field to sort by. enum: ["hostname","created_at"]
query.direction — Optional The sorting direction.
query.direction — Optional allOf[1]; $ref: "#/definitions/infra_SortingDirection"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create new target — cloudflare.infra-targets-post

Run Create new target with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/infra_AccountTag"
body object Required
body.hostname string Required A non-unique field that refers to a target. Case insensitive, maximum length of 255 characters, supports the use of special characters dash and period, does not support spaces, and must start and end with an alphanumeric character.
body.ip — Required $ref: "#/definitions/infra_IPInfo"
body.tags object | null Optional Optional tags to associate with the target. Keys and values are user-defined strings. additionalProperties: {"type":"string"}

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "hostname": "infra-access-target",
    "ip": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create new targets — cloudflare.infra-targets-put-batch

Run Create new targets with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/infra_AccountTag"
body array Required
body[] object Optional
body[].hostname string Required A non-unique field that refers to a target. Case insensitive, maximum length of 255 characters, supports the use of special characters dash and period, does not support spaces, and must start and end with an alphanumeric character.
body[].ip — Required $ref: "#/definitions/infra_IPInfo"
body[].tags object | null Optional Optional tags to associate with the target. Keys and values are user-defined strings. additionalProperties: {"type":"string"}

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete targets — cloudflare.infra-targets-delete-batch-post

Run Delete targets with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/infra_AccountTag"
body object Required
body.target_ids array Required List of target IDs to bulk delete
body.target_ids[] — Optional $ref: "#/definitions/infra_TargetId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "target_ids": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace tags on existing targets — cloudflare.infra-targets-post-batch-tags

Run Replace tags on existing targets with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/infra_AccountTag"
body object Required
body.items array Required
body.items[] — Optional $ref: "#/definitions/infra_BatchReplaceTargetTagsItem"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "items": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete target — cloudflare.infra-targets-delete

Run Delete target with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/infra_AccountTag"
path.target_id — Required $ref: "#/definitions/infra_TargetId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "target_id": "0191dce4-9ab4-7fce-b660-8e5dec5172da"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get target — cloudflare.infra-targets-get

Run Get target with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/infra_AccountTag"
path.target_id — Required $ref: "#/definitions/infra_TargetId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "target_id": "0191dce4-9ab4-7fce-b660-8e5dec5172da"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update target — cloudflare.infra-targets-put

Run Update target with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/infra_AccountTag"
path.target_id — Required $ref: "#/definitions/infra_TargetId"
body object Required
body.hostname string Required A non-unique field that refers to a target. Case insensitive, maximum length of 255 characters, supports the use of special characters dash and period, does not support spaces, and must start and end with an alphanumeric character.
body.ip — Required $ref: "#/definitions/infra_IPInfo"
body.tags object | null Optional Optional tags to associate with the target. Keys and values are user-defined strings. additionalProperties: {"type":"string"}

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "target_id": "0191dce4-9ab4-7fce-b660-8e5dec5172da"
  },
  "body": {
    "hostname": "infra-access-target",
    "ip": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get ASN Overview. — cloudflare.asn-intelligence-get-asn-overview

Run Get ASN Overview. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asn — Required $ref: "#/definitions/intel_asn"
path.account_id — Required $ref: "#/definitions/intel_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asn": 1,
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get ASN Subnets — cloudflare.asn-intelligence-get-asn-subnets

Run Get ASN Subnets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asn — Required $ref: "#/definitions/intel_asn"
path.account_id — Required $ref: "#/definitions/intel_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asn": 1,
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Security Center Issues Types — cloudflare.get-security-center-issue-types

Run Retrieves Security Center Issues Types with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Passive DNS by IP — cloudflare.passive-dns-by-ip-get-passive-dns-by-ip

Run Get Passive DNS by IP with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/intel_identifier"
query object Optional additionalProperties: false
query.start_end_params — Optional $ref: "#/definitions/intel_start_end_params"
query.ipv4 string Optional
query.page number Optional Requested page within paginated list of results.
query.per_page number Optional Maximum number of results requested.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Domain Details — cloudflare.domain-intelligence-get-domain-details

Run Get Domain Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/intel_identifier"
query object Optional additionalProperties: false
query.domain string Optional
query.skip_dns boolean Optional Skip DNS resolution lookups for faster response.
query.skip_ranking boolean Optional Skip the domain ranking lookup for faster responses. Defaults to false (ranking is included). Set to true to opt out — primarily used by callers like Cloudflare Radar that need to avoid a circular dependency when building the domain details page. Note: the bulk endpoint (/intel/domain/bulk) uses opposite defaults — see include_ranking there. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Domain History — cloudflare.domain-history-get-domain-history

Run Get Domain History with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/intel_identifier"
query object Optional additionalProperties: false
query.domain string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Multiple Domain Details — cloudflare.domain-intelligence-get-multiple-domain-details

Run Get Multiple Domain Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/intel_identifier"
query object Optional additionalProperties: false
query.domain array Optional Accepts multiple values like ?domain=cloudflare.com&amp;domain=example.com.
query.domain[] string Optional
query.include_ranking boolean Optional Whether to include domain ranking data in the response. Defaults to false — ranking lookups are expensive at bulk scale and most callers do not need them. Set to true to opt in. This parameter replaces the deprecated skip_ranking (see below). default: false
query.skip_ranking boolean Optional Deprecated. Previously controlled whether the ranking lookup was skipped (defaulted to false, meaning ranking ran). The endpoint's default behavior is being flipped — ranking is now opt-in via include_ranking=true — and this parameter will be silently ignored. Remove it from your callers and use include_ranking instead.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get indicator feeds owned by this account — cloudflare.custom-indicator-feeds-get-indicator-feeds

Run Get indicator feeds owned by this account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/custom-indicator-feeds_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create new indicator feed — cloudflare.custom-indicator-feeds-create-indicator-feeds

Run Create new indicator feed with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/custom-indicator-feeds_identifier"
body — Required $ref: "#/definitions/custom-indicator-feeds_create_feed"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "description": "example feed description",
    "name": "example_feed_1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Grant permission to indicator feed — cloudflare.custom-indicator-feeds-add-permission

Run Grant permission to indicator feed with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/custom-indicator-feeds_identifier"
body — Required $ref: "#/definitions/custom-indicator-feeds_permissions_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create indicator feed provider — cloudflare.custom-indicator-feeds-create-provider

Run Create indicator feed provider with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/custom-indicator-feeds_identifier"
body — Required $ref: "#/definitions/custom-indicator-feeds_create_provider_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "account_id": 12345,
    "name": "my_provider"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revoke permission to indicator feed — cloudflare.custom-indicator-feeds-remove-permission

Run Revoke permission to indicator feed with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/custom-indicator-feeds_identifier"
body — Required $ref: "#/definitions/custom-indicator-feeds_permissions_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List indicator feed permissions — cloudflare.custom-indicator-feeds-view-permissions

Run List indicator feed permissions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/custom-indicator-feeds_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get indicator feed metadata — cloudflare.custom-indicator-feeds-get-indicator-feed-metadata

Run Get indicator feed metadata with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/custom-indicator-feeds_identifier"
path.feed_id — Required $ref: "#/definitions/custom-indicator-feeds_feed_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "feed_id": 12
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update indicator feed metadata — cloudflare.custom-indicator-feeds-update-indicator-feed-metadata

Run Update indicator feed metadata with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/custom-indicator-feeds_identifier"
path.feed_id — Required $ref: "#/definitions/custom-indicator-feeds_feed_id"
body — Required $ref: "#/definitions/custom-indicator-feeds_update_public_field_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "feed_id": 12
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get indicator feed data — cloudflare.custom-indicator-feeds-get-indicator-feed-data

Run Get indicator feed data with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/custom-indicator-feeds_identifier"
path.feed_id — Required $ref: "#/definitions/custom-indicator-feeds_feed_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "feed_id": 12
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Download indicator feed data — cloudflare.custom-indicator-feeds-download-indicator-feed-data

Run Download indicator feed data with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/custom-indicator-feeds_identifier"
path.feed_id — Required $ref: "#/definitions/custom-indicator-feeds_feed_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "feed_id": 12
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get indicator feed upload status — cloudflare.custom-indicator-feeds-get-upload-status

Run Get indicator feed upload status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/custom-indicator-feeds_identifier"
path.feed_id — Required $ref: "#/definitions/custom-indicator-feeds_feed_id"
path.upload_id integer Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "feed_id": 12,
    "upload_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get IP Overview — cloudflare.ip-intelligence-get-ip-overview

Run Get IP Overview with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/intel_identifier"
query object Optional additionalProperties: false
query.ipv4 string Optional
query.ipv6 string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Available IP Lists — cloudflare.ip-list-get-ip-lists

Run Get Available IP Lists with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/intel_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Miscategorization — cloudflare.miscategorization-create-miscategorization

Run Create Miscategorization with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/intel_identifier"
body — Required $ref: "#/definitions/intel_miscategorization"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List sinkholes owned by this account — cloudflare.sinkhole-config-list-sinkholes

Run List sinkholes owned by this account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The unique identifier for the Cloudflare account. $ref: "#/definitions/intel-sinkholes_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new sinkhole for your account — cloudflare.sinkhole-config-create-sinkhole

Run Create a new sinkhole for your account with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The unique identifier for the Cloudflare account. $ref: "#/definitions/intel-sinkholes_identifier"
body — Required $ref: "#/definitions/intel-sinkholes_sinkhole_create_params"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a sinkhole — cloudflare.sinkhole-config-delete-sinkhole

Run Delete a sinkhole with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The unique identifier for the Cloudflare account. $ref: "#/definitions/intel-sinkholes_identifier"
path.sinkhole_id string Required The unique identifier for the sinkhole.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sinkhole_id": "93defa6e909e464e8c89a85859f36d3c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a sinkhole — cloudflare.sinkhole-config-get-sinkhole

Run Get a sinkhole with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The unique identifier for the Cloudflare account. $ref: "#/definitions/intel-sinkholes_identifier"
path.sinkhole_id string Required The unique identifier for the sinkhole.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sinkhole_id": "93defa6e909e464e8c89a85859f36d3c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a sinkhole — cloudflare.sinkhole-config-update-sinkhole

Run Update a sinkhole with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The unique identifier for the Cloudflare account. $ref: "#/definitions/intel-sinkholes_identifier"
path.sinkhole_id string Required The unique identifier for the sinkhole.
body — Required $ref: "#/definitions/intel-sinkholes_sinkhole_create_params"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sinkhole_id": "93defa6e909e464e8c89a85859f36d3c"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List ingresses for a sinkhole — cloudflare.sinkhole-config-list-sinkhole-ingresses

Run List ingresses for a sinkhole with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The unique identifier for the Cloudflare account. $ref: "#/definitions/intel-sinkholes_identifier"
path.sinkhole_id string Required The unique identifier for the sinkhole.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sinkhole_id": "93defa6e909e464e8c89a85859f36d3c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get URL Intelligence — cloudflare.url-intelligence-get-url-intelligence

Run Get URL Intelligence with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/intel_identifier"
query object Required additionalProperties: false
query.url string Required The URL to look up.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "url": "https://example.com/path"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get WHOIS Record — cloudflare.whois-record-get-whois-record

Run Get WHOIS Record with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudforce-one-whois_identifier"
query object Optional additionalProperties: false
query.domain string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Toggle PDF Invoices — cloudflare.account-billing-toggle-pdf-invoices

Run Toggle PDF Invoices with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body object Required
body.toggle boolean Optional Whether to enable or disable PDF invoice generation.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List K2 streams — cloudflare.getv4accountsbyaccount_idk2streams

Run List K2 streams with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-k2_workers-k2-account-id"
query object Optional additionalProperties: false
query.name string Optional Filters K2 streams by name using a case-insensitive substring. minLength: 1; maxLength: 128
query.page integer Optional default: 1; minimum: 1
query.per_page integer Optional default: 25; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create K2 stream — cloudflare.postv4accountsbyaccount_idk2streams

Run Create K2 stream with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-k2_workers-k2-account-id"
body — Required $ref: "#/definitions/cloudflare-k2_CreateK2StreamRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "my_k2_stream"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete K2 stream — cloudflare.deletev4accountsbyaccount_idk2streamsbystream_id

Run Delete K2 stream with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-k2_workers-k2-account-id"
path.stream_id — Required $ref: "#/definitions/cloudflare-k2_workers-k2-stream-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353",
    "stream_id": "053e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get K2 stream — cloudflare.getv4accountsbyaccount_idk2streamsbystream_id

Run Get K2 stream with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-k2_workers-k2-account-id"
path.stream_id — Required $ref: "#/definitions/cloudflare-k2_workers-k2-stream-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353",
    "stream_id": "053e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List subscriptions with consumer lag — cloudflare.getv4accountsbyaccount_idk2streamsbystream_idsubscriptions

Run List subscriptions with consumer lag with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-k2_workers-k2-account-id"
path.stream_id — Required $ref: "#/definitions/cloudflare-k2_workers-k2-stream-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353",
    "stream_id": "053e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Account Load Balancers — cloudflare.account-load-balancers-list-account-load-balancers

Run List Account Load Balancers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Monitor Groups — cloudflare.account-load-balancer-monitor-groups-list-monitor-groups

Run List Monitor Groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Monitor Group — cloudflare.account-load-balancer-monitor-groups-create-monitor-group

Run Create Monitor Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body — Required $ref: "#/definitions/load-balancing_monitor-group"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "description": "Primary datacenter monitors",
    "members": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Monitor Group — cloudflare.account-load-balancer-monitor-groups-delete-monitor-group

Run Delete Monitor Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_group_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_group_id": "17b5962d775c646f3f9725cbc7a53df4",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Monitor Group Details — cloudflare.account-load-balancer-monitor-groups-monitor-group-details

Run Monitor Group Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_group_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_group_id": "17b5962d775c646f3f9725cbc7a53df4",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Monitor Group — cloudflare.account-load-balancer-monitor-groups-patch-monitor-group

Run Patch Monitor Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_group_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body — Required $ref: "#/definitions/load-balancing_monitor-group"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_group_id": "17b5962d775c646f3f9725cbc7a53df4",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "description": "Primary datacenter monitors",
    "members": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Monitor Group — cloudflare.account-load-balancer-monitor-groups-update-monitor-group

Run Update Monitor Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_group_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body — Required $ref: "#/definitions/load-balancing_monitor-group"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_group_id": "17b5962d775c646f3f9725cbc7a53df4",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "description": "Primary datacenter monitors",
    "members": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Monitor Group References — cloudflare.account-load-balancer-monitor-groups-list-monitor-group-references

Run List Monitor Group References with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_group_id — Required $ref: "#/definitions/load-balancing_identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_group_id": "f1aba936b94213e5b8dca0c0dbf1f9cc",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Monitors — cloudflare.account-load-balancer-monitors-list-monitors

Run List Monitors with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Monitor — cloudflare.account-load-balancer-monitors-create-monitor

Run Create Monitor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/load-balancing_monitor-editable"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Monitor — cloudflare.account-load-balancer-monitors-delete-monitor

Run Delete Monitor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Monitor Details — cloudflare.account-load-balancer-monitors-monitor-details

Run Monitor Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Monitor — cloudflare.account-load-balancer-monitors-patch-monitor

Run Patch Monitor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/load-balancing_monitor-editable"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Monitor — cloudflare.account-load-balancer-monitors-update-monitor

Run Update Monitor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/load-balancing_monitor-editable"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Preview Monitor — cloudflare.account-load-balancer-monitors-preview-monitor

Run Preview Monitor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/load-balancing_monitor-editable"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Monitor References — cloudflare.account-load-balancer-monitors-list-monitor-references

Run List Monitor References with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Pools — cloudflare.account-load-balancer-pools-list-pools

Run List Pools with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
query object Optional additionalProperties: false
query.monitor string Optional The ID of the Monitor to use for checking the health of origins within this pool.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Pools — cloudflare.account-load-balancer-pools-patch-pools

Run Patch Pools with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body object Required
body.notification_email — Optional $ref: "#/definitions/load-balancing_patch_pools_notification_email"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Pool — cloudflare.account-load-balancer-pools-create-pool

Run Create Pool with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body object Required
body.description — Optional $ref: "#/definitions/load-balancing_schemas-description"
body.enabled — Optional $ref: "#/definitions/load-balancing_enabled"
body.latitude — Optional $ref: "#/definitions/load-balancing_latitude"
body.load_shedding — Optional $ref: "#/definitions/load-balancing_load_shedding"
body.longitude — Optional $ref: "#/definitions/load-balancing_longitude"
body.minimum_origins — Optional $ref: "#/definitions/load-balancing_minimum_origins"
body.monitor — Optional $ref: "#/definitions/load-balancing_monitor_id"
body.monitor_group — Optional $ref: "#/definitions/load-balancing_monitor_group_id"
body.name — Required $ref: "#/definitions/load-balancing_name"
body.notification_email — Optional $ref: "#/definitions/load-balancing_notification_email"
body.notification_filter — Optional $ref: "#/definitions/load-balancing_notification_filter"
body.origin_steering — Optional $ref: "#/definitions/load-balancing_origin_steering"
body.origins — Required $ref: "#/definitions/load-balancing_origins"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "origins": [],
    "name": "primary-dc-1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Pool — cloudflare.account-load-balancer-pools-delete-pool

Run Delete Pool with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Pool Details — cloudflare.account-load-balancer-pools-pool-details

Run Pool Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Pool — cloudflare.account-load-balancer-pools-patch-pool

Run Patch Pool with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body object Required
body.check_regions — Optional $ref: "#/definitions/load-balancing_check_regions"
body.description — Optional $ref: "#/definitions/load-balancing_schemas-description"
body.disabled_at — Optional $ref: "#/definitions/load-balancing_schemas-disabled_at"
body.enabled — Optional $ref: "#/definitions/load-balancing_enabled"
body.health_sources — Optional $ref: "#/definitions/load-balancing_health_sources"
body.latitude — Optional $ref: "#/definitions/load-balancing_latitude"
body.load_shedding — Optional $ref: "#/definitions/load-balancing_load_shedding"
body.longitude — Optional $ref: "#/definitions/load-balancing_longitude"
body.minimum_origins — Optional $ref: "#/definitions/load-balancing_minimum_origins"
body.monitor — Optional $ref: "#/definitions/load-balancing_monitor_id"
body.monitor_group — Optional $ref: "#/definitions/load-balancing_monitor_group_id"
body.name — Optional $ref: "#/definitions/load-balancing_name"
body.notification_email — Optional $ref: "#/definitions/load-balancing_notification_email"
body.notification_filter — Optional $ref: "#/definitions/load-balancing_notification_filter"
body.origin_steering — Optional $ref: "#/definitions/load-balancing_origin_steering"
body.origins — Optional $ref: "#/definitions/load-balancing_origins"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Pool — cloudflare.account-load-balancer-pools-update-pool

Run Update Pool with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body object Required
body.check_regions — Optional $ref: "#/definitions/load-balancing_check_regions"
body.description — Optional $ref: "#/definitions/load-balancing_schemas-description"
body.disabled_at — Optional $ref: "#/definitions/load-balancing_schemas-disabled_at"
body.enabled — Optional $ref: "#/definitions/load-balancing_enabled"
body.health_sources — Optional $ref: "#/definitions/load-balancing_health_sources"
body.latitude — Optional $ref: "#/definitions/load-balancing_latitude"
body.load_shedding — Optional $ref: "#/definitions/load-balancing_load_shedding"
body.longitude — Optional $ref: "#/definitions/load-balancing_longitude"
body.minimum_origins — Optional $ref: "#/definitions/load-balancing_minimum_origins"
body.monitor — Optional $ref: "#/definitions/load-balancing_monitor_id"
body.monitor_group — Optional $ref: "#/definitions/load-balancing_monitor_group_id"
body.name — Required $ref: "#/definitions/load-balancing_name"
body.notification_email — Optional $ref: "#/definitions/load-balancing_notification_email"
body.notification_filter — Optional $ref: "#/definitions/load-balancing_notification_filter"
body.origin_steering — Optional $ref: "#/definitions/load-balancing_origin_steering"
body.origins — Required $ref: "#/definitions/load-balancing_origins"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "origins": [],
    "name": "primary-dc-1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Pool Health Details — cloudflare.account-load-balancer-pools-pool-health-details

Run Pool Health Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Preview Pool — cloudflare.account-load-balancer-pools-preview-pool

Run Preview Pool with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/load-balancing_monitor-editable"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Pool References — cloudflare.account-load-balancer-pools-list-pool-references

Run List Pool References with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Preview Result — cloudflare.account-load-balancer-monitors-preview-result

Run Preview Result with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.preview_id — Required $ref: "#/definitions/load-balancing_schemas-preview_id"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "preview_id": "p1aba936b94213e5b8dca0c0dbf1f9cc",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Regions — cloudflare.load-balancer-regions-list-regions

Run List Regions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
query object Optional additionalProperties: false
query.subdivision_code — Optional $ref: "#/definitions/load-balancing_subdivision_code_a2"
query.subdivision_code_a2 — Optional $ref: "#/definitions/load-balancing_subdivision_code_a2"
query.country_code_a2 string Optional Two-letter alpha-2 country code followed in ISO 3166-1.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Region — cloudflare.load-balancer-regions-get-region

Run Get Region with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.region_id — Required $ref: "#/definitions/load-balancing_region_code"
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "region_id": "WNAM",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Search Resources — cloudflare.account-load-balancer-search-search-resources

Run Search Resources with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
query object Optional additionalProperties: false
query.query string Optional Search query term. default: ""
query.references string Optional The type of references to include. "*" to include both referral and referrer references. "" to not include any reference information. enum: ["","*","referral","referrer"]; default: ""
query.page number Optional minimum: 1
query.per_page number Optional default: 25; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Load Balancer Usage — cloudflare.account-load-balancers-list-load-balancer-usage

Run List Load Balancer Usage with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Account Load Balancer — cloudflare.account-load-balancers-delete-account-load-balancer

Run Delete Account Load Balancer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
path.load_balancer_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "load_balancer_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Account Load Balancer Details — cloudflare.account-load-balancers-account-load-balancer-details

Run Account Load Balancer Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
path.load_balancer_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "load_balancer_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Account Load Balancer — cloudflare.account-load-balancers-patch-account-load-balancer

Run Patch Account Load Balancer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/load-balancing_components-schemas-identifier"
path.load_balancer_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/load-balancing_load-balancer-editable"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "load_balancer_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List fields — cloudflare.get-accounts-account_id-logpush-datasets-dataset_id-fields

Run List fields with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dataset_id — Required $ref: "#/definitions/logpush_dataset"
path.account_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dataset_id": "http_requests",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Logpush jobs for a dataset — cloudflare.get-accounts-account_id-logpush-datasets-dataset_id-jobs

Run List Logpush jobs for a dataset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dataset_id — Required $ref: "#/definitions/logpush_dataset"
path.account_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dataset_id": "http_requests",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Logpush jobs — cloudflare.get-accounts-account_id-logpush-jobs

Run List Logpush jobs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Logpush job — cloudflare.post-accounts-account_id-logpush-jobs

Run Create Logpush job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.dataset — Optional $ref: "#/definitions/logpush_dataset"
body.destination_conf — Required $ref: "#/definitions/logpush_destination_conf"
body.enabled — Optional $ref: "#/definitions/logpush_enabled"
body.filter — Optional $ref: "#/definitions/logpush_filter"
body.filter_attack_traffic — Optional $ref: "#/definitions/logpush_filter_attack_traffic"
body.frequency — Optional $ref: "#/definitions/logpush_frequency"
body.kind — Optional $ref: "#/definitions/logpush_kind"
body.logpull_options — Optional $ref: "#/definitions/logpush_logpull_options"
body.max_upload_bytes — Optional $ref: "#/definitions/logpush_max_upload_bytes"
body.max_upload_interval_seconds — Optional $ref: "#/definitions/logpush_max_upload_interval_seconds"
body.max_upload_records — Optional $ref: "#/definitions/logpush_max_upload_records"
body.name — Optional $ref: "#/definitions/logpush_name"
body.output_options — Optional $ref: "#/definitions/logpush_output_options"
body.ownership_challenge — Optional $ref: "#/definitions/logpush_ownership_challenge"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "dataset": "gateway_dns",
    "destination_conf": "s3://mybucket/logs?region=us-west-2",
    "enabled": false,
    "filter": "{\"where\":{\"and\":[{\"key\":\"ClientRequestPath\",\"operator\":\"contains\",\"value\":\"/static\"},{\"key\":\"ClientRequestHost\",\"operator\":\"eq\",\"value\":\"example.com\"}]}}",
    "kind": "",
    "max_upload_bytes": 5000000,
    "max_upload_interval_seconds": 30,
    "max_upload_records": 1000,
    "name": "example.com",
    "output_options": {
      "CVE-2021-44228": false,
      "batch_prefix": "",
      "batch_suffix": "",
      "field_delimiter": ",",
      "field_names": [
        "Datetime",
        "DstIP",
        "SrcIP"
      ],
      "output_type": "ndjson",
      "record_delimiter": "",
      "record_prefix": "{",
      "record_suffix": "}\n",
      "sample_rate": 1,
      "timestamp_format": "unixnano"
    },
    "ownership_challenge": "00000000000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Logpush job — cloudflare.delete-accounts-account_id-logpush-jobs-job_id

Run Delete Logpush job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.job_id — Required $ref: "#/definitions/logpush_id"
path.account_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "job_id": 1,
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Logpush job details — cloudflare.get-accounts-account_id-logpush-jobs-job_id

Run Get Logpush job details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.job_id — Required $ref: "#/definitions/logpush_id"
path.account_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "job_id": 1,
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Logpush job — cloudflare.put-accounts-account_id-logpush-jobs-job_id

Run Update Logpush job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.job_id — Required $ref: "#/definitions/logpush_id"
path.account_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.destination_conf — Optional $ref: "#/definitions/logpush_destination_conf"
body.enabled — Optional $ref: "#/definitions/logpush_enabled"
body.filter — Optional $ref: "#/definitions/logpush_filter"
body.filter_attack_traffic — Optional $ref: "#/definitions/logpush_filter_attack_traffic"
body.frequency — Optional $ref: "#/definitions/logpush_frequency"
body.kind — Optional $ref: "#/definitions/logpush_kind"
body.logpull_options — Optional $ref: "#/definitions/logpush_logpull_options"
body.max_upload_bytes — Optional $ref: "#/definitions/logpush_max_upload_bytes"
body.max_upload_interval_seconds — Optional $ref: "#/definitions/logpush_max_upload_interval_seconds"
body.max_upload_records — Optional $ref: "#/definitions/logpush_max_upload_records"
body.name — Optional $ref: "#/definitions/logpush_name"
body.output_options — Optional $ref: "#/definitions/logpush_output_options"
body.ownership_challenge — Optional $ref: "#/definitions/logpush_ownership_challenge"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "job_id": 1,
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://mybucket/logs?region=us-west-2",
    "enabled": false,
    "filter": "{\"where\":{\"and\":[{\"key\":\"ClientRequestPath\",\"operator\":\"contains\",\"value\":\"/static\"},{\"key\":\"ClientRequestHost\",\"operator\":\"eq\",\"value\":\"example.com\"}]}}",
    "kind": "",
    "max_upload_bytes": 5000000,
    "max_upload_interval_seconds": 30,
    "max_upload_records": 1000,
    "output_options": {
      "CVE-2021-44228": false,
      "batch_prefix": "",
      "batch_suffix": "",
      "field_delimiter": ",",
      "field_names": [
        "Datetime",
        "DstIP",
        "SrcIP"
      ],
      "output_type": "ndjson",
      "record_delimiter": "",
      "record_prefix": "{",
      "record_suffix": "}\n",
      "sample_rate": 1,
      "timestamp_format": "unixnano"
    },
    "ownership_challenge": "00000000000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get ownership challenge — cloudflare.post-accounts-account_id-logpush-ownership

Run Get ownership challenge with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.destination_conf — Required $ref: "#/definitions/logpush_destination_conf"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://mybucket/logs?region=us-west-2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate ownership challenge — cloudflare.post-accounts-account_id-logpush-ownership-validate

Run Validate ownership challenge with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.destination_conf — Required $ref: "#/definitions/logpush_destination_conf"
body.ownership_challenge — Required $ref: "#/definitions/logpush_ownership_challenge"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://mybucket/logs?region=us-west-2",
    "ownership_challenge": "00000000000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List transformers — cloudflare.get-accounts-account_id-logpush-transformers

Run List transformers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create transformer — cloudflare.post-accounts-account_id-logpush-transformers

Run Create transformer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
body — Required $ref: "#/definitions/logpush_transformer_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "redact-pii",
    "code": "SELECT ClientIP, RayID FROM http_requests"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Preview transformer — cloudflare.post-accounts-account_id-logpush-transformers-preview

Run Preview transformer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
body — Required $ref: "#/definitions/logpush_transformer_preview_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "sql": "SELECT ClientIP, RayID FROM http_requests",
    "input": {
      "ClientIP": "198.51.100.1",
      "ClientRequestHost": "example.com",
      "EdgeStartTimestamp": 1722513600000000000,
      "RayID": "abcdef1234567890"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete transformer — cloudflare.delete-accounts-account_id-logpush-transformers-transformer_id

Run Delete transformer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
path.transformer_id — Required $ref: "#/definitions/logpush_transformer_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "transformer_id": 42
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get transformer — cloudflare.get-accounts-account_id-logpush-transformers-transformer_id

Run Get transformer with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
path.transformer_id — Required $ref: "#/definitions/logpush_transformer_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "transformer_id": 42
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update transformer — cloudflare.put-accounts-account_id-logpush-transformers-transformer_id

Run Update transformer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
path.transformer_id — Required $ref: "#/definitions/logpush_transformer_identifier"
body — Required $ref: "#/definitions/logpush_transformer_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "transformer_id": 42
  },
  "body": {
    "name": "redact-pii"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get transformer content — cloudflare.get-accounts-account_id-logpush-transformers-transformer_id-content

Run Get transformer content with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
path.transformer_id — Required $ref: "#/definitions/logpush_transformer_identifier"
query object Optional additionalProperties: false
query.version_id integer Optional Specific version ID to retrieve. When omitted, the latest version is returned.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "transformer_id": 42
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List transformer versions — cloudflare.get-accounts-account_id-logpush-transformers-transformer_id-versions

Run List transformer versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
path.transformer_id — Required $ref: "#/definitions/logpush_transformer_identifier"
query object Optional additionalProperties: false
query.limit integer Optional Maximum number of versions to return. default: 10; minimum: 1; maximum: 10

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "transformer_id": 42
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate destination — cloudflare.delete-accounts-account_id-logpush-validate-destination

Run Validate destination with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.destination_conf — Required $ref: "#/definitions/logpush_destination_conf"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://mybucket/logs?region=us-west-2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check destination exists — cloudflare.delete-accounts-account_id-logpush-validate-destination-exists

Run Check destination exists with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.destination_conf — Required $ref: "#/definitions/logpush_destination_conf"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://mybucket/logs?region=us-west-2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate origin — cloudflare.post-accounts-account_id-logpush-validate-origin

Run Validate origin with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.logpull_options — Required $ref: "#/definitions/logpush_logpull_options"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "logpull_options": "fields=RayID,ClientIP,EdgeStartTimestamp&timestamps=rfc3339"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account audit logs (Version 2) — cloudflare.audit-logs-v2-get-account-audit-logs

Run Get account audit logs (Version 2) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required The unique id that identifies the account.
query object Required additionalProperties: false
query.account_name array Optional Filters by the account name.
query.account_name[] string Optional
query.action_result array Optional Filters by whether the action was successful or not.
query.action_result[] string Optional enum: ["success","failure"]
query.action_type array Optional Filters by the action type.
query.action_type[] string Optional enum: ["create","delete","view","update"]
query.actor_context array Optional Filters by the actor context. - api: The action was performed through the API. The specific credential type was not recorded. - api_key: The action was authenticated with a Cloudflare Global API Key. - api_token: The action was authenticated with an API token. - dash: The action was performed through the Cloudflare dashboard. - oauth: The action was authenticated with an OAuth token. - origin_ca_key: The action was authenticated with an Origin CA key.
query.actor_context[] string Optional enum: ["api","api_key","api_token","dash","oauth","origin_ca_key"]
query.actor_email array Optional Filters by the actor's email address.
query.actor_email[] string Optional format: "email"
query.actor_id array Optional Filters by the actor ID. This can be either the Account ID or User ID.
query.actor_id[] string Optional
query.actor_ip_address array Optional The IP address where the action was initiated.
query.actor_ip_address[] string Optional
query.actor_token_id array Optional Filters by the API token ID when the actor context is an api_token or oauth.
query.actor_token_id[] string Optional
query.actor_token_name array Optional Filters by the API token name when the actor context is an api_token or oauth.
query.actor_token_name[] string Optional
query.actor_type array Optional Filters by the actor type.
query.actor_type[] string Optional enum: ["account","cloudflare_admin","delegated_service","system","user"]
query.audit_log_id array Optional Finds a specific log by its ID.
query.audit_log_id[] string Optional
query.id array Optional Finds a specific log by its ID.
query.id[] string Optional
query.raw_cf_ray_id array Optional Filters by the response CF Ray ID.
query.raw_cf_ray_id[] string Optional
query.raw_method array Optional The HTTP method for the API call.
query.raw_method[] string Optional
query.raw_status_code array Optional The response status code that was returned.
query.raw_status_code[] integer Optional
query.raw_uri array Optional Filters by the request URI.
query.raw_uri[] string Optional
query.resource_id array Optional Filters by the resource ID.
query.resource_id[] string Optional
query.resource_product array Optional Filters audit logs by the Cloudflare product associated with the changed resource.
query.resource_product[] string Optional
query.resource_type array Optional Filters audit logs based on the unique type of resource changed by the action.
query.resource_type[] string Optional
query.resource_scope array Optional Filters by the resource scope, specifying whether the resource is associated with an user, an account, a zone, or a membership.
query.resource_scope[] string Optional enum: ["accounts","user","zones","memberships"]
query.product_category array Optional Filters audit logs by one or more predefined product categories. Each product category expands into a curated set of resource_product values and is unioned with any explicit resource_product filter. Matched case-insensitively; unknown product categories return 400. Repeatable. Use the audit log product categories endpoint to discover the available values.
query.product_category[] string Optional
query.zone_id array Optional Filters by the zone ID.
query.zone_id[] string Optional
query.zone_name array Optional Filters by the zone name associated with the change.
query.zone_name[] string Optional
query.account_name.not array Optional Filters out audit logs by the account name.
query.account_name.not[] string Optional
query.action_result.not array Optional Filters out audit logs by whether the action was successful or not.
query.action_result.not[] string Optional enum: ["success","failure"]
query.action_type.not array Optional Filters out audit logs by the action type.
query.action_type.not[] string Optional enum: ["create","delete","view","update"]
query.actor_context.not array Optional Filters out audit logs by the actor context. - api: The action was performed through the API. The specific credential type was not recorded. - api_key: The action was authenticated with a Cloudflare Global API Key. - api_token: The action was authenticated with an API token. - dash: The action was performed through the Cloudflare dashboard. - oauth: The action was authenticated with an OAuth token. - origin_ca_key: The action was authenticated with an Origin CA key.
query.actor_context.not[] string Optional enum: ["api","api_key","api_token","dash","oauth","origin_ca_key"]
query.actor_email.not array Optional Filters out audit logs by the actor's email address.
query.actor_email.not[] string Optional format: "email"
query.actor_id.not array Optional Filters out audit logs by the actor ID. This can be either the Account ID or User ID.
query.actor_id.not[] string Optional
query.actor_ip_address.not array Optional Filters out audit logs IP address where the action was initiated.
query.actor_ip_address.not[] string Optional
query.actor_token_id.not array Optional Filters out audit logs by the API token ID when the actor context is an api_token or oauth.
query.actor_token_id.not[] string Optional
query.actor_token_name.not array Optional Filters out audit logs by the API token name when the actor context is an api_token or oauth.
query.actor_token_name.not[] string Optional
query.actor_type.not array Optional Filters out audit logs by the actor type.
query.actor_type.not[] string Optional enum: ["account","cloudflare_admin","delegated_service","system","user"]
query.audit_log_id.not array Optional Filters out audit logs by their IDs.
query.audit_log_id.not[] string Optional
query.id.not array Optional Filters out audit logs by their IDs.
query.id.not[] string Optional
query.raw_cf_ray_id.not array Optional Filters out audit logs by the response CF Ray ID.
query.raw_cf_ray_id.not[] string Optional
query.raw_method.not array Optional Filters out audit logs by the HTTP method for the API call.
query.raw_method.not[] string Optional
query.raw_status_code.not array Optional Filters out audit logs by the response status code that was returned.
query.raw_status_code.not[] integer Optional
query.raw_uri.not array Optional Filters out audit logs by the request URI.
query.raw_uri.not[] string Optional
query.resource_id.not array Optional Filters out audit logs by the resource ID.
query.resource_id.not[] string Optional
query.resource_product.not array Optional Filters out audit logs by the Cloudflare product associated with the changed resource.
query.resource_product.not[] string Optional
query.resource_type.not array Optional Filters out audit logs based on the unique type of resource changed by the action.
query.resource_type.not[] string Optional
query.resource_scope.not array Optional Filters out audit logs by the resource scope, specifying whether the resource is associated with an user, an account, a zone, or a membership.
query.resource_scope.not[] string Optional enum: ["accounts","user","zones","memberships"]
query.zone_id.not array Optional Filters out audit logs by the zone ID.
query.zone_id.not[] string Optional
query.zone_name.not array Optional Filters out audit logs by the zone name associated with the change.
query.zone_name.not[] string Optional
query.since string Required Limits the returned results to logs newer than the specified date. This can be a date string 2019-04-30 (interpreted in UTC) or an absolute timestamp that conforms to RFC3339. format: "date"
query.before string Required Limits the returned results to logs older than the specified date. This can be a date string 2019-04-30 (interpreted in UTC) or an absolute timestamp that conforms to RFC3339. format: "date"
query.direction string Optional Sets sorting order. enum: ["desc","asc"]; default: "desc"
query.limit number Optional The number limits the objects to return. The cursor attribute may be used to iterate over the next batch of objects if there are more than the limit. default: 100; minimum: 1; maximum: 1000
query.cursor string Optional The cursor is an opaque token used to paginate through large sets of records. It indicates the position from which to continue when requesting the next set of records. A valid cursor value can be obtained from the cursor object in the result_info structure of a previous response.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a67e14daa5f8dceeb91fe5449ba496ef"
  },
  "query": {
    "since": "2024-10-30",
    "before": "2024-10-31"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List account audit log product categories (Version 2) — cloudflare.audit-logs-v2-list-account-product-categories

Run List account audit log product categories (Version 2) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required The unique id that identifies the account.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a67e14daa5f8dceeb91fe5449ba496ef"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get resource change history from an account audit log entry (Version 2) — cloudflare.audit-logs-v2-get-account-audit-log-history

Run Get resource change history from an account audit log entry (Version 2) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required The unique ID that identifies the account.
path.id string Required The ID of the audit log to fetch resource history for. format: "uuid"
query object Required additionalProperties: false
query.action_time string Required RFC3339 timestamp of the source audit log entry's action time. Used to narrow the source-entry lookup window. Provide the action.time value from the audit log identified by id. format: "date-time"
query.since string Required Limits the returned results to logs newer than the specified date. This can be a date string 2019-04-30 (interpreted in UTC) or an absolute timestamp that conforms to RFC3339. format: "date"
query.before string Required Limits the returned results to logs older than the specified date. This can be a date string 2019-04-30 (interpreted in UTC) or an absolute timestamp that conforms to RFC3339. format: "date"
query.direction string Optional Sets sorting order. enum: ["desc","asc"]; default: "desc"
query.limit number Optional The number limits the objects to return. The cursor attribute may be used to iterate over the next batch of objects if there are more than the limit. default: 100; minimum: 1; maximum: 1000
query.cursor string Optional The cursor is an opaque token used to paginate through large sets of records. It indicates the position from which to continue when requesting the next set of records. A valid cursor value can be obtained from the cursor object in the result_info structure of a previous response.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "a67e14daa5f8dceeb91fe5449ba496ef",
    "id": "f174be97-19b1-40d6-954d-70cd5fbd52db"
  },
  "query": {
    "action_time": "2024-10-30T15:00:00Z",
    "since": "2024-10-30",
    "before": "2024-10-31"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete CMB config — cloudflare.delete-accounts-account_id-logs-control-cmb-config

Run Delete CMB config with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logcontrol_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get CMB config — cloudflare.get-accounts-account_id-logs-control-cmb-config

Run Get CMB config with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logcontrol_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update CMB config — cloudflare.post-accounts-account_id-logs-control-cmb-config

Run Update CMB config with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/logcontrol_identifier"
body — Required $ref: "#/definitions/logcontrol_cmb_config"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete all DNS Protection rules. — cloudflare.deletednsprotectionrulesforaccount

Run Delete all DNS Protection rules. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all DNS Protection rules. — cloudflare.listdnsprotectionrulesforaccount

Run List all DNS Protection rules. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
query object Optional additionalProperties: false
query.page integer Optional The page number for pagination. Defaults to 1.
query.per_page integer Optional The number of items per page. Must be between 10 and 1000. Defaults to 25.
query.order string Optional The field to order by. Defaults to 'prefix'.
query.direction string Optional The direction of ordering (ASC or DESC). Defaults to 'ASC'.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create DNS Protection rule. — cloudflare.creatednsprotectionrule

Run Create DNS Protection rule. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
body — Required $ref: "#/definitions/advanced-ddos-protection_NewDnsProtectionRule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "scope": "example",
    "name": "example",
    "mode": "example",
    "profile_sensitivity": "example",
    "rate_sensitivity": "example",
    "burst_sensitivity": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete DNS Protection rule. — cloudflare.deletednsprotectionrule

Run Delete DNS Protection rule. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.rule_id — Required The UUID of the DNS Protection rule to delete. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get DNS Protection rule. — cloudflare.getdnsprotectionrule

Run Get DNS Protection rule. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.rule_id — Required The UUID of the DNS Protection rule. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update DNS Protection rule. — cloudflare.updatednsprotectionrule

Run Update DNS Protection rule. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.rule_id — Required The UUID of the DNS Protection rule to update. $ref: "#/definitions/advanced-ddos-protection_uuid"
body — Required $ref: "#/definitions/advanced-ddos-protection_DnsProtectionRuleUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete all allowlist prefixes. — cloudflare.deleteallowlistprefixesforaccount

Run Delete all allowlist prefixes. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all allowlist prefixes. — cloudflare.listallowlistprefixesforaccount

Run List all allowlist prefixes. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
query object Optional additionalProperties: false
query.page integer Optional The page number for pagination. Defaults to 1.
query.per_page integer Optional The number of items per page. Must be between 10 and 1000. Defaults to 25.
query.order string Optional The field to order by. Defaults to 'prefix'.
query.direction string Optional The direction of ordering (ASC or DESC). Defaults to 'ASC'.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create allowlist prefix. — cloudflare.createallowlistedprefix

Run Create allowlist prefix. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
body — Required $ref: "#/definitions/advanced-ddos-protection_NewInfraPrefix"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "prefix": "example",
    "comment": "example",
    "enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete allowlist prefix. — cloudflare.deleteallowlistprefix

Run Delete allowlist prefix. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.prefix_id — Required The UUID of the allowlist prefix to delete. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "prefix_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get allowlist prefix. — cloudflare.getallowlistprefix

Run Get allowlist prefix. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.prefix_id — Required The UUID of the allowlist prefix. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "prefix_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update allowlist prefix. — cloudflare.updateallowlistprefix

Run Update allowlist prefix. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.prefix_id — Required The UUID of the allowlist prefix to update. $ref: "#/definitions/advanced-ddos-protection_uuid"
body — Required $ref: "#/definitions/advanced-ddos-protection_InfraPrefixUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "prefix_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete all prefixes. — cloudflare.deleteprefixesforaccount

Run Delete all prefixes. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all prefixes. — cloudflare.listprefixesforaccount

Run List all prefixes. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
query object Optional additionalProperties: false
query.page integer Optional The page number for pagination. Defaults to 1.
query.per_page integer Optional The number of items per page. Must be between 10 and 1000. Defaults to 25.
query.order string Optional The field to order by. Defaults to 'prefix'.
query.direction string Optional The direction of ordering (ASC or DESC). Defaults to 'ASC'.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create prefix. — cloudflare.createprefix

Run Create prefix. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
body — Required $ref: "#/definitions/advanced-ddos-protection_NewPrefix"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "prefix": "192.0.2.0/24",
    "comment": "example",
    "excluded": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create multiple prefixes. — cloudflare.bulkcreateprefixes

Run Create multiple prefixes. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
body array Required
body[] — Optional $ref: "#/definitions/advanced-ddos-protection_NewPrefix"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete prefix. — cloudflare.deleteprefix

Run Delete prefix. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.prefix_id — Required The UUID of the prefix to delete. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "prefix_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get prefix. — cloudflare.getprefix

Run Get prefix. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.prefix_id — Required The UUID of the prefix. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "prefix_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update prefix. — cloudflare.updateprefix

Run Update prefix. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.prefix_id — Required The UUID of the prefix to update. $ref: "#/definitions/advanced-ddos-protection_uuid"
body — Required $ref: "#/definitions/advanced-ddos-protection_PrefixUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "prefix_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete all SYN Protection filters. — cloudflare.deletesynprotectionfiltersforaccount

Run Delete all SYN Protection filters. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all SYN Protection filters. — cloudflare.listsynprotectionfiltersforaccount

Run List all SYN Protection filters. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
query object Optional additionalProperties: false
query.mode string Optional The mode of the filters to get. Optional. Valid values: 'enabled', 'disabled', 'monitoring'.
query.page integer Optional The page number for pagination. Defaults to 1.
query.per_page integer Optional The number of items per page. Must be between 10 and 1000. Defaults to 25.
query.order string Optional The field to order by. Defaults to 'prefix'.
query.direction string Optional The direction of ordering (ASC or DESC). Defaults to 'ASC'.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a SYN Protection filter. — cloudflare.createsynprotectionfilter

Run Create a SYN Protection filter. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
body — Required $ref: "#/definitions/advanced-ddos-protection_NewExpressionFilter"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "expression": "ip.dst in { 192.0.2.0/24 198.51.100.0/24 } and tcp.srcport in { 80 443 10000..65535 }",
    "mode": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete SYN Protection filter. — cloudflare.deletesynprotectionfilter

Run Delete SYN Protection filter. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.filter_id — Required The UUID of the filter to delete. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "filter_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get SYN Protection filter. — cloudflare.getsynprotectionfilter

Run Get SYN Protection filter. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.filter_id — Required The UUID of the filter to retrieve. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "filter_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update SYN Protection filter. — cloudflare.updatesynprotectionfilter

Run Update SYN Protection filter. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.filter_id — Required The UUID of the filter to update. $ref: "#/definitions/advanced-ddos-protection_uuid"
body — Required $ref: "#/definitions/advanced-ddos-protection_ExpressionFilterUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "filter_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete all SYN Protection rules. — cloudflare.deletesynprotectionrulesforaccount

Run Delete all SYN Protection rules. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all SYN Protection rules. — cloudflare.listsynprotectionrulesforaccount

Run List all SYN Protection rules. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
query object Optional additionalProperties: false
query.page integer Optional The page number for pagination. Defaults to 1.
query.per_page integer Optional The number of items per page. Must be between 10 and 1000. Defaults to 25.
query.order string Optional The field to order by. Defaults to 'prefix'.
query.direction string Optional The direction of ordering (ASC or DESC). Defaults to 'ASC'.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create SYN Protection rule. — cloudflare.createsynprotectionrule

Run Create SYN Protection rule. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
body — Required $ref: "#/definitions/advanced-ddos-protection_NewSynProtectionRule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "scope": "example",
    "name": "example",
    "mode": "example",
    "rate_sensitivity": "example",
    "burst_sensitivity": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete SYN Protection rule. — cloudflare.deletesynprotectionrule

Run Delete SYN Protection rule. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.rule_id — Required The UUID of the SYN Protection rule to delete. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get SYN Protection rule. — cloudflare.getsynprotectionrule

Run Get SYN Protection rule. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.rule_id — Required The UUID of the SYN Protection rule. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update SYN Protection rule. — cloudflare.updatesynprotectionrule

Run Update SYN Protection rule. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.rule_id — Required The UUID of the SYN Protection rule to update. $ref: "#/definitions/advanced-ddos-protection_uuid"
body — Required $ref: "#/definitions/advanced-ddos-protection_SynProtectionRuleUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete all TCP Flow Protection filters. — cloudflare.deletetcpflowprotectionfiltersforaccount

Run Delete all TCP Flow Protection filters. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all TCP Flow Protection filters. — cloudflare.listtcpflowprotectionfiltersforaccount

Run List all TCP Flow Protection filters. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
query object Optional additionalProperties: false
query.mode string Optional The mode of the filters to get. Optional. Valid values: 'enabled', 'disabled', 'monitoring'.
query.page integer Optional The page number for pagination. Defaults to 1.
query.per_page integer Optional The number of items per page. Must be between 10 and 1000. Defaults to 25.
query.order string Optional The field to order by. Defaults to 'prefix'.
query.direction string Optional The direction of ordering (ASC or DESC). Defaults to 'ASC'.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a TCP Flow Protection filter. — cloudflare.createtcpflowprotectionfilter

Run Create a TCP Flow Protection filter. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
body — Required $ref: "#/definitions/advanced-ddos-protection_NewExpressionFilter"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "expression": "ip.dst in { 192.0.2.0/24 198.51.100.0/24 } and tcp.srcport in { 80 443 10000..65535 }",
    "mode": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete TCP Flow Protection filter. — cloudflare.deletetcpflowprotectionfilter

Run Delete TCP Flow Protection filter. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.filter_id — Required The UUID of the filter to delete. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "filter_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get TCP Flow Protection filter. — cloudflare.gettcpflowprotectionfilter

Run Get TCP Flow Protection filter. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.filter_id — Required The UUID of the filter to retrieve. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "filter_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update TCP Flow Protection filter. — cloudflare.updatetcpflowprotectionfilter

Run Update TCP Flow Protection filter. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.filter_id — Required The UUID of the filter to update. $ref: "#/definitions/advanced-ddos-protection_uuid"
body — Required $ref: "#/definitions/advanced-ddos-protection_ExpressionFilterUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "filter_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete all TCP Flow Protection rules. — cloudflare.deletetcpflowprotectionrulesforaccount

Run Delete all TCP Flow Protection rules. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all TCP Flow Protection rules. — cloudflare.listtcpflowprotectionrulesforaccount

Run List all TCP Flow Protection rules. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
query object Optional additionalProperties: false
query.page integer Optional The page number for pagination. Defaults to 1.
query.per_page integer Optional The number of items per page. Must be between 10 and 1000. Defaults to 25.
query.order string Optional The field to order by. Defaults to 'prefix'.
query.direction string Optional The direction of ordering (ASC or DESC). Defaults to 'ASC'.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create TCP Flow Protection rule. — cloudflare.createtcpflowprotectionrule

Run Create TCP Flow Protection rule. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
body — Required $ref: "#/definitions/advanced-ddos-protection_NewTcpFlowProtectionRule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "scope": "example",
    "name": "example",
    "mode": "example",
    "rate_sensitivity": "example",
    "burst_sensitivity": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete TCP Flow Protection rule. — cloudflare.deletetcpflowprotectionrule

Run Delete TCP Flow Protection rule. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.rule_id — Required The UUID of the TCP Flow Protection rule to delete. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get TCP Flow Protection rule. — cloudflare.gettcpflowprotectionrule

Run Get TCP Flow Protection rule. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.rule_id — Required The UUID of the TCP Flow Protection rule. $ref: "#/definitions/advanced-ddos-protection_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update TCP Flow Protection rule. — cloudflare.updatetcpflowprotectionrule

Run Update TCP Flow Protection rule. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The ID of the account. $ref: "#/definitions/advanced-ddos-protection_identifier"
path.rule_id — Required The UUID of the TCP Flow Protection rule to update. $ref: "#/definitions/advanced-ddos-protection_uuid"
body — Required $ref: "#/definitions/advanced-ddos-protection_TcpFlowProtectionRuleUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get protection status. — cloudflare.getprotectionstatus

Run Get protection status. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The account ID. $ref: "#/definitions/advanced-ddos-protection_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update protection status. — cloudflare.updateprotectionstatus

Run Update protection status. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required The account ID. $ref: "#/definitions/advanced-ddos-protection_identifier"
body — Required $ref: "#/definitions/advanced-ddos-protection_UpdateProtectionStatus"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Apps — cloudflare.magic-account-apps-list-apps

Run List Apps with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new App — cloudflare.magic-account-apps-add-app

Run Create a new App with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_app_add_single_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Cloudflare Dashboard",
    "type": "Development",
    "hostnames": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Account App — cloudflare.magic-account-apps-delete-app

Run Delete Account App with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.account_app_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_app_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an App — cloudflare.magic-account-apps-patch-app

Run Update an App with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.account_app_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_app_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_app_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Cloudflare Dashboard"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an App — cloudflare.magic-account-apps-update-app

Run Update an App with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.account_app_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_app_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_app_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Cloudflare Dashboard"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List BGP Filter Profiles — cloudflare.magic-bgp-list-filter-profiles

Run List BGP Filter Profiles with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create BGP Filter Profile — cloudflare.magic-bgp-create-filter-profile

Run Create BGP Filter Profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_create_bgp_filter_profile_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allowed On-Prem Imports",
    "match_action": "allow",
    "targets": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete BGP Filter Profile — cloudflare.magic-bgp-delete-filter-profile

Run Delete BGP Filter Profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.profile_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "profile_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get BGP Filter Profile — cloudflare.magic-bgp-get-filter-profile

Run Get BGP Filter Profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.profile_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "profile_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get BGP Settings — cloudflare.magic-bgp-get-settings

Run Get BGP Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update BGP Settings — cloudflare.magic-bgp-update-settings

Run Update BGP Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_update_bgp_settings_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List CF1 Sites — cloudflare.magic-cf1-sites-list-cf1-sites

Run List CF1 Sites with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create CF1 Sites — cloudflare.magic-cf1-sites-create-cf1-sites

Run Create CF1 Sites with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
body array Required minItems: 1
body[] — Optional $ref: "#/definitions/magic_cf1_site"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": [
    {
      "name": "Pad 34"
    }
  ]
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete CF1 Site — cloudflare.magic-cf1-sites-delete-cf1-site

Run Delete CF1 Site with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.cf1_site_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "cf1_site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get CF1 Site — cloudflare.magic-cf1-sites-get-cf1-site

Run Get CF1 Site with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.cf1_site_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "cf1_site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update CF1 Site — cloudflare.magic-cf1-sites-update-cf1-site

Run Update CF1 Site with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.cf1_site_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_cf1_site_update"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "cf1_site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List CF1 Site Ramps — cloudflare.magic-cf1-sites-list-cf1-site-ramps

Run List CF1 Site Ramps with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.cf1_site_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "cf1_site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create CF1 Site Ramps — cloudflare.magic-cf1-sites-create-cf1-site-ramps

Run Create CF1 Site Ramps with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.cf1_site_id — Required $ref: "#/definitions/magic_identifier"
body array Required minItems: 1
body[] — Optional $ref: "#/definitions/magic_cf1_site_ramp_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "cf1_site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": [
    {
      "source_ramp_id": "023e105f4ecef8ad9ca31a8372d0c353",
      "type": "gre"
    }
  ]
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete CF1 Site Ramp — cloudflare.magic-cf1-sites-delete-cf1-site-ramp

Run Delete CF1 Site Ramp with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.cf1_site_id — Required $ref: "#/definitions/magic_identifier"
path.ramp_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "cf1_site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "ramp_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get CF1 Site Ramp — cloudflare.magic-cf1-sites-get-cf1-site-ramp

Run Get CF1 Site Ramp with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.cf1_site_id — Required $ref: "#/definitions/magic_identifier"
path.ramp_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "cf1_site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "ramp_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List interconnects — cloudflare.magic-interconnects-list-interconnects

Run List interconnects with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the response body will be presented using the new object format. Defaults to false.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update multiple interconnects — cloudflare.magic-interconnects-update-multiple-interconnects

Run Update multiple interconnects with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the request and response bodies will be presented using the new object format. Defaults to false.
body object Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List interconnect Details — cloudflare.magic-interconnects-list-interconnect-details

Run List interconnect Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.cf_interconnect_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the response body will be presented using the new object format. Defaults to false.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "cf_interconnect_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update interconnect — cloudflare.magic-interconnects-update-interconnect

Run Update interconnect with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.cf_interconnect_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the request and response bodies will be presented using the new object format. Defaults to false.
body — Required $ref: "#/definitions/magic_interconnect_tunnel_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "cf_interconnect_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Connectors — cloudflare.mconn-connectors-list

Run List Connectors with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn_account_id"
query object Optional additionalProperties: false
query.device_type string Optional Filter connectors by device type. enum: ["MANAGED","LICENSED"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Connector — cloudflare.mconn-connectors-delete

Run Delete Connector with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn_account_id"
path.connector_id — Required $ref: "#/definitions/mconn_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connector_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Connector — cloudflare.mconn-connectors-get

Run Get Connector with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn_account_id"
path.connector_id — Required $ref: "#/definitions/mconn_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connector_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit Connector — cloudflare.mconn-connectors-edit

Run Edit Connector with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn_account_id"
path.connector_id — Required $ref: "#/definitions/mconn_uuid"
body — Required $ref: "#/definitions/mconn_customer_connectors_edit_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connector_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Connector — cloudflare.mconn-connectors-update

Run Update Connector with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn_account_id"
path.connector_id — Required $ref: "#/definitions/mconn_uuid"
body — Required $ref: "#/definitions/mconn_customer_connectors_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connector_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Interrupts — cloudflare.mconn-connector-interrupts-list

Run List Interrupts with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn_account_id"
path.connector_id — Required $ref: "#/definitions/mconn_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connector_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Events — cloudflare.mconn-connector-telemetry-events-list

Run List Events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn-telemetry_account_id"
path.connector_id string Required
query object Required additionalProperties: false
query.from number Required
query.to number Required
query.limit number Optional
query.cursor string Optional
query.k string Optional Filter by event kind

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connector_id": "example"
  },
  "query": {
    "from": 1,
    "to": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get latest Events — cloudflare.mconn-connector-telemetry-events-latest-get

Run Get latest Events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn-telemetry_account_id"
path.connector_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connector_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Event — cloudflare.mconn-connector-telemetry-events-get

Run Get Event with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn-telemetry_account_id"
path.connector_id string Required
path.event_t number Required
path.event_n number Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connector_id": "example",
    "event_t": 1,
    "event_n": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Snapshots — cloudflare.mconn-connector-telemetry-snapshots-list

Run List Snapshots with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn-telemetry_account_id"
path.connector_id string Required
query object Required additionalProperties: false
query.from number Required
query.to number Required
query.limit number Optional
query.cursor string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connector_id": "example"
  },
  "query": {
    "from": 1,
    "to": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get latest Snapshots — cloudflare.mconn-connector-telemetry-snapshots-latest-get

Run Get latest Snapshots with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn-telemetry_account_id"
path.connector_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connector_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Snapshot — cloudflare.mconn-connector-telemetry-snapshots-get

Run Get Snapshot with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mconn-telemetry_account_id"
path.connector_id string Required
path.snapshot_t number Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connector_id": "example",
    "snapshot_t": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List GRE tunnels — cloudflare.magic-gre-tunnels-list-gre-tunnels

Run List GRE tunnels with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the response body will be presented using the new object format. Defaults to false.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a GRE tunnel — cloudflare.magic-gre-tunnels-create-gre-tunnels

Run Create a GRE tunnel with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the request and response bodies will be presented using the new object format. Defaults to false.
body — Required $ref: "#/definitions/magic_create_gre_tunnel_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "GRE_1",
    "customer_gre_endpoint": "203.0.113.1",
    "cloudflare_gre_endpoint": "203.0.113.1",
    "interface_address": "192.0.2.0/31"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update multiple GRE tunnels — cloudflare.magic-gre-tunnels-update-multiple-gre-tunnels

Run Update multiple GRE tunnels with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the request and response bodies will be presented using the new object format. Defaults to false.
body object Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete GRE Tunnel — cloudflare.magic-gre-tunnels-delete-gre-tunnel

Run Delete GRE Tunnel with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.gre_tunnel_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the response body will be presented using the new object format. Defaults to false.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "gre_tunnel_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List GRE Tunnel Details — cloudflare.magic-gre-tunnels-list-gre-tunnel-details

Run List GRE Tunnel Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.gre_tunnel_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the response body will be presented using the new object format. Defaults to false.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "gre_tunnel_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update GRE Tunnel — cloudflare.magic-gre-tunnels-update-gre-tunnel

Run Update GRE Tunnel with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.gre_tunnel_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the request and response bodies will be presented using the new object format. Defaults to false.
body — Required $ref: "#/definitions/magic_gre_tunnel_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "gre_tunnel_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "GRE_1",
    "customer_gre_endpoint": "203.0.113.1",
    "cloudflare_gre_endpoint": "203.0.113.1",
    "interface_address": "192.0.2.0/31"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List IPsec tunnels — cloudflare.magic-ipsec-tunnels-list-ipsec-tunnels

Run List IPsec tunnels with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the response body will be presented using the new object format. Defaults to false.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an IPsec tunnel — cloudflare.magic-ipsec-tunnels-create-ipsec-tunnels

Run Create an IPsec tunnel with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the request and response bodies will be presented using the new object format. Defaults to false.
body — Required $ref: "#/definitions/magic_ipsec_tunnel_add_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "IPsec_1",
    "cloudflare_endpoint": "203.0.113.1",
    "interface_address": "192.0.2.0/31"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update multiple IPsec tunnels — cloudflare.magic-ipsec-tunnels-update-multiple-ipsec-tunnels

Run Update multiple IPsec tunnels with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the request and response bodies will be presented using the new object format. Defaults to false.
body object Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set Pre-Shared Keys (PSK) for IPsec tunnels — cloudflare.magic-ipsec-tunnels-set-pre-shared-keys-for-ipsec-tunnels

Run Set Pre-Shared Keys (PSK) for IPsec tunnels with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
query object Optional additionalProperties: false
query.validate_only boolean Optional If true, only run validation without persisting changes.
body — Required $ref: "#/definitions/magic_ipsec_tunnels_psk_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "psks": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete IPsec Tunnel — cloudflare.magic-ipsec-tunnels-delete-ipsec-tunnel

Run Delete IPsec Tunnel with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ipsec_tunnel_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the response body will be presented using the new object format. Defaults to false.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ipsec_tunnel_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List IPsec tunnel details — cloudflare.magic-ipsec-tunnels-list-ipsec-tunnel-details

Run List IPsec tunnel details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ipsec_tunnel_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the response body will be presented using the new object format. Defaults to false.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ipsec_tunnel_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update IPsec Tunnel — cloudflare.magic-ipsec-tunnels-update-ipsec-tunnel

Run Update IPsec Tunnel with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ipsec_tunnel_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the request and response bodies will be presented using the new object format. Defaults to false.
body — Required $ref: "#/definitions/magic_ipsec_tunnel_add_single_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ipsec_tunnel_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "IPsec_1",
    "cloudflare_endpoint": "203.0.113.1",
    "interface_address": "192.0.2.0/31"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Generate Pre-Shared Key (PSK) for IPsec tunnels — cloudflare.magic-ipsec-tunnels-generate-pre-shared-key---psk--for-ipsec-tunnels

Run Generate Pre-Shared Key (PSK) for IPsec tunnels with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ipsec_tunnel_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ipsec_tunnel_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Redundancy Groups — cloudflare.magic-redundancy-groups-list-redundancy-groups

Run List Redundancy Groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Redundancy Group — cloudflare.magic-redundancy-groups-create-redundancy-group

Run Create a Redundancy Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_create_redundancy_group_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "primary-group"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Redundancy Group — cloudflare.magic-redundancy-groups-delete-redundancy-group

Run Delete a Redundancy Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.redundancy_group_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "redundancy_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Redundancy Group Details — cloudflare.magic-redundancy-groups-get-redundancy-group

Run Get Redundancy Group Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.redundancy_group_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "redundancy_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Redundancy Group — cloudflare.magic-redundancy-groups-update-redundancy-group

Run Update a Redundancy Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.redundancy_group_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_create_redundancy_group_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "redundancy_group_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "primary-group"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Many Routes — cloudflare.magic-static-routes-delete-many-routes

Run Delete Many Routes with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_route_delete_many_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "routes": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Routes — cloudflare.magic-static-routes-list-routes

Run List Routes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Route — cloudflare.magic-static-routes-create-routes

Run Create a Route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_create_route_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "prefix": "192.0.2.0/24",
    "nexthop": "203.0.113.1",
    "priority": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Many Routes — cloudflare.magic-static-routes-update-many-routes

Run Update Many Routes with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_route_update_many_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "routes": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Route — cloudflare.magic-static-routes-delete-route

Run Delete Route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.route_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "route_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Route Details — cloudflare.magic-static-routes-route-details

Run Route Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.route_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "route_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Route — cloudflare.magic-static-routes-update-route

Run Update Route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.route_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_route_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "route_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "prefix": "192.0.2.0/24",
    "nexthop": "203.0.113.1",
    "priority": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Sites — cloudflare.magic-sites-list-sites

Run List Sites with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
query object Optional additionalProperties: false
query.connectorid — Optional $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new Site — cloudflare.magic-sites-create-site

Run Create a new Site with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_sites_add_single_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "site_1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Site — cloudflare.magic-sites-delete-site

Run Delete Site with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Site Details — cloudflare.magic-sites-site-details

Run Site Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
headers object Optional additionalProperties: false
headers.x-magic-new-hc-target boolean Optional If true, the health check target in the response body will be presented using the new object format. Defaults to false.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Site — cloudflare.magic-sites-patch-site

Run Patch Site with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_site_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Site — cloudflare.magic-sites-update-site

Run Update Site with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_site_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Site ACLs — cloudflare.magic-site-acls-list-acls

Run List Site ACLs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new Site ACL — cloudflare.magic-site-acls-create-acl

Run Create a new Site ACL with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_acls_add_single_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "PIN Pad - Cash Register",
    "lan_1": {
      "lan_id": "example"
    },
    "lan_2": {
      "lan_id": "example"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Site ACL — cloudflare.magic-site-acls-delete-acl

Run Delete Site ACL with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.acl_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "acl_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Site ACL Details — cloudflare.magic-site-acls-acl-details

Run Site ACL Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.acl_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "acl_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Site ACL — cloudflare.magic-site-acls-patch-acl

Run Patch Site ACL with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.acl_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_acl_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "acl_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Site ACL — cloudflare.magic-site-acls-update-acl

Run Update Site ACL with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.acl_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_acl_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "acl_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List App Configs — cloudflare.magic-site-app-configs-list-app-configs

Run List App Configs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete App Config — cloudflare.magic-site-app-configs-delete-app-config

Run Delete App Config with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.app_config_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_config_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an App Config — cloudflare.magic-site-app-configs-patch-app-config

Run Update an App Config with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.app_config_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_app_config_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_config_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an App Config — cloudflare.magic-site-app-configs-update-app-config

Run Update an App Config with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.app_config_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_app_config_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_config_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Site LANs — cloudflare.magic-site-lans-list-lans

Run List Site LANs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new Site LAN — cloudflare.magic-site-lans-create-lan

Run Create a new Site LAN with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_lans_add_single_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Site LAN — cloudflare.magic-site-lans-delete-lan

Run Delete Site LAN with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.lan_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "lan_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Site LAN Details — cloudflare.magic-site-lans-lan-details

Run Site LAN Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.lan_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "lan_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Site LAN — cloudflare.magic-site-lans-patch-lan

Run Patch Site LAN with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.lan_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_lan_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "lan_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Site LAN — cloudflare.magic-site-lans-update-lan

Run Update Site LAN with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.lan_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_lan_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "lan_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete NetFlow Configuration — cloudflare.magic-site-netflow-config-delete-netflow-config

Run Delete NetFlow Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

NetFlow Configuration Details — cloudflare.magic-site-netflow-config-details

Run NetFlow Configuration Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update NetFlow Configuration — cloudflare.magic-site-netflow-config-patch-netflow-config

Run Update NetFlow Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_netflow_config_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create NetFlow Configuration — cloudflare.magic-site-netflow-config-create-netflow-config

Run Create NetFlow Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_netflow_config_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update NetFlow Configuration — cloudflare.magic-site-netflow-config-update-netflow-config

Run Update NetFlow Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_netflow_config_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Site WANs — cloudflare.magic-site-wans-list-wans

Run List Site WANs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new Site WAN — cloudflare.magic-site-wans-create-wan

Run Create a new Site WAN with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.site_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_wans_add_single_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "physport": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Site WAN — cloudflare.magic-site-wans-delete-wan

Run Delete Site WAN with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.wan_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "wan_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Site WAN Details — cloudflare.magic-site-wans-wan-details

Run Site WAN Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.wan_id — Required $ref: "#/definitions/magic_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "wan_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Site WAN — cloudflare.magic-site-wans-patch-wan

Run Patch Site WAN with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.wan_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_wan_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "wan_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Site WAN — cloudflare.magic-site-wans-update-wan

Run Update Site WAN with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.site_id — Required $ref: "#/definitions/magic_identifier"
path.account_id — Required $ref: "#/definitions/magic_identifier"
path.wan_id — Required $ref: "#/definitions/magic_identifier"
body — Required $ref: "#/definitions/magic_wan_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "wan_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List repositories — cloudflare.listaccountvulnerabilitydiscoveryrepositories

Run List repositories with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required pattern: "^[a-f0-9]{32}$"
query object Optional additionalProperties: false
query.limit integer Optional default: 50; minimum: 1; maximum: 100
query.cursor string Optional minLength: 1; maxLength: 1024; pattern: "^[A-Za-z0-9_-]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create repository — cloudflare.createaccountvulnerabilitydiscoveryrepository

Run Create repository with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required pattern: "^[a-f0-9]{32}$"
headers object Optional additionalProperties: false
headers.Idempotency-Key string Optional Optional. Supply this header to safely retry a request. Required when worker_script_name is supplied. minLength: 1; maxLength: 128; pattern: "^[!-~]+$"
body — Required $ref: "#/definitions/managed-defense-vulnerability-discovery_CreateRepositoryRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get repository — cloudflare.getaccountvulnerabilitydiscoveryrepository

Run Get repository with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required pattern: "^[a-f0-9]{32}$"
path.repo_id string Required format: "uuid"
query object Optional additionalProperties: false
query.scan_limit integer Optional default: 50; minimum: 1; maximum: 100
query.scan_cursor string Optional minLength: 1; maxLength: 1024; pattern: "^[A-Za-z0-9_-]+$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "repo_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get reviewed vulnerability report — cloudflare.getaccountrepositoryvulnerabilitydiscoveryreport

Run Get reviewed vulnerability report with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required pattern: "^[a-f0-9]{32}$"
path.repo_id string Required format: "uuid"
path.scan_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "repo_id": "00000000-0000-4000-8000-000000000000",
    "scan_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create upload token — cloudflare.createaccountvulnerabilitydiscoveryrepositorytoken

Run Create upload token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required pattern: "^[a-f0-9]{32}$"
path.repo_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "repo_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List scans — cloudflare.listaccountvulnerabilitydiscoveryscans

Run List scans with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required pattern: "^[a-f0-9]{32}$"
query object Optional additionalProperties: false
query.limit integer Optional default: 50; minimum: 1; maximum: 100
query.cursor string Optional minLength: 1; maxLength: 1024; pattern: "^[A-Za-z0-9_-]+$"
query.status — Optional Repeat parameter or provide comma-separated values.
query.status string Optional oneOf[1]; enum: ["requested","accepted","running","completed","failed","rejected","cancelled"]
query.status array Optional oneOf[2]
query.status[] string Optional oneOf[2]; enum: ["requested","accepted","running","completed","failed","rejected","cancelled"]
query.repo string Optional format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create scan — cloudflare.createaccountvulnerabilitydiscoveryscan

Run Create scan with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required pattern: "^[a-f0-9]{32}$"
headers object Optional additionalProperties: false
headers.Idempotency-Key string Optional Optional. Supply this header to safely retry a request. Required when worker_script_name is supplied. minLength: 1; maxLength: 128; pattern: "^[!-~]+$"
body — Required $ref: "#/definitions/managed-defense-vulnerability-discovery_CreateScan"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "repos": [
      {
        "name": "example"
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get scan — cloudflare.getaccountvulnerabilitydiscoveryscan

Run Get scan with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required pattern: "^[a-f0-9]{32}$"
path.scan_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "scan_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get reviewed vulnerability report — cloudflare.getaccountvulnerabilitydiscoveryconsolidatedreport

Run Get reviewed vulnerability report with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required pattern: "^[a-f0-9]{32}$"
path.scan_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "scan_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account Media usage — cloudflare.usage-analytics-get-account-media-usage

Run Get account Media usage with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Standard Cloudflare hex account identifier. The API gateway translates this to an internal numeric ID before forwarding to the backend service. $ref: "#/definitions/usage-analytics_identifier"
query object Optional additionalProperties: false
query.metrics string Optional Comma-separated list of metrics to include in the response. Available metrics depend on the endpoint. Billing usage supports: streamMinutesViewed, rateLimitingRequestsAllowed, loadBalancingQueries, argoAcceleratedBytes, workersRequests, workersKVReads, imageResizingRequests, spectrumBytesTransferred, mediaUniqueTransformations. Stream/media usage supports: streamMinutesViewed.
query.since string Optional Start of the time range for the query (inclusive). ISO 8601 timestamp. Defaults to 6 hours before the current time. format: "date-time"
query.until string Optional End of the time range for the query (inclusive). ISO 8601 timestamp. Defaults to the current time. format: "date-time"
query.time_delta string Optional Time unit to aggregate usage observations into. Data retention is approximately 18 months. The effective number of data points returned depends on the time range and granularity selected. For example, requesting hourly granularity over 18 months could produce up to ~13,000 data points; use the limit parameter to cap results and be aware that responses may be truncated. enum: ["hour","day","week","month","quarter","year"]; default: "hour"
query.limit integer Optional Maximum number of data points to return. The actual number of results depends on the interaction between the time range (since/until) and time_delta granularity. Results are truncated to this limit without error if the time range produces more data points than the limit allows. default: 100; minimum: 1; maximum: 10000
query.filters string Optional Filter expressions to apply to the query. Format: field==value. Multiple filters can be combined.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Members — cloudflare.account-members-list-members

Run List Members with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
query object Optional additionalProperties: false
query.order string Optional Field to order results by. enum: ["user.first_name","user.last_name","user.email","status"]
query.status string Optional A member's status in the account. enum: ["accepted","pending","rejected"]
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.direction string Optional Direction to order results. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add Member — cloudflare.account-members-add-member

Run Add Member with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
body — Required
body — Required oneOf[1]; $ref: "#/definitions/iam_create-member-with-roles"
body — Required oneOf[2]; $ref: "#/definitions/iam_create-member-with-policies"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "email": "user@example.com",
    "roles": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove Member — cloudflare.account-members-remove-member

Run Remove Member with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.member_id — Required $ref: "#/definitions/iam_membership_components-schemas-identifier"
path.account_id — Required $ref: "#/definitions/iam_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "member_id": "4536bcfad5faccb111b47003c79917fa",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Member Details — cloudflare.account-members-member-details

Run Member Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.member_id — Required $ref: "#/definitions/iam_membership_components-schemas-identifier"
path.account_id — Required $ref: "#/definitions/iam_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "member_id": "4536bcfad5faccb111b47003c79917fa",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Member — cloudflare.account-members-update-member

Run Update Member with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.member_id — Required $ref: "#/definitions/iam_membership_components-schemas-identifier"
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
body — Required
body — Required oneOf[1]; $ref: "#/definitions/iam_update-member-with-roles"
body — Required oneOf[2]; $ref: "#/definitions/iam_update-member-with-policies"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "member_id": "4536bcfad5faccb111b47003c79917fa",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete account configuration — cloudflare.magic-network-monitoring-configuration-delete-account-configuration

Run Delete account configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-mnm_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "6f91088a406011ed95aed352566e8d4c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List account configuration — cloudflare.magic-network-monitoring-configuration-list-account-configuration

Run List account configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-mnm_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "6f91088a406011ed95aed352566e8d4c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update account configuration fields — cloudflare.magic-network-monitoring-configuration-update-account-conf-75bc5c098c

Run Update account configuration fields with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-mnm_account_identifier"
body object Required
body.default_sampling — Optional $ref: "#/definitions/magic-visibility-mnm_mnm_config_default_sampling"
body.name — Optional $ref: "#/definitions/magic-visibility-mnm_mnm_config_name"
body.router_ips — Optional $ref: "#/definitions/magic-visibility-mnm_mnm_config_router_ips"
body.warp_devices — Optional $ref: "#/definitions/magic-visibility-mnm_mnm_config_warp_devices"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "6f91088a406011ed95aed352566e8d4c"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create account configuration — cloudflare.magic-network-monitoring-configuration-create-account-configuration

Run Create account configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-mnm_account_identifier"
body object Required
body.default_sampling — Required $ref: "#/definitions/magic-visibility-mnm_mnm_config_default_sampling"
body.name — Required $ref: "#/definitions/magic-visibility-mnm_mnm_config_name"
body.router_ips — Optional $ref: "#/definitions/magic-visibility-mnm_mnm_config_router_ips"
body.warp_devices — Optional $ref: "#/definitions/magic-visibility-mnm_mnm_config_warp_devices"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "6f91088a406011ed95aed352566e8d4c"
  },
  "body": {
    "name": "cloudflare user's account",
    "default_sampling": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an entire account configuration — cloudflare.magic-network-monitoring-configuration-update-an-entire-ac-313c46ca16

Run Update an entire account configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-mnm_account_identifier"
body object Required
body.default_sampling — Required $ref: "#/definitions/magic-visibility-mnm_mnm_config_default_sampling"
body.name — Required $ref: "#/definitions/magic-visibility-mnm_mnm_config_name"
body.router_ips — Optional $ref: "#/definitions/magic-visibility-mnm_mnm_config_router_ips"
body.warp_devices — Optional $ref: "#/definitions/magic-visibility-mnm_mnm_config_warp_devices"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "6f91088a406011ed95aed352566e8d4c"
  },
  "body": {
    "name": "cloudflare user's account",
    "default_sampling": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List rules and account configuration — cloudflare.magic-network-monitoring-configuration-list-rules-and-acco-ed4cfee0df

Run List rules and account configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-mnm_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "6f91088a406011ed95aed352566e8d4c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List rules — cloudflare.magic-network-monitoring-rules-list-rules

Run List rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-mnm_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "6f91088a406011ed95aed352566e8d4c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete rule — cloudflare.magic-network-monitoring-rules-delete-rule

Run Delete rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/magic-visibility-mnm_rule_identifier"
path.account_id — Required $ref: "#/definitions/magic-visibility-mnm_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "2890e6fa406311ed9b5a23f70f6fb8cf",
    "account_id": "6f91088a406011ed95aed352566e8d4c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get rule — cloudflare.magic-network-monitoring-rules-get-rule

Run Get rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/magic-visibility-mnm_rule_identifier"
path.account_id — Required $ref: "#/definitions/magic-visibility-mnm_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "2890e6fa406311ed9b5a23f70f6fb8cf",
    "account_id": "6f91088a406011ed95aed352566e8d4c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update advertisement for rule — cloudflare.magic-network-monitoring-rules-update-advertisement-for-rule

Run Update advertisement for rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/magic-visibility-mnm_rule_identifier"
path.account_id — Required $ref: "#/definitions/magic-visibility-mnm_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "2890e6fa406311ed9b5a23f70f6fb8cf",
    "account_id": "6f91088a406011ed95aed352566e8d4c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Generate authentication token for VPC flow logs export. — cloudflare.magic-network-monitoring-vpc-flows-generate-authentication-token

Run Generate authentication token for VPC flow logs export. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-mnm_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "6f91088a406011ed95aed352566e8d4c"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account monetization eligibility — cloudflare.monetization-get-account-eligibility

Run Get account monetization eligibility with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/monetization_account-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check account monetization eligibility — cloudflare.monetization-check-account-eligibility

Run Check account monetization eligibility with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/monetization_account-identifier"
body — Required $ref: "#/definitions/monetization_monetization-account-eligibility-check-input"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  },
  "body": {
    "acceptedTermsOfService": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List relays — cloudflare.moq-relays-list

Run List relays with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account identifier. $ref: "#/definitions/moq_account_identifier"
query object Optional additionalProperties: false
query.created_before string Optional Cursor for pagination. Returns relays created strictly before this RFC 3339 timestamp (typically the created value of the first item on the current page, to fetch the previous page). format: "date-time"
query.created_after string Optional Cursor for pagination. Returns relays created strictly after this RFC 3339 timestamp (typically the created value of the last item on the current page, to fetch the next page). format: "date-time"
query.per_page integer Optional Maximum number of relays to return per page. Values above the maximum are clamped to it rather than rejected. default: 1000; minimum: 1; maximum: 1000
query.asc boolean Optional Sort order by created. When true, results are returned oldest-first (ascending); otherwise newest-first (descending, the default). default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a relay — cloudflare.moq-relays-create

Run Create a relay with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account identifier. $ref: "#/definitions/moq_account_identifier"
body object Required
body.name string Required Human-readable name for the relay. minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Production Live Stream"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a relay — cloudflare.moq-relays-delete

Run Delete a relay with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account identifier. $ref: "#/definitions/moq_account_identifier"
path.relay_id string Required Relay unique identifier (32 hex characters). pattern: "^[0-9a-f]{32}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "relay_id": "a1b2c3d4e5f67890a1b2c3d4e5f67890"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a relay — cloudflare.moq-relays-get

Run Get a relay with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account identifier. $ref: "#/definitions/moq_account_identifier"
path.relay_id string Required Relay unique identifier (32 hex characters). pattern: "^[0-9a-f]{32}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "relay_id": "a1b2c3d4e5f67890a1b2c3d4e5f67890"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a relay — cloudflare.moq-relays-update

Run Update a relay with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account identifier. $ref: "#/definitions/moq_account_identifier"
path.relay_id string Required Relay unique identifier (32 hex characters). pattern: "^[0-9a-f]{32}$"
body object Required
body.config — Optional
body.config — Optional allOf[1]; $ref: "#/definitions/moq_relay_config"
body.name string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "relay_id": "a1b2c3d4e5f67890a1b2c3d4e5f67890"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tokens — cloudflare.moq-relays-tokens-list

Run List tokens with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account identifier. $ref: "#/definitions/moq_account_identifier"
path.relay_id string Required Relay unique identifier (32 hex characters). pattern: "^[0-9a-f]{32}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "relay_id": "a1b2c3d4e5f67890a1b2c3d4e5f67890"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a token — cloudflare.moq-relays-tokens-create

Run Create a token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account identifier. $ref: "#/definitions/moq_account_identifier"
path.relay_id string Required Relay unique identifier (32 hex characters). pattern: "^[0-9a-f]{32}$"
body object Required
body.expires string Optional Optional expiry (RFC 3339). Defaults to 1 year from creation; rejected if more than 1 year in the future. format: "date-time"
body.label string Optional Optional, customer-set label.
body.operations array Required Non-empty subset of the V1 roles the token is allowed to perform. Signed into the token. minItems: 1
body.operations[] string Optional enum: ["publish","subscribe"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "relay_id": "a1b2c3d4e5f67890a1b2c3d4e5f67890"
  },
  "body": {
    "operations": [
      "publish",
      "subscribe"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revoke a token — cloudflare.moq-relays-tokens-delete

Run Revoke a token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account identifier. $ref: "#/definitions/moq_account_identifier"
path.relay_id string Required Relay unique identifier (32 hex characters). pattern: "^[0-9a-f]{32}$"
path.jti string Required Token identifier (jti — 32 hex characters). pattern: "^[0-9a-f]{32}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "relay_id": "a1b2c3d4e5f67890a1b2c3d4e5f67890",
    "jti": "f3a1b2c3d4e5f67890a1b2c3d4e5f678"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Move account to organization — cloudflare.accounts_moveaccounts

Run Move account to organization with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required The ID of the account to move.
body object Required
body.destination_organization_id string Required The ID of the organization to move the account into.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "destination_organization_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List mTLS certificates — cloudflare.m-tls-certificate-management-list-m-tls-certificates

Run List mTLS certificates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query object Optional additionalProperties: false
query.type array Optional Filters results by certificate type. Multiple types can be comma-separated.
query.type[] string Optional enum: ["custom","gateway_managed","access_managed"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Upload mTLS certificate — cloudflare.m-tls-certificate-management-upload-m-tls-certificate

Run Upload mTLS certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.ca — Required $ref: "#/definitions/tls-certificates-and-hostnames_ca"
body.certificates — Required $ref: "#/definitions/tls-certificates-and-hostnames_certificates-2"
body.name — Optional $ref: "#/definitions/tls-certificates-and-hostnames_name-2"
body.private_key — Optional $ref: "#/definitions/tls-certificates-and-hostnames_private_key-4"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "certificates": "-----BEGIN CERTIFICATE-----\nMIIDmDCCAoCgAwIBAgIUKTOAZNjcXVZRj4oQt0SHsl1c1vMwDQYJKoZIhvcNAQEL\nBQAwUTELMAkGA1UEBhMCVVMxFjAUBgNVBAgMDVNhbiBGcmFuY2lzY28xEzARBgNV\nBAcMCkNhbGlmb3JuaWExFTATBgNVBAoMDEV4YW1wbGUgSW5jLjAgFw0yMjExMjIx\nNjU5NDdaGA8yMTIyMTAyOTE2NTk0N1owUTELMAkGA1UEBhMCVVMxFjAUBgNVBAgM\nDVNhbiBGcmFuY2lzY28xEzARBgNVBAcMCkNhbGlmb3JuaWExFTATBgNVBAoMDEV4\nYW1wbGUgSW5jLjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMRcORwg\nJFTdcG/2GKI+cFYiOBNDKjCZUXEOvXWY42BkH9wxiMT869CO+enA1w5pIrXow6kC\nM1sQspHHaVmJUlotEMJxyoLFfA/8Kt1EKFyobOjuZs2SwyVyJ2sStvQuUQEosULZ\nCNGZEqoH5g6zhMPxaxm7ZLrrsDZ9maNGVqo7EWLWHrZ57Q/5MtTrbxQL+eXjUmJ9\nK3kS+3uEwMdqR6Z3BluU1ivanpPc1CN2GNhdO0/hSY4YkGEnuLsqJyDd3cIiB1Mx\nuCBJ4ZaqOd2viV1WcP3oU3dxVPm4MWyfYIldMWB14FahScxLhWdRnM9YZ/i9IFcL\nypXsuz7DjrJPtPUCAwEAAaNmMGQwHQYDVR0OBBYEFP5JzLUawNF+c3AXsYTEWHh7\nz2czMB8GA1UdIwQYMBaAFP5JzLUawNF+c3AXsYTEWHh7z2czMA4GA1UdDwEB/wQE\nAwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMA0GCSqGSIb3DQEBCwUAA4IBAQBc+Be7\nNDhpE09y7hLPZGRPl1cSKBw4RI0XIv6rlbSTFs5EebpTGjhx/whNxwEZhB9HZ711\n1Oa1YlT8xkI9DshB78mjAHCKBAJ76moK8tkG0aqdYpJ4ZcJTVBB7l98Rvgc7zfTi\ni7WemTy72deBbSeiEtXavm4EF0mWjHhQ5Nxpnp00Bqn5g1x8CyTDypgmugnep+xG\n+iFzNmTdsz7WI9T/7kDMXqB7M/FPWBORyS98OJqNDswCLF8bIZYwUBEe+bRHFomo\nShMzaC3tvim7WCb16noDkSTMlfKO4pnvKhpcVdSgwcruATV7y+W+Lvmz2OT/Gui4\nJhqeoTewsxndhDDE\n-----END CERTIFICATE-----",
    "ca": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete mTLS certificate — cloudflare.m-tls-certificate-management-delete-m-tls-certificate

Run Delete mTLS certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.mtls_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_mtls_certificate_identifier"
path.account_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "mtls_certificate_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get mTLS certificate — cloudflare.m-tls-certificate-management-get-m-tls-certificate

Run Get mTLS certificate with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.mtls_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_mtls_certificate_identifier"
path.account_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "mtls_certificate_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List mTLS certificate associations — cloudflare.m-tls-certificate-management-list-m-tls-certificate-associations

Run List mTLS certificate associations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.mtls_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_mtls_certificate_identifier"
path.account_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "mtls_certificate_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List OAuth Clients — cloudflare.oauth-clients-list

Run List OAuth Clients with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete OAuth Client — cloudflare.oauth-clients-delete

Run Delete OAuth Client with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.oauth_client_id — Required $ref: "#/definitions/iam_oauth_client_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "oauth_client_id": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

OAuth Client Details — cloudflare.oauth-clients-get

Run OAuth Client Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.oauth_client_id — Required $ref: "#/definitions/iam_oauth_client_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "oauth_client_id": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update OAuth Client — cloudflare.oauth-clients-update

Run Update OAuth Client with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.oauth_client_id — Required $ref: "#/definitions/iam_oauth_client_identifier"
body — Required $ref: "#/definitions/iam_oauth_client_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "oauth_client_id": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Rotated OAuth Client Secret — cloudflare.oauth-clients-delete-rotated-secret

Run Delete Rotated OAuth Client Secret with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.oauth_client_id — Required $ref: "#/definitions/iam_oauth_client_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "oauth_client_id": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rotate OAuth Client Secret — cloudflare.oauth-clients-rotate-secret

Run Rotate OAuth Client Secret with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.oauth_client_id — Required $ref: "#/definitions/iam_oauth_client_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "oauth_client_id": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get usage limit status — cloudflare.observability.usage_limit.get

Run Get usage limit status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List applications — cloudflare.list_applications_v2

Run List applications with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
query object Optional additionalProperties: false
query.environment string Optional Filter by supported environment (standard, fedramp).
query.page integer Optional A page number within the paginated result set.
query.page_size integer Optional Number of results to return per page.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get application details — cloudflare.get_application_v2

Run Get application details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
path.application_id string Required Application/vendor identifier. enum: ["ANTHROPIC","AWS","BITBUCKET","BOX","CONFLUENCE","DROPBOX","GITHUB","GOOGLE_CLOUD_PLATFORM","GOOGLE_WORKSPACE","JIRA","MICROSOFT_INTERNAL","OPENAI","SALESFORCE","SERVICENOW","SLACK","ZOOM"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "application_id": "ANTHROPIC"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get auth methods — cloudflare.get_application_auth_methods_v2

Run Get auth methods with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
path.application_id string Required Application/vendor identifier. enum: ["ANTHROPIC","AWS","BITBUCKET","BOX","CONFLUENCE","DROPBOX","GITHUB","GOOGLE_CLOUD_PLATFORM","GOOGLE_WORKSPACE","JIRA","MICROSOFT_INTERNAL","OPENAI","SALESFORCE","SERVICENOW","SLACK","ZOOM"]
query object Optional additionalProperties: false
query.page integer Optional A page number within the paginated result set.
query.page_size integer Optional Number of results to return per page.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "application_id": "ANTHROPIC"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get application setup flows — cloudflare.get_application_setup_flows_v2

Run Get application setup flows with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
path.application_id string Required Application/vendor identifier. enum: ["ANTHROPIC","AWS","BITBUCKET","BOX","CONFLUENCE","DROPBOX","GITHUB","GOOGLE_CLOUD_PLATFORM","GOOGLE_WORKSPACE","JIRA","MICROSOFT_INTERNAL","OPENAI","SALESFORCE","SERVICENOW","SLACK","ZOOM"]
query object Optional additionalProperties: false
query.auth_method string Optional Filter by auth method id. Get available ids from GET /v2/applications.
query.environment string Optional Filter by environment. enum: ["fedramp","standard"]
query.page integer Optional A page number within the paginated result set.
query.page_size integer Optional Number of results to return per page.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "application_id": "ANTHROPIC"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List integrations — cloudflare.list_integrations_v2

Run List integrations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
query object Optional additionalProperties: false
query.application string Optional Filter by application/vendor (e.g., GOOGLE_WORKSPACE, MICROSOFT_INTERNAL).
query.direction string Optional Direction to order results. enum: ["asc","desc"]
query.dlp_enabled boolean Optional Filter by DLP enabled status (true/false).
query.order string Optional Field to order results by. enum: ["application","created","name","status"]
query.page integer Optional Page number within the paginated result set.
query.page_size integer Optional Number of results per page.
query.search string Optional Search integrations by name or application.
query.status string Optional Filter by integration status. enum: ["Healthy","Initializing","Offline","Unhealthy"]
query.use_cases string Optional Filter by enabled use cases (e.g., casb, ces). Matches integrations enrolled in any of the specified values. Can be specified multiple times.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create integration — cloudflare.create_integration_v2

Run Create integration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
body — Required $ref: "#/definitions/one_IntegrationV2CreateRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "application": "ANTHROPIC",
    "credentials": {},
    "name": "example",
    "use_cases": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete integration — cloudflare.delete_integration_v2

Run Delete integration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
path.id string Required Integration ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get integration details — cloudflare.get_integration_v2

Run Get integration details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
path.id string Required Integration ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update integration — cloudflare.update_integration_v2

Run Update integration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
path.id string Required Integration ID.
body — Optional $ref: "#/definitions/one_PatchedUpdateIntegrationV2Request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Pause integration — cloudflare.pause_integration_v2

Run Pause integration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
path.id string Required Integration ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Resume integration — cloudflare.resume_integration_v2

Run Resume integration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare account identifier.
path.id string Required Integration ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List account organizations — cloudflare.accounts_listaccountorganizations

Run List account organizations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Cloudflare Pages projects — cloudflare.pages-project-get-projects

Run List Cloudflare Pages projects with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/pages_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of results to return.
query.per_page integer Optional Number of results to return per page.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Cloudflare Pages project — cloudflare.pages-project-create-project

Run Create a Cloudflare Pages project with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/pages_identifier"
body object Required
body.build_config object Optional Configs for the project build process.
body.build_config.build_caching boolean Optional Enable build caching for the project.
body.build_config.build_command string Optional Command used to build project.
body.build_config.destination_dir string Optional Output directory of the build.
body.build_config.root_dir string Optional Directory to run the command.
body.build_config.web_analytics_tag string | null Optional The classifying tag for analytics.
body.build_config.web_analytics_token string | null Optional The auth token for analytics.
body.deployment_configs object Optional Configs for deployments in a project.
body.deployment_configs.preview — Optional Configs for preview deploys.
body.deployment_configs.preview — Optional allOf[1]; $ref: "#/definitions/pages_deployment_config_values_request"
body.deployment_configs.production — Optional Configs for production deploys.
body.deployment_configs.production — Optional allOf[1]; $ref: "#/definitions/pages_deployment_config_values_request"
body.name string Required Name for the Pages project. Must begin with a lowercase letter or digit and contain only lowercase letters, digits, and hyphens.
body.production_branch string Required Production branch of the project. Used to identify production deployments.
body.source object Optional Configs for the project source control.
body.source.config object Required
body.source.config.deployments_enabled boolean Optional Whether to enable automatic deployments when pushing to the source repository. When disabled, no deployments (production or preview) will be triggered automatically.
body.source.config.owner string Optional The owner of the repository.
body.source.config.owner_id string Optional The owner ID of the repository.
body.source.config.path_excludes array Optional A list of paths that should be excluded from triggering a preview deployment. Wildcard syntax (*) is supported.
body.source.config.path_excludes[] string Optional
body.source.config.path_includes array Optional A list of paths that should be watched to trigger a preview deployment. Wildcard syntax (*) is supported.
body.source.config.path_includes[] string Optional
body.source.config.pr_comments_enabled boolean Optional Whether to enable PR comments.
body.source.config.preview_branch_excludes array Optional A list of branches that should not trigger a preview deployment. Wildcard syntax (*) is supported. Must be used with preview_deployment_setting set to custom.
body.source.config.preview_branch_excludes[] string Optional
body.source.config.preview_branch_includes array Optional A list of branches that should trigger a preview deployment. Wildcard syntax (*) is supported. Must be used with preview_deployment_setting set to custom.
body.source.config.preview_branch_includes[] string Optional
body.source.config.preview_deployment_setting string Optional Controls whether commits to preview branches trigger a preview deployment. enum: ["all","none","custom"]
body.source.config.production_branch string Optional The production branch of the repository.
body.source.config.production_deployments_enabled boolean Optional Whether to trigger a production deployment on commits to the production branch.
body.source.config.repo_id string Optional The ID of the repository.
body.source.config.repo_name string Optional The name of the repository.
body.source.type string Required The source control management provider. enum: ["github","gitlab"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "my-pages-app",
    "production_branch": "main"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Cloudflare Pages project — cloudflare.pages-project-delete-project

Run Delete a Cloudflare Pages project with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Cloudflare Pages project — cloudflare.pages-project-get-project

Run Get a Cloudflare Pages project with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Pages deployments — cloudflare.pages-deployment-get-deployments

Run List Pages deployments with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"
query object Optional additionalProperties: false
query.env string Optional Deployment environment to return. Valid values are production and preview. enum: ["production","preview"]
query.page integer Optional Page number of results to return.
query.per_page integer Optional Number of results to return per page.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Pages deployment — cloudflare.pages-deployment-delete-deployment

Run Delete a Pages deployment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.deployment_id — Required $ref: "#/definitions/pages_deployment_id"
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"
query object Optional additionalProperties: false
query.force boolean Optional Allow deletion when a non-production deployment has an active alias.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "deployment_id": "f64788e9-fccd-4d4a-a28a-cb84f88f6e12",
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Pages deployment — cloudflare.pages-deployment-get-deployment-info

Run Get a Pages deployment with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.deployment_id — Required $ref: "#/definitions/pages_deployment_id"
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "deployment_id": "f64788e9-fccd-4d4a-a28a-cb84f88f6e12",
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Pages deployment logs — cloudflare.pages-deployment-get-deployment-logs

Run Get Pages deployment logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.deployment_id — Required $ref: "#/definitions/pages_deployment_id"
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "deployment_id": "f64788e9-fccd-4d4a-a28a-cb84f88f6e12",
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retry a Pages deployment — cloudflare.pages-deployment-retry-deployment

Run Retry a Pages deployment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.deployment_id — Required $ref: "#/definitions/pages_deployment_id"
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "deployment_id": "f64788e9-fccd-4d4a-a28a-cb84f88f6e12",
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Roll back a Pages deployment — cloudflare.pages-deployment-rollback-deployment

Run Roll back a Pages deployment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.deployment_id — Required $ref: "#/definitions/pages_deployment_id"
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "deployment_id": "f64788e9-fccd-4d4a-a28a-cb84f88f6e12",
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create deployment tail — cloudflare.pages-deployment-create-tail

Run Create deployment tail with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.deployment_id — Required $ref: "#/definitions/pages_deployment_id"
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"
body object Required
body.filters array Optional Filters to apply to the tail session.
body.filters[] object Optional additionalProperties: true

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "deployment_id": "f64788e9-fccd-4d4a-a28a-cb84f88f6e12",
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "filters": [
      {
        "outcome": [
          "exception"
        ]
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete deployment tail — cloudflare.pages-deployment-delete-tail

Run Delete deployment tail with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.tail_id — Required $ref: "#/definitions/pages_identifier"
path.deployment_id — Required $ref: "#/definitions/pages_deployment_id"
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "tail_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "deployment_id": "f64788e9-fccd-4d4a-a28a-cb84f88f6e12",
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Pages custom domains — cloudflare.pages-domains-get-domains

Run List Pages custom domains with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add a Pages custom domain — cloudflare.pages-domains-add-domain

Run Add a Pages custom domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"
body object Required
body.name — Required $ref: "#/definitions/pages_domain_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Pages custom domain — cloudflare.pages-domains-delete-domain

Run Delete a Pages custom domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.domain_name — Required $ref: "#/definitions/pages_domain_name"
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "domain_name": "example.com",
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Pages custom domain — cloudflare.pages-domains-get-domain

Run Get a Pages custom domain with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.domain_name — Required $ref: "#/definitions/pages_domain_name"
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "domain_name": "example.com",
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retry custom domain validation — cloudflare.pages-domains-patch-domain

Run Retry custom domain validation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.domain_name — Required $ref: "#/definitions/pages_domain_name"
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "domain_name": "example.com",
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Purge the Pages build cache — cloudflare.pages-purge-build-cache

Run Purge the Pages build cache with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Disconnect a Git repository — cloudflare.pages-project-disconnect-project-source

Run Disconnect a Git repository with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Connect a Git repository — cloudflare.pages-project-connect-project-source

Run Connect a Git repository with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"
body — Required $ref: "#/definitions/pages_source_connect_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "type": "github",
    "config": {
      "deployments_enabled": false,
      "owner": "my-org",
      "owner_id": "12345678",
      "path_excludes": [],
      "path_includes": [],
      "pr_comments_enabled": false,
      "preview_branch_excludes": [],
      "preview_branch_includes": [],
      "preview_deployment_setting": "all",
      "production_branch": "main",
      "production_deployments_enabled": false,
      "repo_id": "12345678",
      "repo_name": "my-repo"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get upload token — cloudflare.pages-project-get-upload-token

Run Get upload token with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.project_name — Required $ref: "#/definitions/pages_project_name"
path.account_id — Required $ref: "#/definitions/pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "project_name": "this-is-my-project-01",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Pay Invoice — cloudflare.account-billing-pay-invoice

Run Pay Invoice with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body object Required
body.invoice_id string Optional The identifier of the invoice to pay.
body.payment_method_id string Optional The payment method to use. If omitted, the default payment method is used.
body.validate_payment_method boolean Optional Whether to validate the payment method before processing.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Deletes the stripe config for a crawler — cloudflare.pay-per-crawl.crawlerdeletestripeconfig

Run Deletes the stripe config for a crawler with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Gets the stripe config for a crawler — cloudflare.pay-per-crawl.crawlergetstripeconfig

Run Gets the stripe config for a crawler with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Creates the stripe config for a crawler — cloudflare.pay-per-crawl.crawlercreatestripeconfig

Run Creates the stripe config for a crawler with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List pay-per-crawl crawlers — cloudflare.pay-per-crawl.listcrawlers

Run List pay-per-crawl crawlers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Deletes the stripe config for a publisher — cloudflare.pay-per-crawl.publisherdeletestripeconfig

Run Deletes the stripe config for a publisher with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Gets the stripe config for a publisher — cloudflare.pay-per-crawl.publishergetstripeconfig

Run Gets the stripe config for a publisher with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Creates the stripe config for a publisher — cloudflare.pay-per-crawl.publishercreatestripeconfig

Run Creates the stripe config for a publisher with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get pay-per-crawl terms — cloudflare.pay-per-crawl.getterms

Run Get pay-per-crawl terms with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get pay-per-crawl terms signature status — cloudflare.pay-per-crawl.gettermssignature

Run Get pay-per-crawl terms signature status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id
query object Optional additionalProperties: false
query.remote boolean Optional Refresh the signature status from Ironclad.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Record pay-per-crawl terms activity — cloudflare.pay-per-crawl.sendtermssignatureevent

Run Record pay-per-crawl terms activity with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id
query object Required additionalProperties: false
query.event_type string Required The terms activity to record. enum: ["agreed","displayed"]
query.vid string Required Ironclad contract version ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "event_type": "agreed",
    "vid": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set can_be_enabled setting on zones — cloudflare.pay-per-crawl.setzonescanbeenabled

Run Set can_be_enabled setting on zones with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id
body — Required $ref: "#/definitions/pay-per-crawl_ZonesCanBeEnabledUpdatePayload"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "zones": [
      {
        "id": "example"
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Gets the can_be_enabled zone setting — cloudflare.pay-per-crawl.queryzonescanbeenabled

Run Gets the can_be_enabled zone setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id
body — Required $ref: "#/definitions/pay-per-crawl_ZonesCanBeEnabledQueryPayload"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List enabled Pay Per Use domains — cloudflare.pay-per-use.listenableddomains

Run List enabled Pay Per Use domains with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier for the participant
query object Optional additionalProperties: false
query.cursor string Optional Opaque, account-bound cursor returned by the previous page. Cursors expire after one hour; restart pagination without a cursor after receiving a 400 response for an expired cursor.
query.per_page integer Optional Maximum number of domains to return default: 100; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get pay-per-use operator configuration — cloudflare.pay-per-crawl.getppuoperatorconfiguration

Run Get pay-per-use operator configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set pay-per-use operator configuration — cloudflare.pay-per-crawl.putppuoperatorconfiguration

Run Set pay-per-use operator configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id
body — Required $ref: "#/definitions/pay-per-crawl_PPUOperatorConfiguration"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example",
    "enabled": false,
    "default_price_usd_microcents": 100000
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List pay-per-use price proposals — cloudflare.pay-per-crawl.listppuproposals

Run List pay-per-use price proposals with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id
query object Optional additionalProperties: false
query.page integer Optional Page number. default: 1; minimum: 1
query.per_page integer Optional Results per page. default: 100; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Decide a pay-per-use price proposal — cloudflare.pay-per-crawl.postppuproposaldecision

Run Decide a pay-per-use price proposal with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id
body — Required $ref: "#/definitions/pay-per-crawl_PPUOperatorProposalActionRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "action": "accept",
    "price_id": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get pay-per-use usage statistics — cloudflare.pay-per-crawl.getppuusagestats

Run Get pay-per-use usage statistics with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id
query object Required additionalProperties: false
query.since string Required Requested inclusive beginning of the statistics range as an RFC3339 timestamp. Rounded down to the selected UTC interval. format: "date-time"
query.until string Required Requested exclusive end of the statistics range as an RFC3339 timestamp. Rounded down to the selected UTC interval. The requested duration from since cannot exceed 31 days. format: "date-time"
query.page integer Optional Page number. default: 1; minimum: 1
query.per_page integer Optional Results per page. default: 100; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "since": "2026-01-01T00:00:00Z",
    "until": "2026-01-01T00:00:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set pay-per-use zone eligibility — cloudflare.pay-per-crawl.setppuzonescanbeenabled

Run Set pay-per-use zone eligibility with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required account id
body — Required $ref: "#/definitions/pay-per-crawl_PPUZonesCanBeEnabledPayload"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "zones": [
      {
        "id": "example"
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Payment Methods — cloudflare.account-billing-list-payment-methods

Run List Payment Methods with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Number of items per page. default: 20; minimum: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Payment Method — cloudflare.account-billing-create-payment-method

Run Create Payment Method with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_payment_method"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Payment Method — cloudflare.account-billing-delete-payment-method

Run Delete Payment Method with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
path.payment_method_id — Required Payment method identifier. $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "payment_method_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Payment Method — cloudflare.account-billing-get-payment-method

Run Get Payment Method with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
path.payment_method_id — Required Payment method identifier. $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "payment_method_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Payment Method — cloudflare.account-billing-update-payment-method

Run Update Payment Method with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
path.payment_method_id — Required Payment method identifier. $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_payment_method"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "payment_method_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set Default Payment Method — cloudflare.account-billing-set-default-payment-method

Run Set Default Payment Method with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
path.payment_method_id — Required Payment method identifier. $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "payment_method_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List packet capture requests — cloudflare.magic-pcap-collection-list-packet-capture-requests

Run List packet capture requests with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-pcaps_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create PCAP request — cloudflare.magic-pcap-collection-create-pcap-request

Run Create PCAP request with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-pcaps_identifier"
body — Required $ref: "#/definitions/magic-visibility-pcaps_pcaps_request_pcap"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "time_limit": 300,
    "packet_limit": 10000,
    "type": "simple",
    "system": "magic-transit"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List PCAPs Bucket Ownership — cloudflare.magic-pcap-collection-list-pca-ps-bucket-ownership

Run List PCAPs Bucket Ownership with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-pcaps_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add buckets for full packet captures — cloudflare.magic-pcap-collection-add-buckets-for-full-packet-captures

Run Add buckets for full packet captures with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-pcaps_identifier"
body — Required $ref: "#/definitions/magic-visibility-pcaps_pcaps_ownership_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://pcaps-bucket?region=us-east-1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate buckets for full packet captures — cloudflare.magic-pcap-collection-validate-buckets-for-full-packet-captures

Run Validate buckets for full packet captures with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/magic-visibility-pcaps_identifier"
body — Required $ref: "#/definitions/magic-visibility-pcaps_pcaps_ownership_validate_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://pcaps-bucket?region=us-east-1",
    "ownership_challenge": "ownership-challenge-9883874ecac311ec8475433579a6bf5f.txt"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete buckets for full packet captures — cloudflare.magic-pcap-collection-delete-buckets-for-full-packet-captures

Run Delete buckets for full packet captures with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ownership_id — Required $ref: "#/definitions/magic-visibility-pcaps_identifier"
path.account_id — Required $ref: "#/definitions/magic-visibility-pcaps_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ownership_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get PCAP request — cloudflare.magic-pcap-collection-get-pcap-request

Run Get PCAP request with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pcap_id — Required $ref: "#/definitions/magic-visibility-pcaps_identifier"
path.account_id — Required $ref: "#/definitions/magic-visibility-pcaps_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pcap_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Stop full PCAP — cloudflare.magic-pcap-collection-stop-full-pcap

Run Stop full PCAP with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pcap_id — Required $ref: "#/definitions/magic-visibility-pcaps_identifier"
path.account_id — Required $ref: "#/definitions/magic-visibility-pcaps_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pcap_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Pipelines — cloudflare.getv4accountsbyaccount_idpipelinesv1pipelines

Run List Pipelines with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
query object Optional additionalProperties: false
query.page number Optional default: 1
query.per_page number Optional
query.name string Optional Filters pipelines by name (case-insensitive substring). minLength: 1; maxLength: 128

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Pipeline — cloudflare.postv4accountsbyaccount_idpipelinesv1pipelines

Run Create Pipeline with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
body object Optional
body.name string Required Specifies the name of the Pipeline. minLength: 1; maxLength: 128
body.sql string Required Specifies SQL for the Pipeline processing flow.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Pipeline — cloudflare.deletev4accountsbyaccount_idpipelinesv1pipelinesbypipeline_id

Run Delete Pipeline with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
path.pipeline_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-pipeline-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353",
    "pipeline_id": "043e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Pipeline Details — cloudflare.getv4accountsbyaccount_idpipelinesv1pipelinesbypipeline_id

Run Get Pipeline Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
path.pipeline_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-pipeline-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353",
    "pipeline_id": "043e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Sinks — cloudflare.getv4accountsbyaccount_idpipelinesv1sinks

Run List Sinks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
query object Optional additionalProperties: false
query.pipeline_id string Optional
query.name string Optional Filters sinks by name (case-insensitive substring). minLength: 1; maxLength: 128
query.order_by string Optional Sorts sinks by this field. Defaults to created_at. enum: ["name","created_at"]
query.direction string Optional Sort direction. enum: ["asc","desc"]; default: "asc"
query.page number Optional default: 1
query.per_page number Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Sink — cloudflare.postv4accountsbyaccount_idpipelinesv1sinks

Run Create Sink with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
body object Optional
body.config — Optional Defines the configuration of the R2 Sink.
body.config — Optional oneOf[1]; $ref: "#/definitions/cloudflare-pipelines_r2Table"
body.config — Optional oneOf[2]; $ref: "#/definitions/cloudflare-pipelines_r2_data_catalogTable"
body.format — Optional $ref: "#/definitions/cloudflare-pipelines_SinkFormat"
body.name string Required Defines the name of the Sink. minLength: 1; maxLength: 128
body.schema — Optional $ref: "#/definitions/cloudflare-pipelines_ConnectionSchema"
body.type string Required Specifies the type of sink. enum: ["r2","r2_data_catalog","basin_catalog"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Sink — cloudflare.deletev4accountsbyaccount_idpipelinesv1sinksbysink_id

Run Delete Sink with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
path.sink_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-sink-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353",
    "sink_id": "0223105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Sink Details — cloudflare.getv4accountsbyaccount_idpipelinesv1sinksbysink_id

Run Get Sink Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
path.sink_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-sink-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353",
    "sink_id": "0223105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Streams — cloudflare.getv4accountsbyaccount_idpipelinesv1streams

Run List Streams with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
query object Optional additionalProperties: false
query.pipeline_id — Optional $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-pipeline-id"
query.name string Optional Filters streams by name (case-insensitive substring). minLength: 1; maxLength: 128
query.order_by string Optional Sorts streams by this field. Defaults to created_at. enum: ["name","created_at"]
query.direction string Optional Sort direction. enum: ["asc","desc"]; default: "asc"
query.page number Optional default: 1
query.per_page number Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Stream — cloudflare.postv4accountsbyaccount_idpipelinesv1streams

Run Create Stream with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
body object Optional
body.format — Optional $ref: "#/definitions/cloudflare-pipelines_Format"
body.http object Optional default: {"authentication":false,"enabled":true}
body.http.authentication boolean Required Indicates that authentication is required for the HTTP endpoint.
body.http.cors object Optional Specifies the CORS options for the HTTP endpoint.
body.http.cors.origins array Optional maxItems: 5
body.http.cors.origins[] string Optional
body.http.enabled boolean Required Indicates that the HTTP endpoint is enabled.
body.name string Required Specifies the name of the Stream. minLength: 1; maxLength: 128
body.schema — Optional $ref: "#/definitions/cloudflare-pipelines_ConnectionSchema"
body.worker_binding object Optional default: {"enabled":true}
body.worker_binding.enabled boolean Required Indicates that the worker binding is enabled.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Stream — cloudflare.deletev4accountsbyaccount_idpipelinesv1streamsbystream_id

Run Delete Stream with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
path.stream_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-stream-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353",
    "stream_id": "033e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Stream Details — cloudflare.getv4accountsbyaccount_idpipelinesv1streamsbystream_id

Run Get Stream Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
path.stream_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-stream-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353",
    "stream_id": "033e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Stream — cloudflare.patchv4accountsbyaccount_idpipelinesv1streamsbystream_id

Run Update Stream with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
path.stream_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-stream-id"
body object Optional
body.http object Optional
body.http.authentication boolean Required Indicates that authentication is required for the HTTP endpoint.
body.http.cors object Optional Specifies the CORS options for the HTTP endpoint.
body.http.cors.origins array Optional maxItems: 5
body.http.cors.origins[] string Optional
body.http.enabled boolean Required Indicates that the HTTP endpoint is enabled.
body.worker_binding object Optional
body.worker_binding.enabled boolean Required Indicates that the worker binding is enabled.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353",
    "stream_id": "033e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate SQL — cloudflare.postv4accountsbyaccount_idpipelinesv1validate_sql

Run Validate SQL with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/cloudflare-pipelines_workers-pipelines-account-id"
body object Optional
body.sql string Required Specifies SQL to validate.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "0123105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account profile — cloudflare.accounts_getaccountprofile

Run Get account profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required The ID of the account whose business profile to retrieve.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update account profile — cloudflare.accounts_modifyaccountprofile

Run Update account profile with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required The ID of the account whose business profile to update.
body — Required $ref: "#/definitions/organizations-api_ModifyProfileRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Queues — cloudflare.queues-list

Run List Queues with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mq_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Queue — cloudflare.queues-create

Run Create Queue with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/mq_identifier"
body object Optional
body.jurisdiction — Optional $ref: "#/definitions/mq_jurisdiction"
body.queue_name — Required $ref: "#/definitions/mq_queue-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Queue — cloudflare.queues-delete

Run Delete Queue with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Queue — cloudflare.queues-get

Run Get Queue with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Queue — cloudflare.queues-update-partial

Run Update Queue with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body — Optional $ref: "#/definitions/mq_queue"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Queue — cloudflare.queues-update

Run Update Queue with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body — Optional $ref: "#/definitions/mq_queue"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Queue Consumers — cloudflare.queues-list-consumers

Run List Queue Consumers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Queue Consumer — cloudflare.queues-create-consumer

Run Create a Queue Consumer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body — Optional $ref: "#/definitions/mq_consumer-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Queue Consumer — cloudflare.queues-delete-consumer

Run Delete Queue Consumer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.consumer_id — Required $ref: "#/definitions/mq_identifier"
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "consumer_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Queue Consumer — cloudflare.queues-get-consumer

Run Get Queue Consumer with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.consumer_id — Required $ref: "#/definitions/mq_identifier"
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "consumer_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Queue Consumer — cloudflare.queues-update-consumer

Run Update Queue Consumer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.consumer_id — Required $ref: "#/definitions/mq_identifier"
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body — Required $ref: "#/definitions/mq_consumer-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "consumer_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "type": "worker",
    "script_name": "my-consumer-worker"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Push Message — cloudflare.queues-push-message

Run Push Message with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body — Optional $ref: "#/definitions/mq_queue-message"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Acknowledge + Retry Queue Messages — cloudflare.queues-ack-messages

Run Acknowledge + Retry Queue Messages with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body object Optional
body.acks array Optional
body.acks[] object Optional
body.acks[].lease_id — Optional $ref: "#/definitions/mq_lease-id"
body.retries array Optional
body.retries[] object Optional
body.retries[].delay_seconds — Optional $ref: "#/definitions/mq_retry-delay"
body.retries[].lease_id — Optional $ref: "#/definitions/mq_lease-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Push Message Batch — cloudflare.queues-push-messages

Run Push Message Batch with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body — Optional $ref: "#/definitions/mq_queue-batch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Extend Message Leases — cloudflare.queues-extend-messages

Run Extend Message Leases with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body object Optional
body.extend array Optional
body.extend[] object Optional
body.extend[].lease_id — Optional $ref: "#/definitions/mq_lease-id"
body.visibility_timeout_ms — Optional $ref: "#/definitions/mq_visibility-timeout"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Peek Queue Messages — cloudflare.queues-peek-messages

Run Peek Queue Messages with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body object Optional
body.batch_size — Optional $ref: "#/definitions/mq_batch-size"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Pull Queue Messages — cloudflare.queues-pull-messages

Run Pull Queue Messages with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body object Optional
body.batch_size — Optional $ref: "#/definitions/mq_batch-size"
body.visibility_timeout_ms — Optional $ref: "#/definitions/mq_visibility-timeout"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Purge Peeked Queue Messages — cloudflare.queues-purge-messages

Run Purge Peeked Queue Messages with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body object Required
body.refs array Required
body.refs[] object Optional
body.refs[].ref — Required $ref: "#/definitions/mq_ref"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "refs": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Queue Metrics — cloudflare.queues-get-metrics

Run Get Queue Metrics with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Queue Purge Status — cloudflare.queues-purge-get

Run Get Queue Purge Status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Purge Queue — cloudflare.queues-purge

Run Purge Queue with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.queue_id — Required $ref: "#/definitions/mq_identifier"
path.account_id — Required $ref: "#/definitions/mq_identifier"
body object Optional
body.delete_messages_permanently boolean Optional Confirms that all messages will be permanently deleted.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "queue_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Buckets — cloudflare.r2-list-buckets

Run List Buckets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
query object Optional additionalProperties: false
query.name_contains string Optional Bucket names to filter by. Only buckets with this phrase in their name will be returned.
query.start_after string Optional Bucket name to start searching after. Buckets are ordered lexicographically.
query.per_page number Optional Maximum number of buckets to return in a single call. default: 20; minimum: 1; maximum: 1000
query.order string Optional Field to order buckets by. enum: ["name"]
query.direction string Optional Direction to order buckets. enum: ["asc","desc"]
query.cursor string Optional Pagination cursor received during the last List Buckets call. R2 buckets are paginated using cursors instead of page numbers.
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Bucket — cloudflare.r2-delete-bucket

Run Delete Bucket with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Bucket — cloudflare.r2-get-bucket

Run Get Bucket with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Bucket — cloudflare.r2-patch-bucket

Run Patch Bucket with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Required additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
headers.cf-r2-storage-class — Required
headers.cf-r2-storage-class — Required allOf[1]; $ref: "#/definitions/r2_storage_class"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  },
  "headers": {
    "cf-r2-storage-class": "Standard"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Bucket (by name) — cloudflare.r2-create-bucket-by-name

Run Create Bucket (by name) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
headers.cf-r2-storage-class — Optional
headers.cf-r2-storage-class — Optional allOf[1]; $ref: "#/definitions/r2_storage_class"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Bucket CORS Policy — cloudflare.r2-delete-bucket-cors-policy

Run Delete Bucket CORS Policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Bucket CORS Policy — cloudflare.r2-get-bucket-cors-policy

Run Get Bucket CORS Policy with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set Bucket CORS Policy — cloudflare.r2-put-bucket-cors-policy

Run Set Bucket CORS Policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
body object Required
body.rules array Optional
body.rules[] — Optional $ref: "#/definitions/r2_cors-rule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Custom Domains of Bucket — cloudflare.r2-list-custom-domains

Run List Custom Domains of Bucket with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Attach Custom Domain To Bucket — cloudflare.r2-add-custom-domain

Run Attach Custom Domain To Bucket with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
body — Required $ref: "#/definitions/r2_add_custom_domain_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  },
  "body": {
    "domain": "prefix.example-domain.com",
    "enabled": true,
    "zoneId": "36ca64a6d92827b8a6b90be344bb1bfd"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove Custom Domain From Bucket — cloudflare.r2-delete-custom-domain

Run Remove Custom Domain From Bucket with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.domain — Required $ref: "#/definitions/r2_domain_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain": "example-domain/custom-domain.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Custom Domain Settings — cloudflare.r2-get-custom-domain-settings

Run Get Custom Domain Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.domain — Required $ref: "#/definitions/r2_domain_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket",
    "domain": "example-domain/custom-domain.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Configure Custom Domain Settings — cloudflare.r2-edit-custom-domain-settings

Run Configure Custom Domain Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.domain — Required $ref: "#/definitions/r2_domain_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
body — Required $ref: "#/definitions/r2_edit_custom_domain_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket",
    "domain": "example-domain/custom-domain.com"
  },
  "body": {
    "enabled": true,
    "minTLS": "1.2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get r2.dev Domain of Bucket — cloudflare.r2-get-bucket-public-policy

Run Get r2.dev Domain of Bucket with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update r2.dev Domain of Bucket — cloudflare.r2-put-bucket-public-policy

Run Update r2.dev Domain of Bucket with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
body — Required $ref: "#/definitions/r2_edit_managed_domain_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  },
  "body": {
    "enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Bucket Jobs — cloudflare.r2-list-bucket-jobs

Run List Bucket Jobs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
query object Optional additionalProperties: false
query.jobType string Optional Restricts results to jobs of the specified type. enum: ["prefixDelete","storageClassMigration"]
query.status — Optional Restricts results to jobs with the specified status. jobType is required when this parameter is provided. $ref: "#/definitions/r2_r2_bucket_job_status"
query.maxKeys integer Optional Maximum number of jobs to return. minimum: 0; maximum: 1000
query.continuationToken string Optional Pagination token received as nextContinuationToken in the previous response.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Bucket Job — cloudflare.r2-create-bucket-job

Run Create Bucket Job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
headers.cf-r2-data-catalog-check string Optional For prefix-delete jobs, set this header to reject the request when R2 Data Catalog is enabled for the bucket.
body — Required
body — Required oneOf[1]; $ref: "#/definitions/r2_create_prefix_delete_job_request"
body — Required oneOf[2]; $ref: "#/definitions/r2_create_storage_class_migration_job_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  },
  "body": {
    "jobType": "prefixDelete",
    "prefix": "logs/2026/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Bucket Job — cloudflare.r2-get-bucket-job

Run Get Bucket Job with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.job_id string Required Identifier returned when the background job was submitted.
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket",
    "job_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Object Lifecycle Rules — cloudflare.r2-get-bucket-lifecycle-configuration

Run Get Object Lifecycle Rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set Object Lifecycle Rules — cloudflare.r2-put-bucket-lifecycle-configuration

Run Set Object Lifecycle Rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
body object Required
body.rules array Optional
body.rules[] — Optional $ref: "#/definitions/r2_lifecycle-rule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Local Uploads Configuration — cloudflare.r2-get-bucket-local-uploads-configuration

Run Get Local Uploads Configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set Local Uploads Configuration — cloudflare.r2-put-bucket-local-uploads-configuration

Run Set Local Uploads Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
body object Required
body.enabled boolean Required Whether to enable local uploads for this bucket.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Bucket Lock Rules — cloudflare.r2-delete-bucket-lock-configuration

Run Delete Bucket Lock Rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Bucket Lock Rules — cloudflare.r2-get-bucket-lock-configuration

Run Get Bucket Lock Rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set Bucket Lock Rules — cloudflare.r2-put-bucket-lock-configuration

Run Set Bucket Lock Rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
body object Required
body.rules array Optional
body.rules[] — Optional $ref: "#/definitions/r2_bucket-lock-rule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Objects — cloudflare.r2-delete-objects

Run Delete Objects with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
headers.cf-r2-data-catalog-check string Optional Set this header to reject the operation when R2 Data Catalog is enabled for the bucket.
query object Optional additionalProperties: false
query.prefix string Optional Deprecated. Create a prefixDelete job with the Create Bucket Job endpoint instead. When present, the request body is ignored and a prefix-delete job is created for this prefix, exactly as Create Bucket Job does; an empty value empties the bucket. The response is the job descriptor, with a Deprecation header and a deprecation message in messages.
body array Optional minItems: 1; maxItems: 1000
body[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Objects — cloudflare.r2-list-objects

Run List Objects with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"
query object Optional additionalProperties: false
query.per_page integer Optional Maximum number of objects to return per page. default: 20; minimum: 1; maximum: 1000
query.prefix string Optional Restricts results to only those objects whose keys begin with the specified prefix.
query.delimiter string Optional A single character used to group keys. All keys that contain the delimiter between the prefix and the first occurrence of the delimiter after the prefix are grouped under a single result element.
query.cursor string Optional Pagination cursor received from a previous List Objects call. Used to retrieve the next page of results.
query.start_after string Optional Returns objects with keys that come after the specified key in lexicographic order.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Object — cloudflare.r2-delete-object

Run Delete Object with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.object_key string Required The key (name) of the object to delete. May contain slashes for path-like keys. Slashes (/) within the key MUST be sent literally and MUST NOT be percent-encoded (i.e. %2F); other reserved characters should be percent-encoded as usual.
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket",
    "object_key": "path/to/my-object.txt"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Disable Sippy — cloudflare.r2-delete-bucket-sippy-config

Run Disable Sippy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bucket_name": "example-bucket",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Sippy Configuration — cloudflare.r2-get-bucket-sippy-config

Run Get Sippy Configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
path.bucket_name — Required $ref: "#/definitions/r2_bucket_name"
headers object Optional additionalProperties: false
headers.cf-r2-jurisdiction string Optional Jurisdiction where objects in this bucket are guaranteed to be stored. enum: ["default","eu","us","fedramp","fedramp-high"]; default: "default"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "bucket_name": "example-bucket"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Account-Level Metrics — cloudflare.r2-get-account-level-metrics

Run Get Account-Level Metrics with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Temporary Access Credentials — cloudflare.r2-create-temp-access-credentials

Run Create Temporary Access Credentials with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/r2_account_identifier"
body — Required $ref: "#/definitions/r2_temp_access_creds_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "bucket": "example-bucket",
    "objects": [
      "example-object"
    ],
    "parentAccessKeyId": "example-access-key-id",
    "permission": "object-read-write",
    "prefixes": [
      "example-prefix/"
    ],
    "ttlSeconds": 3600
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch all apps — cloudflare.get_apps

Run Fetch all apps with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
query object Optional additionalProperties: false
query.page_no integer Optional The page number from which you want your page search results to be displayed. default: 1; minimum: 1
query.per_page integer Optional Number of results per page. default: 20; minimum: 1
query.search string Optional Search string that matches apps by name. maxLength: 125
query.sort_order string Optional Sort order for apps by creation time. enum: ["ASC","DESC"]; default: "DESC"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create App — cloudflare.create_app

Run Create App with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
body object Required
body.name string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch app details — cloudflare.get_app

Run Fetch app details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an app — cloudflare.update_app

Run Update an app with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id string Required format: "uuid"
body object Required additionalProperties: false
body.name string Required The app name. Leading and trailing whitespace is removed, and the name must contain at least one non-whitespace character. maxLength: 150; pattern: "\\S"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch day-wise session and recording analytics data for an App — cloudflare.get-org-analytics

Run Fetch day-wise session and recording analytics data for an App with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
query object Optional additionalProperties: false
query.start_date string Optional start date in YYYY-MM-DD format
query.end_date string Optional end date in YYYY-MM-DD format

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch day-wise analytics data for your livestreams — cloudflare.get-livestream-analytics-daywise

Run Fetch day-wise analytics data for your livestreams with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
query object Optional additionalProperties: false
query.start_time integer Optional Specify the start time as a Unix timestamp in seconds to access the livestream analytics.
query.end_time integer Optional Specify the end time as a Unix timestamp in seconds to access the livestream analytics.
query.filters string Optional Optional filters for livestream analytics.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch complete analytics data for your livestreams — cloudflare.get-livestream-analytics-complete

Run Fetch complete analytics data for your livestreams with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
query object Optional additionalProperties: false
query.start_time integer Optional Specify the start time as a Unix timestamp in seconds to access the livestream analytics.
query.end_time integer Optional Specify the end time as a Unix timestamp in seconds to access the livestream analytics.
query.filters string Optional Optional filters for livestream analytics.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch all livestreams — cloudflare.fetch_all_livestreams

Run Fetch all livestreams with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
query object Optional additionalProperties: false
query.exclude_meetings boolean Optional Exclude the RealtimeKit meetings that are livestreamed. default: false
query.per_page integer Optional Number of results per page.
query.page_no integer Optional The page number from which you want your page search results to be displayed.
query.status string Optional Specifies the status of the operation. enum: ["LIVE","IDLE","ERRORED","INVOKED"]
query.start_time string Optional Specify the start time range in ISO format to access the live stream. format: "date-time"
query.end_time string Optional Specify the end time range in ISO format to access the live stream. format: "date-time"
query.sort_order string Optional Specifies the sorting order for the results. enum: ["ASC","DSC"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch livestream session details using livestream session ID — cloudflare.get-v2-livestreams-livestream-session-id

Run Fetch livestream session details using livestream session ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.livestream-session-id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "livestream-session-id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch livestream details using livestream ID — cloudflare.get-v2-livestream-session-livestream-id

Run Fetch livestream details using livestream ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.livestream_id string Required
query object Optional additionalProperties: false
query.page_no integer Optional The page number from which you want your page search results to be displayed.
query.per_page integer Optional Number of results per page.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "livestream_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch active livestream session details — cloudflare.get-v2-active-livestream-session-details

Run Fetch active livestream session details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.livestream_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "livestream_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch all meetings for an App — cloudflare.get_all_meetings

Run Fetch all meetings for an App with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
query object Optional additionalProperties: false
query.page_no number Optional The page number from which you want your page search results to be displayed. minimum: 0
query.per_page number Optional Number of results per page minimum: 0
query.start_time string Optional The start time range for which you want to retrieve the meetings. The time must be specified in ISO format. format: "date-time"
query.end_time string Optional The end time range for which you want to retrieve the meetings. The time must be specified in ISO format. format: "date-time"
query.search string Optional The search query string. You can search using the meeting ID or title.
query.status string Optional Filter meetings by status. enum: ["ACTIVE","INACTIVE"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a meeting — cloudflare.create_meeting

Run Create a meeting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
body object Required
body.ai_config — Optional $ref: "#/definitions/realtimekit_AIConfig"
body.live_stream_on_start boolean | null Optional Specifies if the meeting should start getting livestreamed on start. default: false
body.persist_chat boolean Optional If a meeting is set to persist_chat, meeting chat would remain for a week within the meeting space. default: false
body.record_on_start boolean | null Optional Specifies if the meeting should start getting recorded as soon as someone joins the meeting. default: false
body.recording_config — Optional $ref: "#/definitions/realtimekit_RecordingConfig"
body.session_keep_alive_time_in_secs number Optional Time in seconds, for which a session remains active, after the last participant has left the meeting. default: 60; minimum: 60; maximum: 600
body.summarize_on_end boolean Optional Automatically generate summary of meetings using transcripts. Requires Transcriptions to be enabled, and can be retrieved via Webhooks or summary API. default: false
body.title string | null Optional Title of the meeting
body.transcribe_on_end boolean Optional Automatically generate transcripts when the meeting ends. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch a meeting for an App — cloudflare.get_meeting

Run Fetch a meeting for an App with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting. Fetch the meeting ID using the create a meeting API. format: "uuid"
query object Optional additionalProperties: false
query.name string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a meeting — cloudflare.update_meeting

Run Update a meeting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting. Fetch the meeting ID using the create a meeting API. format: "uuid"
body object Required
body.ai_config — Optional $ref: "#/definitions/realtimekit_AIConfig"
body.live_stream_on_start boolean Optional Specifies if the meeting should start getting livestreamed on start.
body.persist_chat boolean Optional If a meeting is updated to persist_chat, meeting chat would remain for a week within the meeting space.
body.record_on_start boolean Optional Specifies if the meeting should start getting recorded as soon as someone joins the meeting.
body.recording_config — Optional $ref: "#/definitions/realtimekit_RecordingConfig"
body.session_keep_alive_time_in_secs number Optional Time in seconds, for which a session remains active, after the last participant has left the meeting. minimum: 60; maximum: 600
body.status string Optional Whether the meeting is ACTIVE or INACTIVE. Users will not be able to join an INACTIVE meeting. enum: ["ACTIVE","INACTIVE"]
body.summarize_on_end boolean Optional Automatically generate summary of meetings using transcripts. Requires Transcriptions to be enabled, and can be retrieved via Webhooks or summary API.
body.title string Optional Title of the meeting
body.transcribe_on_end boolean Optional Automatically generate transcripts when the meeting ends.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace a meeting — cloudflare.replace_meeting

Run Replace a meeting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting. Fetch the meeting ID using the create a meeting API. format: "uuid"
body object Required
body.ai_config — Optional $ref: "#/definitions/realtimekit_AIConfig"
body.live_stream_on_start boolean | null Optional Specifies if the meeting should start getting livestreamed on start. default: false
body.persist_chat boolean Optional If a meeting is set to persist_chat, meeting chat would remain for a week within the meeting space. default: false
body.record_on_start boolean | null Optional Specifies if the meeting should start getting recorded as soon as someone joins the meeting. default: false
body.recording_config — Optional $ref: "#/definitions/realtimekit_RecordingConfig"
body.session_keep_alive_time_in_secs number Optional Time in seconds, for which a session remains active, after the last participant has left the meeting. default: 60; minimum: 60; maximum: 600
body.summarize_on_end boolean Optional Automatically generate summary of meetings using transcripts. Requires Transcriptions to be enabled, and can be retrieved via Webhooks or summary API. default: false
body.title string | null Optional Title of the meeting
body.transcribe_on_end boolean Optional Automatically generate transcripts when the meeting ends. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch active livestreams for a meeting — cloudflare.get-v2-meetings-meetingid-active-livestream

Run Fetch active livestreams for a meeting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Stop livestreaming a meeting — cloudflare.stop_livestreaming

Run Stop livestreaming a meeting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch details of an active session — cloudflare.getactivesession

Run Fetch details of an active session with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Kick participants from an active session — cloudflare.kickpartcipants

Run Kick participants from an active session with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting
body object Required
body.custom_participant_ids array Optional minItems: 1
body.custom_participant_ids[] string Optional
body.participant_ids array Optional minItems: 1
body.participant_ids[] string Optional format: "uuid"
body — Required anyOf[1]
body — Required anyOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "example"
  },
  "body": {
    "participant_ids": [
      "00000000-0000-4000-8000-000000000000"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Kick all participants — cloudflare.kickallparticipants

Run Kick all participants with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Mute participants of an active session — cloudflare.muteparticipants

Run Mute participants of an active session with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting
body object Required
body.custom_participant_ids array Optional minItems: 1
body.custom_participant_ids[] string Optional
body.participant_ids array Optional minItems: 1
body.participant_ids[] string Optional
body — Required anyOf[1]
body — Required anyOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "example"
  },
  "body": {
    "participant_ids": [
      "example"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Mute all participants — cloudflare.muteallparticipants

Run Mute all participants with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting
body object Required
body.allow_unmute boolean Optional if false, participants won't be able to unmute themselves after they are muted default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a poll — cloudflare.createpoll

Run Create a poll with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting
body object Required
body.anonymous boolean Optional if voters on a poll are anonymous
body.hide_votes boolean Optional if votes on an option are visible before a person votes
body.options array Required Different options for the question
body.options[] string Optional
body.question string Required Question of the poll

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "example"
  },
  "body": {
    "question": "example",
    "options": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch livestream session details for a meeting — cloudflare.livestream-session-details

Run Fetch livestream session details for a meeting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting format: "uuid"
query object Optional additionalProperties: false
query.page_no integer Optional The page number from which you want your page search results to be displayed.
query.per_page integer Optional Number of results per page.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start livestreaming a meeting — cloudflare.start-livestreaming

Run Start livestreaming a meeting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting format: "uuid"
body object Required
body.name string | null Optional pattern: "^[a-zA-Z0-9-_]*$"
body.video_config object Optional
body.video_config.height integer Optional Height of the livestreaming video in pixels
body.video_config.width integer Optional Width of the livestreaming video in pixels

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "prdmmp-xhycsl"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch all participants of a meeting — cloudflare.get_meeting_participants

Run Fetch all participants of a meeting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting. Fetch the meeting ID using the create a meeting API. format: "uuid"
query object Optional additionalProperties: false
query.page_no number Optional The page number from which you want your page search results to be displayed. minimum: 0
query.per_page number Optional Number of results per page minimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add a participant — cloudflare.add_participant

Run Add a participant with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting. Fetch the meeting ID using the create a meeting API. format: "uuid"
body object Required
body.custom_participant_id string Required A unique participant ID. You must specify a unique ID for the participant, for example, UUID, email address, and so on.
body.name string | null Optional (Optional) Name of the participant.
body.picture string | null Optional (Optional) A URL to a picture to be used for the participant. format: "uri"
body.preset_name string Required Name of the preset to apply to this participant. default: "group_call_host"
body.token — Optional $ref: "#/definitions/realtimekit_ParticipantTokenValidity"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "preset_name": "group_call_host",
    "custom_participant_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a participant — cloudflare.delete_meeting_participant

Run Delete a participant with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting. You can fetch the meeting ID using the create a meeting API. format: "uuid"
path.participant_id string Required ID of the participant. You can fetch the participant ID using the add a participant API.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000",
    "participant_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch a participant's detail — cloudflare.get_meeting_participant

Run Fetch a participant's detail with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting. You can fetch the meeting ID using the create a meeting API. format: "uuid"
path.participant_id string Required ID of the participant. You can fetch the participant ID using the add a participant API.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000",
    "participant_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit a participant's detail — cloudflare.edit_participant

Run Edit a participant's detail with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting. You can fetch the meeting ID using the create a meeting API. format: "uuid"
path.participant_id string Required ID of the participant. You can fetch the participant ID using the add a participant API.
body object Required
body.name string | null Optional (Optional) Name of the participant.
body.picture string | null Optional (Optional) A URL to a picture to be used for the participant. format: "uri"
body.preset_name string | null Optional (Optional) Name of the preset to apply to this participant.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000",
    "participant_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace a participant's detail — cloudflare.replace_participant

Run Replace a participant's detail with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting. You can fetch the meeting ID using the create a meeting API. format: "uuid"
path.participant_id string Required ID of the participant. You can fetch the participant ID using the add a participant API.
body object Required
body.custom_participant_id string Required Unique participant ID accepted by the replace participant API.
body.name string | null Optional (Optional) Name of the participant.
body.picture string | null Optional (Optional) A URL to a picture to be used for the participant. format: "uri"
body.preset_name string Required Name of the preset to apply to this participant.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000",
    "participant_id": "example"
  },
  "body": {
    "preset_name": "example",
    "custom_participant_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revoke participant's authentication token — cloudflare.revoke_token

Run Revoke participant's authentication token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting. You can fetch the meeting ID using the create a meeting API. format: "uuid"
path.participant_id string Required ID of the participant. You can fetch the participant ID using the add a participant API.
body object Required
body.token string Required The participant authentication token to revoke.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000",
    "participant_id": "example"
  },
  "body": {
    "token": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Refresh participant's authentication token — cloudflare.regenerate_token

Run Refresh participant's authentication token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting. You can fetch the meeting ID using the create a meeting API. format: "uuid"
path.participant_id string Required ID of the participant. You can fetch the participant ID using the add a participant API.
body — Optional $ref: "#/definitions/realtimekit_ParticipantTokenValidity"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "00000000-0000-4000-8000-000000000000",
    "participant_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch all presets — cloudflare.get-presets

Run Fetch all presets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
query object Optional additionalProperties: false
query.per_page number Optional Number of results per page minimum: 0
query.page_no number Optional The page number from which you want your page search results to be displayed. minimum: 0
query.search string Optional Search presets by name.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a preset — cloudflare.post-presets

Run Create a preset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
body — Required $ref: "#/definitions/realtimekit_Preset"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  },
  "body": {
    "name": "example",
    "config": {
      "view_type": "GROUP_CALL",
      "max_video_streams": {
        "mobile": 1,
        "desktop": 1
      },
      "max_screenshare_count": 1,
      "media": {
        "video": {
          "quality": "hd",
          "frame_rate": 1
        },
        "screenshare": {
          "quality": "hd",
          "frame_rate": 1
        }
      }
    },
    "permissions": {
      "accept_waiting_requests": false,
      "can_accept_production_requests": false,
      "can_edit_display_name": false,
      "can_spotlight": false,
      "recorder_type": "RECORDER",
      "disable_participant_audio": false,
      "disable_participant_screensharing": false,
      "disable_participant_video": false,
      "kick_participant": false,
      "pin_participant": false,
      "can_record": false,
      "can_livestream": false,
      "waiting_room_type": "SKIP",
      "plugins": {
        "can_close": false,
        "can_start": false,
        "can_edit_config": false,
        "config": {}
      },
      "connected_meetings": {
        "can_alter_connected_meetings": false,
        "can_switch_connected_meetings": false,
        "can_switch_to_parent_meeting": false
      },
      "polls": {
        "can_create": false,
        "can_vote": false,
        "can_view": false
      },
      "media": {
        "video": {
          "can_produce": "ALLOWED"
        },
        "audio": {
          "can_produce": "ALLOWED"
        },
        "screenshare": {
          "can_produce": "ALLOWED"
        }
      },
      "chat": {
        "public": {
          "can_send": false,
          "text": false,
          "files": false
        },
        "private": {
          "can_send": false,
          "can_receive": false,
          "text": false,
          "files": false
        }
      },
      "hidden_participant": false,
      "show_participant_list": false,
      "can_change_participant_permissions": false
    },
    "ui": {
      "design_tokens": {
        "border_radius": "sharp",
        "border_width": "none",
        "spacing_base": 1,
        "theme": "darkest",
        "colors": {
          "brand": {
            "300": "example",
            "400": "example",
            "500": "example",
            "600": "example",
            "700": "example"
          },
          "background": {
            "600": "example",
            "700": "example",
            "800": "example",
            "900": "example",
            "1000": "example"
          },
          "danger": "example",
          "text": "example",
          "text_on_brand": "example",
          "success": "example",
          "video_bg": "example",
          "warning": "example"
        }
      }
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a preset — cloudflare.delete-presets-preset_id

Run Delete a preset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.preset_id string Required ID of the preset to fetch format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "preset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch details of a preset — cloudflare.get-presets-preset_id

Run Fetch details of a preset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.preset_id string Required ID of the preset to fetch format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "preset_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a preset — cloudflare.patch-presets-preset_id

Run Update a preset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.preset_id string Required ID of the preset to fetch format: "uuid"
body — Required $ref: "#/definitions/realtimekit_UpdatePreset"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "preset_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace a preset — cloudflare.put-presets-preset_id

Run Replace a preset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.preset_id string Required ID of the preset to replace format: "uuid"
body — Required $ref: "#/definitions/realtimekit_Preset"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "preset_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "example",
    "config": {
      "view_type": "GROUP_CALL",
      "max_video_streams": {
        "mobile": 1,
        "desktop": 1
      },
      "max_screenshare_count": 1,
      "media": {
        "video": {
          "quality": "hd",
          "frame_rate": 1
        },
        "screenshare": {
          "quality": "hd",
          "frame_rate": 1
        }
      }
    },
    "permissions": {
      "accept_waiting_requests": false,
      "can_accept_production_requests": false,
      "can_edit_display_name": false,
      "can_spotlight": false,
      "recorder_type": "RECORDER",
      "disable_participant_audio": false,
      "disable_participant_screensharing": false,
      "disable_participant_video": false,
      "kick_participant": false,
      "pin_participant": false,
      "can_record": false,
      "can_livestream": false,
      "waiting_room_type": "SKIP",
      "plugins": {
        "can_close": false,
        "can_start": false,
        "can_edit_config": false,
        "config": {}
      },
      "connected_meetings": {
        "can_alter_connected_meetings": false,
        "can_switch_connected_meetings": false,
        "can_switch_to_parent_meeting": false
      },
      "polls": {
        "can_create": false,
        "can_vote": false,
        "can_view": false
      },
      "media": {
        "video": {
          "can_produce": "ALLOWED"
        },
        "audio": {
          "can_produce": "ALLOWED"
        },
        "screenshare": {
          "can_produce": "ALLOWED"
        }
      },
      "chat": {
        "public": {
          "can_send": false,
          "text": false,
          "files": false
        },
        "private": {
          "can_send": false,
          "can_receive": false,
          "text": false,
          "files": false
        }
      },
      "hidden_participant": false,
      "show_participant_list": false,
      "can_change_participant_permissions": false
    },
    "ui": {
      "design_tokens": {
        "border_radius": "sharp",
        "border_width": "none",
        "spacing_base": 1,
        "theme": "darkest",
        "colors": {
          "brand": {
            "300": "example",
            "400": "example",
            "500": "example",
            "600": "example",
            "700": "example"
          },
          "background": {
            "600": "example",
            "700": "example",
            "800": "example",
            "900": "example",
            "1000": "example"
          },
          "danger": "example",
          "text": "example",
          "text_on_brand": "example",
          "success": "example",
          "video_bg": "example",
          "warning": "example"
        }
      }
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch all recordings for an App — cloudflare.get_all_recordings

Run Fetch all recordings for an App with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
query object Optional additionalProperties: false
query.meeting_id string Optional ID of a meeting. Optional. Will limit results to only this meeting if passed. format: "uuid"
query.page_no number Optional The page number from which you want your page search results to be displayed. minimum: 0
query.per_page number Optional Number of results per page minimum: 0
query.expired boolean Optional If passed, only shows expired/non-expired recordings on RealtimeKit's bucket
query.search string Optional The search query string. You can search using the meeting ID or title.
query.sort_by string Optional enum: ["invokedTime"]
query.sort_order string Optional enum: ["ASC","DESC"]
query.start_time string Optional The start time range for which you want to retrieve the meetings. The time must be specified in ISO format. format: "date-time"
query.end_time string Optional The end time range for which you want to retrieve the meetings. The time must be specified in ISO format. format: "date-time"
query.status array Optional Filter by one or more recording status
query.status[] string Optional enum: ["INVOKED","RECORDING","UPLOADING","UPLOADED","ERRORED","PAUSED"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start recording a meeting — cloudflare.start_recording

Run Start recording a meeting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
body object Required
body.allow_multiple_recordings boolean Optional By default, a meeting allows only one recording to run at a time. Enabling the allow_multiple_recordings parameter to true allows you to initiate multiple recordings concurrently in the same meeting. This allows you to record separate videos of the same meeting with different configurations, such as portrait mode or landscape mode. default: false
body.audio_config — Optional $ref: "#/definitions/realtimekit_AudioConfig"
body.file_name_prefix string Optional Update the recording file name.
body.interactive_config — Optional $ref: "#/definitions/realtimekit_InteractiveConfig"
body.max_seconds integer Optional Specifies the maximum duration for recording in seconds, ranging from a minimum of 60 seconds to a maximum of 24 hours. minimum: 60; maximum: 86400
body.meeting_id string Required ID of the meeting to record. format: "uuid"
body.realtimekit_bucket_config — Optional $ref: "#/definitions/realtimekit_realtimekitBucketConfig"
body.rtmp_out_config — Optional $ref: "#/definitions/realtimekit_LivestreamingConfig"
body.storage_config — Optional $ref: "#/definitions/realtimekit_StorageConfig"
body.url string Optional Pass a custom url to record arbitary screen format: "uri"
body.video_config — Optional $ref: "#/definitions/realtimekit_VideoConfig"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  },
  "body": {
    "allow_multiple_recordings": false,
    "audio_config": {
      "channel": "stereo",
      "codec": "AAC",
      "export_file": true
    },
    "file_name_prefix": "string",
    "interactive_config": {
      "type": "ID3"
    },
    "max_seconds": 60,
    "meeting_id": "97440c6a-140b-40a9-9499-b23fd7a3868a",
    "realtimekit_bucket_config": {
      "enabled": true
    },
    "video_config": {
      "codec": "H264",
      "export_file": true,
      "height": 720,
      "watermark": {
        "position": "left top",
        "size": {
          "height": 1,
          "width": 1
        },
        "url": "http://example.com"
      },
      "width": 1280
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch active recording — cloudflare.get_active_recording

Run Fetch active recording with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.meeting_id string Required ID of the meeting

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "meeting_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start recording participant audio tracks — cloudflare.starttrackrecordingforameeting

Run Start recording participant audio tracks with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
body object Required
body.layers object Optional Optional audio layer configuration. If omitted, RealtimeKit records all participant audio using the default file name prefix. additionalProperties: {"$ref":"#/definitions/realtimekit_TrackConfigLayer"}
body.meeting_id string Required ID of the meeting to record. format: "uuid"
body.user_ids array Optional Optional list of participant user IDs to record. Selective track recording (user_ids) is in early beta contact support to use this feature. minItems: 1; maxItems: 100
body.user_ids[] string Optional minLength: 1; maxLength: 256

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  },
  "body": {
    "meeting_id": "97440c6a-140b-40a9-9499-b23fd7a3868a"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch details of a recording — cloudflare.get_one_recording

Run Fetch details of a recording with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.recording_id string Required ID of the recording format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "recording_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Pause/Resume/Stop recording — cloudflare.pause_resume_stop_recording

Run Pause/Resume/Stop recording with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.recording_id string Required ID of the recording format: "uuid"
body object Required
body.action string Required enum: ["stop","pause","resume"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "recording_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "action": "stop"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch all sessions of an App — cloudflare.getsessions

Run Fetch all sessions of an App with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
query object Optional additionalProperties: false
query.page_no number Optional The page number from which you want your page search results to be displayed. minimum: 0
query.per_page number Optional Number of results per page minimum: 0
query.sort_by string Optional enum: ["minutesConsumed","createdAt"]
query.sort_order string Optional enum: ["ASC","DESC"]
query.start_time string Optional The start time range for which you want to retrieve the meetings. The time must be specified in ISO format. format: "date-time"
query.end_time string Optional The end time range for which you want to retrieve the meetings. The time must be specified in ISO format. format: "date-time"
query.participants string Optional
query.status string Optional enum: ["LIVE","ENDED"]
query.search string Optional Search string that matches sessions based on meeting title, meeting ID, and session ID
query.associated_id string Optional ID of the meeting that sessions should be associated with format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch details of peer — cloudflare.getparticipantdatafrompeerid

Run Fetch details of peer with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.peer_id string Required ID of the peer format: "uuid"
query object Optional additionalProperties: false
query.filters string Optional Filter to apply to the peer report. enum: ["device_info","ip_information","precall_network_information","events","quality_stats"]
query.include_peer_events boolean Optional if true, response includes all the peer events of participant. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "peer_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch details of a session — cloudflare.getsessiondetails

Run Fetch details of a session with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.session_id string Required ID of the session format: "uuid"
query object Optional additionalProperties: false
query.include_breakout_rooms boolean Optional List all breakout rooms default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch all chat messages of a session — cloudflare.getsessionchat

Run Fetch all chat messages of a session with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.session_id string Required ID of the session format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch livestream session details using a session ID — cloudflare.get-v2-livestreamsession-session-meetingid-active-livestream

Run Fetch livestream session details using a session ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.session_id string Required format: "uuid"
query object Optional additionalProperties: false
query.per_page number Optional Number of results per page.
query.page_no number Optional The page number from which you want your page search results to be displayed.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch participants list of a session — cloudflare.getsessionparticipants

Run Fetch participants list of a session with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.session_id string Required ID of the session format: "uuid"
query object Optional additionalProperties: false
query.search string Optional The search query string. You can search using participant ID, custom participant ID, or display name.
query.page_no number Optional The page number from which you want your page search results to be displayed. minimum: 0
query.per_page integer Optional Number of results per page. default: 25; minimum: 1; maximum: 200
query.sort_order string Optional enum: ["ASC","DESC"]
query.sort_by string Optional enum: ["joinedAt","duration"]
query.include_peer_events boolean Optional if true, response includes all the peer events of participants. default: false
query.view string Optional In breakout room sessions, the view parameter can be set to raw for session specific duration for participants or consolidated to accumulate breakout room durations. enum: ["raw","consolidated"]; default: "raw"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch details of a participant — cloudflare.getparticipantdetails

Run Fetch details of a participant with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.participant_id string Required ID of the participant format: "uuid"
path.session_id string Required ID of the session format: "uuid"
query object Optional additionalProperties: false
query.include_peer_events boolean Optional if true, response includes all the peer events of participant. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "participant_id": "00000000-0000-4000-8000-000000000000",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch summary of transcripts for a session — cloudflare.getsessionsummary

Run Fetch summary of transcripts for a session with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.session_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Generate summary of Transcripts for the session — cloudflare.post-sessions-session_id-summary

Run Generate summary of Transcripts for the session with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.session_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch the complete transcript for a session — cloudflare.getsessiontranscript

Run Fetch the complete transcript for a session with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.session_id string Required ID of the session format: "uuid"
query object Optional additionalProperties: false
query.format string Optional Transcript file format to fetch. enum: ["SRT","VTT","JSON","CSV"]; default: "CSV"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "session_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch all webhooks details — cloudflare.getallwebhooks

Run Fetch all webhooks details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add a webhook — cloudflare.addwebhook

Run Add a webhook with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
body — Required $ref: "#/definitions/realtimekit_WebhookRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  },
  "body": {
    "name": "All events webhook",
    "url": "https://webhook.site/b23a5bbd-c7b0-4ced-a9e2-78ae7889897e",
    "events": [
      "meeting.started",
      "meeting.ended",
      "meeting.participantJoined",
      "meeting.participantLeft",
      "meeting.chatSynced",
      "recording.statusUpdate",
      "livestreaming.statusUpdate",
      "meeting.transcript",
      "meeting.summary"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch all supported webhook events — cloudflare.getallwebhookevents

Run Fetch all supported webhook events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch details of a webhook — cloudflare.getwebhook

Run Fetch details of a webhook with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.webhook_id string Required ID of the webhook format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "webhook_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit a webhook — cloudflare.editwebhook

Run Edit a webhook with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.webhook_id string Required ID of the webhook format: "uuid"
body — Required $ref: "#/definitions/realtimekit_PatchWebhookRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "webhook_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace a webhook — cloudflare.replacewebhook

Run Replace a webhook with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/realtimekit_account_identifier"
path.app_id — Required $ref: "#/definitions/realtimekit_app_id"
path.webhook_id string Required ID of the webhook format: "uuid"
body — Required $ref: "#/definitions/realtimekit_WebhookRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "app_id": "14a396e7-ca44-4937-bf1f-050a69118543",
    "webhook_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "All events webhook",
    "url": "https://webhook.site/b23a5bbd-c7b0-4ced-a9e2-78ae7889897e",
    "events": [
      "meeting.started",
      "meeting.ended",
      "meeting.participantJoined",
      "meeting.participantLeft",
      "meeting.chatSynced",
      "recording.statusUpdate",
      "livestreaming.statusUpdate",
      "meeting.transcript",
      "meeting.summary"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check domain availability — cloudflare.sandbox-registrar-domain-discovery-check

Run Check domain availability with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. Required for all Registrar API operations. $ref: "#/definitions/registrar-api-sandbox_identifier"
body — Required $ref: "#/definitions/registrar-api-sandbox_domain_check_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "domains": [
      "example.com",
      "example.net"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List extensions — cloudflare.sandbox-registrar-extension-list

Run List extensions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/registrar-api-sandbox_identifier"
query object Optional additionalProperties: false
query.name string Optional Filter extensions by exact name match. For example, name=com returns only the com extension.
query.cursor string Optional Opaque token from a previous response's result_info.cursor. Pass this value to fetch the next page of results. Omit (or pass an empty string) for the first page. maxLength: 256
query.per_page integer Optional Number of items to return per page. default: 20; minimum: 1; maximum: 50
query.direction string Optional Sort direction for results. Defaults to ascending order. enum: ["asc","desc"]; default: "asc"
query.sort_by string Optional Column to sort results by. Defaults to name when omitted. enum: ["name","created_at","updated_at"]; default: "name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get extension — cloudflare.sandbox-registrar-extension-get

Run Get extension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/registrar-api-sandbox_identifier"
path.extension string Required The extension name (e.g., com, co.uk).

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "extension": "com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Registrations — cloudflare.sandbox-registrar-domain-registration-list

Run List Registrations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. $ref: "#/definitions/registrar-api-sandbox_identifier"
query object Optional additionalProperties: false
query.cursor string Optional Opaque token from a previous response's result_info.cursor. Pass this value to fetch the next page of results. Omit (or pass an empty string) for the first page. maxLength: 256
query.per_page integer Optional Number of items to return per page. default: 20; minimum: 1; maximum: 50
query.direction string Optional Sort direction for results. Defaults to ascending order. enum: ["asc","desc"]; default: "asc"
query.sort_by string Optional Column to sort results by. Defaults to registration date (registry_created_at) when omitted. enum: ["registry_created_at","registry_expires_at","name"]; default: "registry_created_at"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Registration — cloudflare.sandbox-registrar-domain-registration-create

Run Create Registration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. Required for all Registrar API operations. $ref: "#/definitions/registrar-api-sandbox_identifier"
headers object Optional additionalProperties: false
headers.Prefer string Optional Set to respond-async to receive an immediate 202 Accepted without waiting for the operation to complete (RFC 7240). The header may be combined with other preferences using standard comma-separated syntax.
body — Required $ref: "#/definitions/registrar-api-sandbox_registration_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "domain_name": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Registration — cloudflare.sandbox-registrar-domain-registration-get

Run Get Registration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. $ref: "#/definitions/registrar-api-sandbox_identifier"
path.domain_name — Required Domain name to retrieve. $ref: "#/definitions/registrar-api-sandbox_domain_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_name": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Registration Status — cloudflare.sandbox-registrar-domain-registration-get-status

Run Get Registration Status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. Required for all Registrar API operations. $ref: "#/definitions/registrar-api-sandbox_identifier"
path.domain_name — Required $ref: "#/definitions/registrar-api-sandbox_domain_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_name": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Update Status — cloudflare.sandbox-registrar-domain-registration-get-update-status

Run Get Update Status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. $ref: "#/definitions/registrar-api-sandbox_identifier"
path.domain_name — Required $ref: "#/definitions/registrar-api-sandbox_domain_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_name": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check domain availability — cloudflare.registrar-domain-discovery-check

Run Check domain availability with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. Required for all Registrar API operations. $ref: "#/definitions/registrar-api_identifier"
body — Required $ref: "#/definitions/registrar-api_domain_check_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "domains": [
      "example.com",
      "example.net"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check domain transfer eligibility — cloudflare.registrar-domain-discovery-transfer-check

Run Check domain transfer eligibility with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. Required for all Registrar API operations. $ref: "#/definitions/registrar-api_identifier"
body — Required $ref: "#/definitions/registrar-api_domain_transfer_check_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "domains": [
      {
        "domain_name": "example.com"
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List extensions — cloudflare.registrar-extension-list

Run List extensions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/registrar-api_identifier"
query object Optional additionalProperties: false
query.name string Optional Filter extensions by exact name match. For example, name=com returns only the com extension.
query.cursor string Optional Opaque token from a previous response's result_info.cursor. Pass this value to fetch the next page of results. Omit (or pass an empty string) for the first page. maxLength: 256
query.per_page integer Optional Number of items to return per page. default: 20; minimum: 1; maximum: 50
query.direction string Optional Sort direction for results. Defaults to ascending order. enum: ["asc","desc"]; default: "asc"
query.sort_by string Optional Column to sort results by. Defaults to name when omitted. enum: ["name","created_at","updated_at"]; default: "name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get extension — cloudflare.registrar-extension-get

Run Get extension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/registrar-api_identifier"
path.extension string Required The extension name (e.g., com, co.uk).

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "extension": "com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Registrations — cloudflare.registrar-domain-registration-list

Run List Registrations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. $ref: "#/definitions/registrar-api_identifier"
query object Optional additionalProperties: false
query.cursor string Optional Opaque token from a previous response's result_info.cursor. Pass this value to fetch the next page of results. Omit (or pass an empty string) for the first page. maxLength: 256
query.per_page integer Optional Number of items to return per page. default: 20; minimum: 1; maximum: 50
query.direction string Optional Sort direction for results. Defaults to ascending order. enum: ["asc","desc"]; default: "asc"
query.sort_by string Optional Column to sort results by. Defaults to registration date (registry_created_at) when omitted. enum: ["registry_created_at","registry_expires_at","name"]; default: "registry_created_at"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Registration — cloudflare.registrar-domain-registration-create

Run Create Registration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. Required for all Registrar API operations. $ref: "#/definitions/registrar-api_identifier"
headers object Optional additionalProperties: false
headers.Prefer string Optional Set to respond-async to receive an immediate 202 Accepted without waiting for the operation to complete (RFC 7240). The header may be combined with other preferences using standard comma-separated syntax.
body — Required $ref: "#/definitions/registrar-api_registration_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "domain_name": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Registration — cloudflare.registrar-domain-registration-get

Run Get Registration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. $ref: "#/definitions/registrar-api_identifier"
path.domain_name — Required Domain name to retrieve. $ref: "#/definitions/registrar-api_domain_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_name": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Registration Status — cloudflare.registrar-domain-registration-get-status

Run Get Registration Status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. Required for all Registrar API operations. $ref: "#/definitions/registrar-api_identifier"
path.domain_name — Required $ref: "#/definitions/registrar-api_domain_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_name": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Initiate Transfer — cloudflare.registrar-domain-transfer-in-create

Run Initiate Transfer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. Required for all Registrar API operations. $ref: "#/definitions/registrar-api_identifier"
path.domain_name — Required Domain name to transfer. $ref: "#/definitions/registrar-api_domain_name"
headers object Optional additionalProperties: false
headers.Prefer string Optional Set to respond-async to indicate a preference for asynchronous processing (RFC 7240).
body — Required $ref: "#/definitions/registrar-api_transfer_in_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_name": "example.com"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Transfer Status — cloudflare.registrar-domain-transfer-get-status

Run Get Transfer Status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. Required for all Registrar API operations. $ref: "#/definitions/registrar-api_identifier"
path.domain_name — Required $ref: "#/definitions/registrar-api_domain_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_name": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Update Status — cloudflare.registrar-domain-registration-get-update-status

Run Get Update Status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Cloudflare account ID. $ref: "#/definitions/registrar-api_identifier"
path.domain_name — Required $ref: "#/definitions/registrar-api_domain_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_name": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an account industry — cloudflare.reporting-industry-get

Run Get an account industry with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare public account ID (32-character hexadecimal string) minLength: 32; maxLength: 32; pattern: "^[a-f0-9]{32}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an account industry — cloudflare.reporting-industry-update

Run Update an account industry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare public account ID (32-character hexadecimal string) minLength: 32; maxLength: 32; pattern: "^[a-f0-9]{32}$"
body — Optional $ref: "#/definitions/reports_PatchAccountIndustryBody"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List reporting policies — cloudflare.reporting-policies-list

Run List reporting policies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare public account ID (32-character hexadecimal string) minLength: 32; maxLength: 32; pattern: "^[a-f0-9]{32}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a reporting policy — cloudflare.reporting-policies-get

Run Get a reporting policy with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id string Required Unique identifier for the policy (UUID format) format: "uuid"
path.account_id string Required Cloudflare public account ID (32-character hexadecimal string) minLength: 32; maxLength: 32; pattern: "^[a-f0-9]{32}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List generated reports — cloudflare.reporting-reports-list

Run List generated reports with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare public account ID (32-character hexadecimal string) minLength: 32; maxLength: 32; pattern: "^[a-f0-9]{32}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a generated report — cloudflare.reporting-reports-get

Run Get a generated report with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Cloudflare public account ID (32-character hexadecimal string) minLength: 32; maxLength: 32; pattern: "^[a-f0-9]{32}$"
path.report_id string Required Unique report identifier format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "report_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Request Trace — cloudflare.account-request-tracer-request-trace

Run Request Trace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/request-tracer_account_identifier"
body object Required
body.body object Optional
body.body.base64 string Optional Base64 encoded request body
body.body.json object Optional Arbitrary json as request body
body.body.plain_text string Optional Request body as plain text
body.context object Optional Additional request parameters
body.context.bot_score integer Optional Bot score used for evaluating tracing request processing
body.context.geoloc object Optional Geodata for tracing request
body.context.geoloc.city string Optional
body.context.geoloc.continent string Optional
body.context.geoloc.is_eu_country boolean Optional
body.context.geoloc.iso_code string Optional
body.context.geoloc.latitude number Optional
body.context.geoloc.longitude number Optional
body.context.geoloc.postal_code string Optional
body.context.geoloc.region_code string Optional
body.context.geoloc.subdivision_2_iso_code string Optional
body.context.geoloc.timezone string Optional
body.context.skip_challenge boolean Optional Whether to skip any challenges for tracing request (e.g.: captcha)
body.context.threat_score integer Optional Threat score used for evaluating tracing request processing
body.cookies object Optional Cookies added to tracing request additionalProperties: {"type":"string"}
body.headers object Optional Headers added to tracing request additionalProperties: {"type":"string"}
body.method string Required HTTP Method of tracing request
body.protocol string Optional HTTP Protocol of tracing request
body.skip_response boolean Optional Skip sending the request to the Origin server after all rules evaluation
body.url string Required URL to which perform tracing request

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "body": {
      "base64": "c29tZV9yZXF1ZXN0X2JvZHk="
    },
    "context": {
      "geoloc": {
        "city": "London"
      },
      "skip_challenge": true
    },
    "cookies": {
      "cookie_name_1": "cookie_value_1",
      "cookie_name_2": "cookie_value_2"
    },
    "headers": {
      "header_name_1": "header_value_1",
      "header_name_2": "header_value_2"
    },
    "method": "PUT",
    "protocol": "HTTP/1.1",
    "url": "https://some.zone/some_path"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List applications — cloudflare.getresourcelibraryapplications

Run List applications with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.filter string Optional Filter applications using key:value format. Supported filter keys: - name: application name (for example, name:HR). - id: application ID (for example, id:498). - human_id: human-readable ID (for example, human_id:HR). - hostname: hostname or support domain (for example, hostname:portal.example.com). - source: application source name (for example, source:cloudflare). - ip_subnet: CIDR containment; returns applications where a stored subnet contains the search value (for example, ip_subnet:10.0.1.5/32 matches 10.0.0.0/16). - category_id: category ID (for example, category_id:12). - category_name: category name (for example, category_name:HR). - supported: supported Cloudflare product. Values: GATEWAY, ACCESS, CASB. - review_status: account-specific Gateway review status. Values: approved, unapproved, in_review, unreviewed.
query.limit integer Optional Number of results to return. Defaults to 25; values are clamped to 1–250. default: 25
query.offset integer Optional Number of results to skip. Defaults to 0; negative values are clamped to 0. Ignored when cursor is provided. default: 0
query.cursor string Optional Opaque value from result_info.cursor of the previous response. Returns the results that follow it. Send the same filter, search, lookup, and order_by values as the request that returned it; limit and fields may change. An empty value is the same as no cursor. A modified cursor, or one used with different values, returns 400.
query.order_by string Optional Order results using field:direction format. Supported fields are name, id, human_id, category_id, application_type, application_confidence_score, and gen_ai_score. Supported directions are asc and desc. Ignored when search is provided; results are ranked by relevance instead. Also ignored when lookup is provided.
query.search string Optional Fuzzy search across application name and hostnames. Results are ranked by relevance. Must be between 2 and 200 characters. Can be combined with filter parameters. minLength: 2; maxLength: 200
query.lookup string Optional Find complete, case-insensitive application name mentions in a phrase or rule sentence. Misspelled names do not match. Returns matching applications ranked by relevance. Must be between 2 and 1000 characters, with no control characters other than tab and line breaks. Uses the same filters, fields, and pagination as listing. search cannot be combined with lookup. Results are ranked by relevance, so order_by is ignored. To keep the text out of URLs, send it to POST .../applications/lookup instead. minLength: 2; maxLength: 1000
query.fields string Optional Return only the listed properties on each application, as a comma-separated list. Use this to keep responses small when you only need part of each application, for example populating a picker with fields=id,name instead of downloading every hostname and IP subnet. Omit this parameter to receive the full application object, including when lookup is used. id is always returned. Selectable properties: id, name, human_id, version, hostnames, support_domains, ip_subnets, port_protocols, supported, gen_ai_score, application_confidence_score, created_at, updated_at, review_status. Unknown or empty property names return 400.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create application — cloudflare.createresourcelibraryapplication

Run Create application with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body — Required $ref: "#/definitions/alexandria_create_application_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "HR",
    "human_id": "HR",
    "category_id": 12,
    "hostnames": [
      "example.com",
      "foo.com"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Look up applications in a rule sentence — cloudflare.lookupresourcelibraryapplications

Run Look up applications in a rule sentence with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.filter string Optional Filter matches using the same key:value filters as the list endpoint.
query.limit integer Optional Maximum number of matches to return. Defaults to 25; values are clamped to 1–250. default: 25
query.fields string Optional Return only the listed properties on each application, as a comma-separated list. Accepts the same properties as the list endpoint. id is always returned. Omit this parameter to receive the full application object.
body — Required $ref: "#/definitions/alexandria_lookup_applications_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "lookup": "block access to Google Chat"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete application — cloudflare.deleteresourcelibraryapplication

Run Delete application with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.id — Required Application ID. $ref: "#/definitions/alexandria_application_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": 498
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get application — cloudflare.getresourcelibraryapplicationbyid

Run Get application with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.id — Required Application ID. $ref: "#/definitions/alexandria_application_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": 498
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update application — cloudflare.updateresourcelibraryapplication

Run Update application with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.id — Required Application ID. $ref: "#/definitions/alexandria_application_id"
body — Required $ref: "#/definitions/alexandria_update_application_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": 498
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List application categories — cloudflare.getresourcelibrarycategories

Run List application categories with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.limit integer Optional Number of results to return. Defaults to 25; values are clamped to 1–250. default: 25
query.offset integer Optional Number of results to skip. Defaults to 0; negative values are clamped to 0. Ignored when cursor is provided. default: 0
query.cursor string Optional Opaque value from result_info.cursor of the previous response. Returns the categories that follow it. limit may change between requests. An empty value is the same as no cursor. A modified cursor, or one returned by a different list, returns 400.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get application category — cloudflare.getresourcelibrarycategorybyid

Run Get application category with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
path.id — Required Application category ID. $ref: "#/definitions/alexandria_category_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": 12
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get lists — cloudflare.lists-get-lists

Run Get lists with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/lists_account_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a list — cloudflare.lists-create-a-list

Run Create a list with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/lists_account_id"
body object Required
body.description — Optional $ref: "#/definitions/lists_description"
body.kind — Required $ref: "#/definitions/lists_kind"
body.name — Required $ref: "#/definitions/lists_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "list1",
    "kind": "ip"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get bulk operation status — cloudflare.lists-get-bulk-operation-status

Run Get bulk operation status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.operation_id — Required $ref: "#/definitions/lists_operation_id"
path.account_id — Required $ref: "#/definitions/lists_account_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "operation_id": "4da8780eeb215e6cb7f48dd981c4ea02",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a list — cloudflare.lists-delete-a-list

Run Delete a list with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/lists_list_id"
path.account_id — Required $ref: "#/definitions/lists_account_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "2c0fc9fa937b11eaa1b71c4d701ab86e",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a list — cloudflare.lists-get-a-list

Run Get a list with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/lists_list_id"
path.account_id — Required $ref: "#/definitions/lists_account_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "2c0fc9fa937b11eaa1b71c4d701ab86e",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a list — cloudflare.lists-update-a-list

Run Update a list with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/lists_list_id"
path.account_id — Required $ref: "#/definitions/lists_account_id"
body object Required
body.description — Optional $ref: "#/definitions/lists_description"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "2c0fc9fa937b11eaa1b71c4d701ab86e",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete list items — cloudflare.lists-delete-list-items

Run Delete list items with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/lists_list_id"
path.account_id — Required $ref: "#/definitions/lists_account_id"
body object Required
body.items array Optional The list items to delete, identified by their unique IDs. minItems: 1
body.items[] object Optional
body.items[].id string Required Defines the unique ID of the item in the List. minLength: 32; maxLength: 32

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "2c0fc9fa937b11eaa1b71c4d701ab86e",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get list items — cloudflare.lists-get-list-items

Run Get list items with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/lists_list_id"
path.account_id — Required $ref: "#/definitions/lists_account_id"
query object Optional additionalProperties: false
query.cursor string Optional The pagination cursor. An opaque string token that indicates where to continue when requesting the next/previous set of records. The response provides cursor values under result_info.cursors. You should make no assumptions about a cursor's content or length.
query.per_page integer Optional Amount of results to include in each paginated response. A non-negative 32 bit integer. minimum: 1; maximum: 500
query.search string Optional A search query to filter returned items. Its meaning depends on the list type: IP addresses must start with the provided string, hostnames and bulk redirects must contain the string, and ASNs must match the string exactly.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "2c0fc9fa937b11eaa1b71c4d701ab86e",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create list items — cloudflare.lists-create-list-items

Run Create list items with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/lists_list_id"
path.account_id — Required $ref: "#/definitions/lists_account_id"
body — Required $ref: "#/definitions/lists_items-update-request-collection"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "2c0fc9fa937b11eaa1b71c4d701ab86e",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update all list items — cloudflare.lists-update-all-list-items

Run Update all list items with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.list_id — Required $ref: "#/definitions/lists_list_id"
path.account_id — Required $ref: "#/definitions/lists_account_id"
body — Required $ref: "#/definitions/lists_items-update-request-collection"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "list_id": "2c0fc9fa937b11eaa1b71c4d701ab86e",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a list item — cloudflare.lists-get-a-list-item

Run Get a list item with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.item_id — Required $ref: "#/definitions/lists_item_id"
path.list_id — Required $ref: "#/definitions/lists_list_id"
path.account_id — Required $ref: "#/definitions/lists_account_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "item_id": "34b12448945f11eaa1b71c4d701ab86e",
    "list_id": "2c0fc9fa937b11eaa1b71c4d701ab86e",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List account rulesets — cloudflare.listaccountrulesets

Run List account rulesets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"
query object Optional additionalProperties: false
query.cursor — Optional $ref: "#/definitions/rulesets_Cursor"
query.per_page — Optional $ref: "#/definitions/rulesets_PerPage"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an account ruleset — cloudflare.createaccountruleset

Run Create an account ruleset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false
body — Required
body — Required allOf[1]; $ref: "#/definitions/rulesets_Ruleset"
body object Required allOf[2]
body.kind — Required allOf[2]; $ref: "#/definitions/rulesets_RulesetKind"
body.phase — Required allOf[2]; $ref: "#/definitions/rulesets_RulesetPhase"
body.rules — Optional allOf[2]; $ref: "#/definitions/rulesets_RequestRules"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  },
  "body": {
    "name": "example",
    "kind": "root",
    "phase": "http_request_firewall_custom",
    "id": "2f2feab2026849078ba485f918791bdc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an account entry point ruleset — cloudflare.getaccountentrypointruleset

Run Get an account entry point ruleset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_phase — Required $ref: "#/definitions/rulesets_RulesetPhase"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_phase": "http_request_firewall_custom",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an account entry point ruleset — cloudflare.updateaccountentrypointruleset

Run Update an account entry point ruleset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_phase — Required $ref: "#/definitions/rulesets_RulesetPhase"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false
body — Required
body — Required allOf[1]; $ref: "#/definitions/rulesets_Ruleset"
body object Required allOf[2]
body.rules — Optional allOf[2]; $ref: "#/definitions/rulesets_RequestRules"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_phase": "http_request_firewall_custom",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  },
  "body": {
    "id": "2f2feab2026849078ba485f918791bdc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List an account entry point ruleset's versions — cloudflare.listaccountentrypointrulesetversions

Run List an account entry point ruleset's versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_phase — Required $ref: "#/definitions/rulesets_RulesetPhase"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_phase": "http_request_firewall_custom",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an account entry point ruleset version — cloudflare.getaccountentrypointrulesetversion

Run Get an account entry point ruleset version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_version — Required $ref: "#/definitions/rulesets_RulesetVersion"
path.ruleset_phase — Required $ref: "#/definitions/rulesets_RulesetPhase"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_version": "1",
    "ruleset_phase": "http_request_firewall_custom",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an account ruleset — cloudflare.deleteaccountruleset

Run Delete an account ruleset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an account ruleset — cloudflare.getaccountruleset

Run Get an account ruleset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an account ruleset — cloudflare.updateaccountruleset

Run Update an account ruleset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false
body — Required
body — Required allOf[1]; $ref: "#/definitions/rulesets_Ruleset"
body object Required allOf[2]
body.kind — Optional allOf[2]; $ref: "#/definitions/rulesets_RulesetKind"
body.phase — Optional allOf[2]; $ref: "#/definitions/rulesets_RulesetPhase"
body.rules — Optional allOf[2]; $ref: "#/definitions/rulesets_RequestRules"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  },
  "body": {
    "id": "2f2feab2026849078ba485f918791bdc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an account ruleset rule — cloudflare.deleteaccountrulesetrule

Run Delete an account ruleset rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/rulesets_RuleId"
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "3a03d665bac047339bb530ecb439a90d",
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List an account ruleset's versions — cloudflare.listaccountrulesetversions

Run List an account ruleset's versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an account ruleset version — cloudflare.deleteaccountrulesetversion

Run Delete an account ruleset version with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_version — Required $ref: "#/definitions/rulesets_RulesetVersion"
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_version": "1",
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an account ruleset version — cloudflare.getaccountrulesetversion

Run Get an account ruleset version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_version — Required $ref: "#/definitions/rulesets_RulesetVersion"
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_version": "1",
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List an account ruleset version's rules by tag — cloudflare.listaccountrulesetversionrulesbytag

Run List an account ruleset version's rules by tag with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_tag — Required $ref: "#/definitions/rulesets_RuleCategory"
path.ruleset_version — Required $ref: "#/definitions/rulesets_RulesetVersion"
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.account_id — Required $ref: "#/definitions/rulesets_AccountId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_tag": "directory-traversal",
    "ruleset_version": "1",
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "account_id": "abf9b32d38c5f572afde3336ec0ce302"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Web Analytics site — cloudflare.web-analytics-create-site

Run Create a Web Analytics site with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
body — Required $ref: "#/definitions/rum_create-site-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Web Analytics sites — cloudflare.web-analytics-list-sites

Run List Web Analytics sites with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
query object Optional additionalProperties: false
query.per_page — Optional $ref: "#/definitions/rum_per_page"
query.page — Optional $ref: "#/definitions/rum_page"
query.order_by — Optional $ref: "#/definitions/rum_order_by"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Web Analytics site tags — cloudflare.web-analytics-list-site-tags

Run List Web Analytics site tags with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
query object Optional additionalProperties: false
query.all boolean Optional When true, includes sites that are disabled or paused.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate a Web Analytics site hostname — cloudflare.web-analytics-validate-site-hostname

Run Validate a Web Analytics site hostname with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
path.hostname string Required The hostname to validate (e.g. example.com). The pattern below validates the hostname's structure (label syntax) only. In addition, the hostname must end in a valid public suffix (TLD). For the list of valid suffixes and how it is used, see the Public Suffix List: https://wiki.mozilla.org/Public_Suffix_List/Use_Cases maxLength: 253; pattern: "^(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\\-]*[a-zA-Z0-9]?)\\.){1,}([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\\-]*[A-Za-z0-9]?){2,}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "hostname": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Web Analytics zone tags — cloudflare.web-analytics-list-zone-tags

Run List Web Analytics zone tags with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Web Analytics site — cloudflare.web-analytics-delete-site

Run Delete a Web Analytics site with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
path.site_id — Required $ref: "#/definitions/rum_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Web Analytics site — cloudflare.web-analytics-get-site

Run Get a Web Analytics site with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
path.site_id — Required $ref: "#/definitions/rum_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Web Analytics site — cloudflare.web-analytics-update-site

Run Update a Web Analytics site with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
path.site_id — Required $ref: "#/definitions/rum_identifier"
body — Required $ref: "#/definitions/rum_update-site-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "site_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Web Analytics rule — cloudflare.web-analytics-create-rule

Run Create a Web Analytics rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
path.ruleset_id — Required $ref: "#/definitions/rum_ruleset_identifier"
body — Required $ref: "#/definitions/rum_create-rule-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "ruleset_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Web Analytics rule — cloudflare.web-analytics-delete-rule

Run Delete a Web Analytics rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
path.ruleset_id — Required $ref: "#/definitions/rum_ruleset_identifier"
path.rule_id — Required $ref: "#/definitions/rum_rule_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "ruleset_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Web Analytics rule — cloudflare.web-analytics-update-rule

Run Update a Web Analytics rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
path.ruleset_id — Required $ref: "#/definitions/rum_ruleset_identifier"
path.rule_id — Required $ref: "#/definitions/rum_rule_identifier"
body — Required $ref: "#/definitions/rum_create-rule-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "ruleset_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "rule_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List rules in Web Analytics ruleset — cloudflare.web-analytics-list-rules

Run List rules in Web Analytics ruleset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
path.ruleset_id — Required $ref: "#/definitions/rum_ruleset_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "ruleset_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Web Analytics rules — cloudflare.web-analytics-modify-rules

Run Update Web Analytics rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/rum_identifier"
path.ruleset_id — Required $ref: "#/definitions/rum_ruleset_identifier"
body — Required $ref: "#/definitions/rum_modify-rules-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "ruleset_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List SCIM Groups — cloudflare.scim-groups-list

Run List SCIM Groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
query object Optional additionalProperties: false
query.startIndex integer Optional The 1-based index of the first result in the current set of list results. Values less than 1 are treated as 1. default: 1; minimum: 1
query.count integer Optional Specifies the desired maximum number of query results per page. minimum: 0
query.filter string Optional SCIM filter expression (RFC 7644 Section 3.4.2.2). Only displayName eq "value" is supported.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create SCIM Group — cloudflare.scim-groups-create

Run Create SCIM Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
body — Required $ref: "#/definitions/iam_scim_group_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "displayName": "My IdP Group"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete SCIM Group — cloudflare.scim-groups-delete

Run Delete SCIM Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.group_id — Required $ref: "#/definitions/iam_scim_group_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "group_id": "cloudflare-v1-023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get SCIM Group — cloudflare.scim-groups-get

Run Get SCIM Group with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.group_id — Required $ref: "#/definitions/iam_scim_group_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "group_id": "cloudflare-v1-023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch SCIM Group — cloudflare.scim-groups-patch

Run Patch SCIM Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.group_id — Required $ref: "#/definitions/iam_scim_group_identifier"
body — Required $ref: "#/definitions/iam_scim_group_patch_op_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "group_id": "cloudflare-v1-023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "schemas": [
      "urn:ietf:params:scim:api:messages:2.0:PatchOp"
    ],
    "Operations": [
      {
        "op": "add",
        "path": "members",
        "value": [
          {
            "value": "023e105f4ecef8ad9ca31a8372d0c353"
          }
        ]
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace SCIM Group — cloudflare.scim-groups-put

Run Replace SCIM Group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.group_id — Required $ref: "#/definitions/iam_scim_group_identifier"
body — Required $ref: "#/definitions/iam_scim_group_replace_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "group_id": "cloudflare-v1-023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "schemas": [
      "urn:ietf:params:scim:schemas:core:2.0:Group"
    ],
    "displayName": "My IdP Group"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List SCIM Resource Types — cloudflare.scim-resource-types-list

Run List SCIM Resource Types with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get SCIM Resource Type — cloudflare.scim-resource-types-get

Run Get SCIM Resource Type with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.resource_type_id string Required The resource type identifier. enum: ["User","Group"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "resource_type_id": "User"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List SCIM Schemas — cloudflare.scim-schemas-list

Run List SCIM Schemas with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get SCIM Schema — cloudflare.scim-schemas-get

Run Get SCIM Schema with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.schema_id string Required The schema URI identifier.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "schema_id": "urn:ietf:params:scim:schemas:core:2.0:User"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get SCIM Service Provider Config — cloudflare.scim-service-provider-config-get

Run Get SCIM Service Provider Config with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List SCIM Users — cloudflare.scim-users-list

Run List SCIM Users with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
query object Optional additionalProperties: false
query.startIndex integer Optional The 1-based index of the first result in the current set of list results. Values less than 1 are treated as 1. default: 1; minimum: 1
query.count integer Optional Specifies the desired maximum number of query results per page. minimum: 0
query.filter string Optional SCIM filter expression (RFC 7644 Section 3.4.2.2). Only userName eq "value" is supported.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create SCIM User — cloudflare.scim-users-create

Run Create SCIM User with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
body — Required $ref: "#/definitions/iam_scim_user_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "schemas": [
      "urn:ietf:params:scim:schemas:core:2.0:User"
    ],
    "userName": "user@example.com",
    "emails": [],
    "active": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete SCIM User — cloudflare.scim-users-delete

Run Delete SCIM User with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_id — Required $ref: "#/definitions/iam_scim_user_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get SCIM User — cloudflare.scim-users-get

Run Get SCIM User with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_id — Required $ref: "#/definitions/iam_scim_user_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch SCIM User — cloudflare.scim-users-patch

Run Patch SCIM User with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_id — Required $ref: "#/definitions/iam_scim_user_identifier"
body — Required $ref: "#/definitions/iam_scim_patch_op_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "schemas": [
      "urn:ietf:params:scim:api:messages:2.0:PatchOp"
    ],
    "Operations": [
      {
        "op": "replace",
        "value": {
          "active": false
        }
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace SCIM User — cloudflare.scim-users-put

Run Replace SCIM User with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.user_id — Required $ref: "#/definitions/iam_scim_user_identifier"
body — Required $ref: "#/definitions/iam_scim_user_replace_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "user_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "schemas": [
      "urn:ietf:params:scim:schemas:core:2.0:User"
    ],
    "userName": "user@example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List ACLs — cloudflare.secondary-dns---acl--list-ac-ls

Run List ACLs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create ACL — cloudflare.secondary-dns---acl--create-acl

Run Create ACL with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"
body object Required
body.ip_range — Required $ref: "#/definitions/secondary-dns_ip_range"
body.name — Required $ref: "#/definitions/secondary-dns_name-4"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "body": {
    "name": "my-acl-1",
    "ip_range": "192.0.2.53/28"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete ACL — cloudflare.secondary-dns---acl--delete-acl

Run Delete ACL with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.acl_id — Required $ref: "#/definitions/secondary-dns_identifier-3"
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "acl_id": "23ff594956f20c2a721606e94745a8aa",
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

ACL Details — cloudflare.secondary-dns---acl--acl-details

Run ACL Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.acl_id — Required $ref: "#/definitions/secondary-dns_identifier-3"
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "acl_id": "23ff594956f20c2a721606e94745a8aa",
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update ACL — cloudflare.secondary-dns---acl--update-acl

Run Update ACL with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.acl_id — Required $ref: "#/definitions/secondary-dns_identifier-3"
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"
body — Required $ref: "#/definitions/secondary-dns_acl"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "acl_id": "23ff594956f20c2a721606e94745a8aa",
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "body": {
    "id": "23ff594956f20c2a721606e94745a8aa",
    "name": "my-acl-1",
    "ip_range": "192.0.2.53/28"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Peers — cloudflare.secondary-dns---peer--list-peers

Run List Peers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Peer — cloudflare.secondary-dns---peer--create-peer

Run Create Peer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"
body object Required
body.name — Required $ref: "#/definitions/secondary-dns_name-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "body": {
    "name": "my-peer-1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Peer — cloudflare.secondary-dns---peer--delete-peer

Run Delete Peer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.peer_id — Required $ref: "#/definitions/secondary-dns_identifier-3"
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "peer_id": "23ff594956f20c2a721606e94745a8aa",
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Peer Details — cloudflare.secondary-dns---peer--peer-details

Run Peer Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.peer_id — Required $ref: "#/definitions/secondary-dns_identifier-3"
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "peer_id": "23ff594956f20c2a721606e94745a8aa",
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Peer — cloudflare.secondary-dns---peer--update-peer

Run Update Peer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.peer_id — Required $ref: "#/definitions/secondary-dns_identifier-3"
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"
body — Required $ref: "#/definitions/secondary-dns_peer"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "peer_id": "23ff594956f20c2a721606e94745a8aa",
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "body": {
    "id": "23ff594956f20c2a721606e94745a8aa",
    "name": "my-peer-1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List TSIGs — cloudflare.secondary-dns---tsig--list-tsi-gs

Run List TSIGs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create TSIG — cloudflare.secondary-dns---tsig--create-tsig

Run Create TSIG with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"
body — Required $ref: "#/definitions/secondary-dns_tsig"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "body": {
    "id": "69cd1e104af3e6ed3cb344f263fd0d5a",
    "name": "tsig.customer.cf.",
    "secret": "caf79a7804b04337c9c66ccd7bef9190a1e1679b5dd03d8aa10f7ad45e1a9dab92b417896c15d4d007c7c14194538d2a5d0feffdecc5a7f0e1c570cfa700837c",
    "algo": "hmac-sha512."
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete TSIG — cloudflare.secondary-dns---tsig--delete-tsig

Run Delete TSIG with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.tsig_id — Required $ref: "#/definitions/secondary-dns_identifier-2"
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "tsig_id": "69cd1e104af3e6ed3cb344f263fd0d5a",
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

TSIG Details — cloudflare.secondary-dns---tsig--tsig-details

Run TSIG Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.tsig_id — Required $ref: "#/definitions/secondary-dns_identifier-2"
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "tsig_id": "69cd1e104af3e6ed3cb344f263fd0d5a",
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update TSIG — cloudflare.secondary-dns---tsig--update-tsig

Run Update TSIG with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.tsig_id — Required $ref: "#/definitions/secondary-dns_identifier-2"
path.account_id — Required $ref: "#/definitions/secondary-dns_account_identifier"
body — Required $ref: "#/definitions/secondary-dns_tsig"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "tsig_id": "69cd1e104af3e6ed3cb344f263fd0d5a",
    "account_id": "01a7362d577a6c3019a474fd6f485823"
  },
  "body": {
    "id": "69cd1e104af3e6ed3cb344f263fd0d5a",
    "name": "tsig.customer.cf.",
    "secret": "caf79a7804b04337c9c66ccd7bef9190a1e1679b5dd03d8aa10f7ad45e1a9dab92b417896c15d4d007c7c14194538d2a5d0feffdecc5a7f0e1c570cfa700837c",
    "algo": "hmac-sha512."
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

View secret usage — cloudflare.secrets-store-quota

Run View secret usage with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List account stores — cloudflare.secrets-store-list

Run List account stores with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32
query object Optional additionalProperties: false
query.direction string Optional Direction to sort objects. enum: ["asc","desc"]; default: "desc"
query.page integer Optional Page number. minimum: 0; multipleOf: 1
query.per_page integer Optional Number of objects to return per page. minimum: 0; maximum: 100; multipleOf: 1
query.order string Optional Order stores by values in the given field. enum: ["name","created","modified"]; default: "created"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a store — cloudflare.secrets-store-create

Run Create a store with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32
body — Required $ref: "#/definitions/secrets-store_createStoreObject"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "service_x_keys"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a store — cloudflare.secrets-store-delete-by-id

Run Delete a store with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32
path.store_id string Required Store identifier. maxLength: 32
query object Optional additionalProperties: false
query.force boolean Optional When true, cascade-deletes all secrets in the store before deleting the store itself. Required when deleting a non-empty store. Without this parameter, attempting to delete a non-empty store returns 409. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353",
    "store_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a store by ID — cloudflare.secrets-store-get-store-by-id

Run Get a store by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32
path.store_id string Required Store identifier. maxLength: 32

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353",
    "store_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete secrets — cloudflare.secrets-store-delete-bulk

Run Delete secrets with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32
path.store_id string Required Store identifier. maxLength: 32
body — Required $ref: "#/definitions/secrets-store_deleteSecretsRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353",
    "store_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "ids": [
      "3fd85f74b32742f1bff64a85009dda07"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List store secrets — cloudflare.secrets-store-secrets-list

Run List store secrets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32
path.store_id string Required Store identifier. maxLength: 32
query object Optional additionalProperties: false
query.direction string Optional Direction to sort objects. enum: ["asc","desc"]; default: "desc"
query.page integer Optional Page number. minimum: 0; multipleOf: 1
query.per_page integer Optional Number of objects to return per page. minimum: 0; maximum: 100; multipleOf: 1
query.search string Optional Search secrets using a filter string, filtering across name and comment.
query.order string Optional Order secrets by values in the given field. enum: ["name","comment","created","modified","status"]; default: "created"
query.scopes array Optional Only secrets with the given scopes will be returned.
query.scopes[] string Optional enum: ["workers","ai_gateway","dex","access","containers","websearch"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353",
    "store_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a secret — cloudflare.secrets-store-secret-create

Run Create a secret with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32
path.store_id string Required Store identifier. maxLength: 32
body array Required
body[] — Optional $ref: "#/definitions/secrets-store_createSecretObject"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353",
    "store_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a secret — cloudflare.secrets-store-secret-delete-by-id

Run Delete a secret with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32
path.store_id string Required Store identifier. maxLength: 32
path.secret_id string Required Secret identifier. maxLength: 32

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353",
    "store_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "secret_id": "3fd85f74b32742f1bff64a85009dda07"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a secret by ID — cloudflare.secrets-store-get-by-id

Run Get a secret by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32
path.store_id string Required Store identifier. maxLength: 32
path.secret_id string Required Secret identifier. maxLength: 32

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353",
    "store_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "secret_id": "3fd85f74b32742f1bff64a85009dda07"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch a secret — cloudflare.secrets-store-patch-by-id

Run Patch a secret with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32
path.store_id string Required Store identifier. maxLength: 32
path.secret_id string Required Secret identifier. maxLength: 32
body — Required $ref: "#/definitions/secrets-store_patchSecretObject"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353",
    "store_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "secret_id": "3fd85f74b32742f1bff64a85009dda07"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Duplicate Secret — cloudflare.secrets-store-duplicate-by-id

Run Duplicate Secret with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account identifier. maxLength: 32
path.store_id string Required Store identifier. maxLength: 32
path.secret_id string Required Secret identifier. maxLength: 32
body — Required $ref: "#/definitions/secrets-store_duplicateSecretObject"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "985e105f4ecef8ad9ca31a8372d0c353",
    "store_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "secret_id": "3fd85f74b32742f1bff64a85009dda07"
  },
  "body": {
    "name": "MY_API_KEY"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Security Center Insights — cloudflare.get-security-center-insights

Run Retrieves Security Center Insights with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
query object Optional additionalProperties: false
query.dismissed — Optional $ref: "#/definitions/security-center_dismissed"
query.issue_class — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type — Optional $ref: "#/definitions/security-center_issueTypes"
query.product — Optional $ref: "#/definitions/security-center_products"
query.source — Optional $ref: "#/definitions/security-center_sources"
query.severity — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject — Optional $ref: "#/definitions/security-center_subjects"
query.issue_class~neq — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type~neq — Optional $ref: "#/definitions/security-center_issueTypes"
query.product~neq — Optional $ref: "#/definitions/security-center_products"
query.severity~neq — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject~neq — Optional $ref: "#/definitions/security-center_subjects"
query.page — Optional default: 1
query.page — Optional allOf[1]; $ref: "#/definitions/security-center_page"
query.per_page — Optional default: 25
query.per_page — Optional allOf[1]; $ref: "#/definitions/security-center_perPage"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Account Audit Log — cloudflare.get-security-center-account-audit-log

Run Retrieves Account Audit Log with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
query object Optional additionalProperties: false
query.per_page integer Optional Number of results per page. default: 25; minimum: 1; maximum: 1000
query.cursor string Optional Opaque cursor for pagination. Use the cursor value from result_info of the previous response.
query.field_changed string Optional Filter by the field that was changed. enum: ["status","user_classification"]
query.changed_by string Optional Filter by the actor that made the change.
query.since string Optional Filter entries changed at or after this timestamp (RFC 3339). format: "date-time"
query.before string Optional Filter entries changed before this timestamp (RFC 3339). format: "date-time"
query.order string Optional Sort order for results. Use 'asc' for oldest first or 'desc' for newest first. enum: ["asc","desc"]; default: "desc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Security Center Insight Counts by Class — cloudflare.get-security-center-insight-counts-by-class

Run Retrieves Security Center Insight Counts by Class with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
query object Optional additionalProperties: false
query.dismissed — Optional $ref: "#/definitions/security-center_dismissed"
query.issue_class — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type — Optional $ref: "#/definitions/security-center_issueTypes"
query.product — Optional $ref: "#/definitions/security-center_products"
query.source — Optional $ref: "#/definitions/security-center_sources"
query.severity — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject — Optional $ref: "#/definitions/security-center_subjects"
query.issue_class~neq — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type~neq — Optional $ref: "#/definitions/security-center_issueTypes"
query.product~neq — Optional $ref: "#/definitions/security-center_products"
query.severity~neq — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject~neq — Optional $ref: "#/definitions/security-center_subjects"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves a Partner Security Center Insight Count — cloudflare.get-security-center-partner-insight-count

Run Retrieves a Partner Security Center Insight Count with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
query object Required additionalProperties: false
query.source string Required enum: ["riskrecon"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "source": "riskrecon"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Recent Account Scans — cloudflare.get-security-center-account-scans

Run Get Recent Account Scans with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start On-Demand Account Scan — cloudflare.start-security-center-account-scan

Run Start On-Demand Account Scan with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
body — Required $ref: "#/definitions/security-center_newScanRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "issue_type": "compliance_violation"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Security Center Insight Counts by Severity — cloudflare.get-security-center-insight-counts-by-severity

Run Retrieves Security Center Insight Counts by Severity with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
query object Optional additionalProperties: false
query.dismissed — Optional $ref: "#/definitions/security-center_dismissed"
query.issue_class — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type — Optional $ref: "#/definitions/security-center_issueTypes"
query.product — Optional $ref: "#/definitions/security-center_products"
query.source — Optional $ref: "#/definitions/security-center_sources"
query.severity — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject — Optional $ref: "#/definitions/security-center_subjects"
query.issue_class~neq — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type~neq — Optional $ref: "#/definitions/security-center_issueTypes"
query.product~neq — Optional $ref: "#/definitions/security-center_products"
query.severity~neq — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject~neq — Optional $ref: "#/definitions/security-center_subjects"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Security Center Insight Counts by Type — cloudflare.get-security-center-insight-counts-by-type

Run Retrieves Security Center Insight Counts by Type with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
query object Optional additionalProperties: false
query.dismissed — Optional $ref: "#/definitions/security-center_dismissed"
query.issue_class — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type — Optional $ref: "#/definitions/security-center_issueTypes"
query.product — Optional $ref: "#/definitions/security-center_products"
query.source — Optional $ref: "#/definitions/security-center_sources"
query.severity — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject — Optional $ref: "#/definitions/security-center_subjects"
query.issue_class~neq — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type~neq — Optional $ref: "#/definitions/security-center_issueTypes"
query.product~neq — Optional $ref: "#/definitions/security-center_products"
query.severity~neq — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject~neq — Optional $ref: "#/definitions/security-center_subjects"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Issue Audit Log — cloudflare.get-security-center-issue-audit-log

Run Retrieves Issue Audit Log with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
path.issue_id string Required
query object Optional additionalProperties: false
query.per_page integer Optional Number of results per page. default: 25; minimum: 1; maximum: 1000
query.cursor string Optional Opaque cursor for pagination. Use the cursor value from result_info of the previous response.
query.field_changed string Optional Filter by the field that was changed. enum: ["status","user_classification"]
query.changed_by string Optional Filter by the actor that made the change.
query.since string Optional Filter entries changed at or after this timestamp (RFC 3339). format: "date-time"
query.before string Optional Filter entries changed before this timestamp (RFC 3339). format: "date-time"
query.order string Optional Sort order for results. Use 'asc' for oldest first or 'desc' for newest first. enum: ["asc","desc"]; default: "desc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "issue_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Updates Security Center Insight Classification — cloudflare.update-security-center-insight-classification

Run Updates Security Center Insight Classification with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
path.issue_id string Required
body — Required $ref: "#/definitions/security-center_userClassificationUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "issue_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Security Center Insight Context — cloudflare.get-security-center-insight-context

Run Retrieves Security Center Insight Context with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
path.issue_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "issue_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Archives Security Center Insight — cloudflare.archive-security-center-insight

Run Archives Security Center Insight with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
path.issue_id string Required
body object Required
body.dismiss boolean Optional default: true

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "issue_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Partner Integration Settings — cloudflare.get-security-center-partner-settings

Run Retrieves Partner Integration Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
path.partner string Required The partner integration identifier. enum: ["riskrecon"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "partner": "riskrecon"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Updates Partner Integration Settings — cloudflare.update-security-center-partner-settings

Run Updates Partner Integration Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
path.partner string Required The partner integration identifier. enum: ["riskrecon"]
body — Required $ref: "#/definitions/security-center_partnerSettings"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "partner": "riskrecon"
  },
  "body": {
    "enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Lists Partner-Discovered Shadow Zones — cloudflare.get-security-center-partner-shadow-zones

Run Lists Partner-Discovered Shadow Zones with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
path.partner string Required The partner integration identifier. enum: ["riskrecon"]
query object Optional additionalProperties: false
query.cursor string Optional Opaque cursor from the previous response's result_info.cursor. Omit for the first page.
query.per_page integer Optional Number of premium partner asset results per page. Values other than 1 must be a multiple of 5. default: 25; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "partner": "riskrecon"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Lists Hosts in a Partner-Discovered Shadow Zone — cloudflare.get-security-center-partner-shadow-zone-hosts

Run Lists Hosts in a Partner-Discovered Shadow Zone with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
path.partner string Required The partner integration identifier. enum: ["riskrecon"]
path.domain string Required The shadow-zone domain.
query object Optional additionalProperties: false
query.cursor string Optional Opaque cursor from the previous response's result_info.cursor. Omit for the first page.
query.per_page integer Optional Number of premium partner asset results per page. Values other than 1 must be a multiple of 5. default: 25; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "partner": "riskrecon",
    "domain": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Account State — cloudflare.get-security-center-account-state

Run Retrieves Account State with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Updates Account State — cloudflare.update-security-center-account-state

Run Updates Account State with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/security-center_identifier"
body — Required $ref: "#/definitions/security-center_updateAccountStateRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "scans_enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Image Resizing configurations for account — cloudflare.account-settings-list-transformations

Run List Image Resizing configurations for account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/speed_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Unique Transformations billing setting — cloudflare.account-settings-get-ut-billing-setting

Run Get Unique Transformations billing setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/speed_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Unique Transformations billing setting — cloudflare.account-settings-change-ut-billing-setting

Run Change Unique Transformations billing setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/speed_identifier"
body object Required
body.value — Required $ref: "#/definitions/speed_ut_billing_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "on"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List account shares — cloudflare.shares-list

Run List account shares with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
query object Optional additionalProperties: false
query.status — Optional Filter shares by status. $ref: "#/definitions/resource-sharing_share_status"
query.kind — Optional Filter shares by kind. $ref: "#/definitions/resource-sharing_share_kind"
query.target_type — Optional Filter shares by target_type. $ref: "#/definitions/resource-sharing_share_target_type"
query.resource_types array Optional Filter share resources by resource_types.
query.resource_types[] — Optional $ref: "#/definitions/resource-sharing_resource_type"
query.order string Optional Order shares by values in the given field. enum: ["name","created"]; default: "created"
query.direction string Optional Direction to sort objects. enum: ["asc","desc"]; default: "asc"
query.page integer Optional Page number. Defaults to 1 when omitted. default: 1; minimum: 1; multipleOf: 1
query.per_page integer Optional Number of objects to return per page. Defaults to 20 when omitted. default: 20; minimum: 1; maximum: 100; multipleOf: 1
query.include_resources boolean Optional Include resources in the response.
query.include_recipient_counts boolean Optional Include recipient counts in the response.
query.include_tags_from string Optional Include share tags in the response. api reads tags from the tag service; mirror reads a local, eventually consistent replica. If the tag lookup fails, the response omits tags. enum: ["api","mirror"]
query.tag array Optional Filter shares by tag. Each value is either key=value (matches shares whose tags contain that key/value pair) or key alone (matches shares that have any value for that key). May be repeated; multiple tag parameters are ANDed together. Maximum 20 tag parameters per request. maxItems: 20
query.tag[] string Optional maxLength: 1281

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger a share creation — cloudflare.share-create

Run Trigger a share creation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
body — Required $ref: "#/definitions/resource-sharing_create_share_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "My Shared WAF Managed Rule"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger a share deletion — cloudflare.share-delete

Run Trigger a share deletion with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account share by ID — cloudflare.shares-get-by-id

Run Get account share by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
query object Optional additionalProperties: false
query.include_resources boolean Optional Include resources in the response.
query.include_recipient_counts boolean Optional Include recipient counts in the response.
query.include_tags_from string Optional Include share tags in the response. api reads tags from the tag service; mirror reads a local, eventually consistent replica. If the tag lookup fails, the response omits tags. enum: ["api","mirror"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger a share update — cloudflare.share-update

Run Trigger a share update with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
body — Required $ref: "#/definitions/resource-sharing_update_share_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07"
  },
  "body": {
    "name": "My Shared WAF Managed Rule"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List share excluded recipients by share ID — cloudflare.share-excluded-recipients-list

Run List share excluded recipients by share ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
query object Optional additionalProperties: false
query.page integer Optional Page number. Defaults to 1 when omitted. default: 1; minimum: 1; multipleOf: 1
query.per_page integer Optional Number of objects to return per page. Defaults to 20 when omitted. default: 20; minimum: 1; maximum: 100; multipleOf: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger an account exclusion from a share — cloudflare.share-excluded-recipient-create

Run Trigger an account exclusion from a share with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
body — Required $ref: "#/definitions/resource-sharing_create_share_excluded_recipient_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07"
  },
  "body": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger excluded-account reconciliation on a share — cloudflare.share-excluded-recipients-update

Run Trigger excluded-account reconciliation on a share with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
body — Required $ref: "#/definitions/resource-sharing_update_share_excluded_recipients_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger an account un-exclusion from a share — cloudflare.share-excluded-recipient-delete

Run Trigger an account un-exclusion from a share with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
path.excluded_recipient_id — Required $ref: "#/definitions/resource-sharing_excluded_recipient_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07",
    "excluded_recipient_id": "4ae96b85c43850f2c0a7b9101a0eeb18"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get share excluded recipient by ID — cloudflare.share-excluded-recipients-get-by-id

Run Get share excluded recipient by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
path.excluded_recipient_id — Required $ref: "#/definitions/resource-sharing_excluded_recipient_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07",
    "excluded_recipient_id": "4ae96b85c43850f2c0a7b9101a0eeb18"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List share recipients by share ID — cloudflare.share-recipients-list

Run List share recipients by share ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
query object Optional additionalProperties: false
query.include_resources boolean Optional Include resources in the response.
query.page integer Optional Page number. Defaults to 1 when omitted. default: 1; minimum: 1; multipleOf: 1
query.per_page integer Optional Number of objects to return per page. Defaults to 20 when omitted. default: 20; minimum: 1; maximum: 100; multipleOf: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger recipient reconciliation on a share — cloudflare.share-recipients-update

Run Trigger recipient reconciliation on a share with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
body — Required $ref: "#/definitions/resource-sharing_update_share_recipients_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger a recipient removal from a share — cloudflare.share-recipient-delete

Run Trigger a recipient removal from a share with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
path.recipient_id — Required $ref: "#/definitions/resource-sharing_recipient_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07",
    "recipient_id": "3fd85f74b32742f1bff64a85009dda07"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get share recipient by ID — cloudflare.share-recipients-get-by-id

Run Get share recipient by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
path.recipient_id — Required $ref: "#/definitions/resource-sharing_recipient_id"
query object Optional additionalProperties: false
query.include_resources boolean Optional Include resources in the response.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07",
    "recipient_id": "3fd85f74b32742f1bff64a85009dda07"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List share resources by share ID — cloudflare.share-resources-list

Run List share resources by share ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
query object Optional additionalProperties: false
query.status — Optional Filter share resources by status. $ref: "#/definitions/resource-sharing_resource_status"
query.resource_type — Optional Filter share resources by resource_type. $ref: "#/definitions/resource-sharing_resource_type"
query.page integer Optional Page number. Defaults to 1 when omitted. default: 1; minimum: 1; multipleOf: 1
query.per_page integer Optional Number of objects to return per page. Defaults to 20 when omitted. default: 20; minimum: 1; maximum: 100; multipleOf: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger a resource addition to a share — cloudflare.share-resource-create

Run Trigger a resource addition to a share with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
body — Required $ref: "#/definitions/resource-sharing_create_share_resource_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07"
  },
  "body": {
    "resource_id": "0a679032-bbb2-4b7e-9acc-dd5c5cb27a17",
    "resource_type": "custom-ruleset",
    "resource_account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "meta": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger a resource deletion from a share — cloudflare.share-resource-delete

Run Trigger a resource deletion from a share with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
path.share_resource_id — Required $ref: "#/definitions/resource-sharing_resource_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07",
    "share_resource_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get share resource by ID — cloudflare.share-resources-get-by-id

Run Get share resource by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
path.share_resource_id — Required $ref: "#/definitions/resource-sharing_resource_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07",
    "share_resource_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger a resource metadata update in a share — cloudflare.share-resource-update

Run Trigger a resource metadata update in a share with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-sharing_account_id"
path.share_id — Required $ref: "#/definitions/resource-sharing_share_id"
path.share_resource_id — Required $ref: "#/definitions/resource-sharing_resource_id"
body — Required $ref: "#/definitions/resource-sharing_update_share_resource_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "share_id": "3fd85f74b32742f1bff64a85009dda07",
    "share_resource_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "meta": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List jobs — cloudflare.slurper-list-jobs

Run List jobs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
query object Optional additionalProperties: false
query.limit integer Optional maximum: 50
query.offset integer Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a job — cloudflare.slurper-create-job

Run Create a job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/r2-slurper_CreateJobRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Abort all jobs — cloudflare.slurper-abort-all-jobs

Run Abort all jobs with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a job — cloudflare.slurper-delete-job

Run Delete a job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.job_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "job_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get job details — cloudflare.slurper-get-job

Run Get job details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.job_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "job_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Abort a job — cloudflare.slurper-abort-job

Run Abort a job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.job_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "job_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get job logs — cloudflare.slurper-get-job-logs

Run Get job logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.job_id string Required
query object Optional additionalProperties: false
query.limit integer Optional maximum: 50
query.offset integer Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "job_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Pause a job — cloudflare.slurper-pause-job

Run Pause a job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.job_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "job_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get job progress — cloudflare.slurper-get-job-progress

Run Get job progress with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.job_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "job_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Resume a job — cloudflare.slurper-resume-job

Run Resume a job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.job_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "job_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check source connectivity — cloudflare.slurper-check-source-connectivity

Run Check source connectivity with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/r2-slurper_SourceJobSchema"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "vendor": "s3",
    "bucket": "example",
    "secret": {
      "accessKeyId": "example",
      "secretAccessKey": "example"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check target connectivity — cloudflare.slurper-check-target-connectivity

Run Check target connectivity with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/r2-slurper_R2TargetSchema"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "vendor": "r2",
    "bucket": "example",
    "secret": {
      "accessKeyId": "example",
      "secretAccessKey": "example"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get all SSO connectors — cloudflare.get-all-sso-connectors

Run Get all SSO connectors with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Initialize new SSO connector — cloudflare.init-new-sso-connector

Run Initialize new SSO connector with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
body object Optional
body.begin_verification boolean Optional Begin the verification process after creation default: true
body.email_domain string Required Email domain of the new SSO connector
body.use_fedramp_language — Optional $ref: "#/definitions/iam_use_fedramp_language"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete SSO connector — cloudflare.delete-sso-connector

Run Delete SSO connector with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.sso_connector_id — Required $ref: "#/definitions/iam_sso_connector_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sso_connector_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get single SSO connector — cloudflare.get-sso-connector

Run Get single SSO connector with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.sso_connector_id — Required $ref: "#/definitions/iam_sso_connector_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sso_connector_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update SSO connector state — cloudflare.update-sso-connector-state

Run Update SSO connector state with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.sso_connector_id — Required $ref: "#/definitions/iam_sso_connector_identifier"
body object Optional
body.enabled boolean Optional SSO Connector enabled state
body.use_fedramp_language — Optional $ref: "#/definitions/iam_use_fedramp_language"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sso_connector_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Begin SSO connector verification — cloudflare.begin-sso-connector-verification

Run Begin SSO connector verification with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.sso_connector_id — Required $ref: "#/definitions/iam_sso_connector_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sso_connector_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List namespaces — cloudflare.workers-kv-namespace-list-namespaces

Run List namespaces with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers-kv_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. default: 20; minimum: 1; maximum: 1000
query.order string Optional Namespace field to sort by (id or title). enum: ["id","title"]
query.direction string Optional Sort namespaces in ascending (asc) or descending (desc) order. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a namespace — cloudflare.workers-kv-namespace-create-a-namespace

Run Create a namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers-kv_identifier"
body — Required $ref: "#/definitions/workers-kv_create_namespace_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "title": "My Own Namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a namespace — cloudflare.workers-kv-namespace-remove-a-namespace

Run Delete a namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.namespace_id — Required $ref: "#/definitions/workers-kv_namespace_identifier"
path.account_id — Required $ref: "#/definitions/workers-kv_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "namespace_id": "0f2ac74b498b48028cb68387c421e279",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a namespace — cloudflare.workers-kv-namespace-get-a-namespace

Run Get a namespace with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.namespace_id — Required $ref: "#/definitions/workers-kv_namespace_identifier"
path.account_id — Required $ref: "#/definitions/workers-kv_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "namespace_id": "0f2ac74b498b48028cb68387c421e279",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rename a namespace — cloudflare.workers-kv-namespace-rename-a-namespace

Run Rename a namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.namespace_id — Required $ref: "#/definitions/workers-kv_namespace_identifier"
path.account_id — Required $ref: "#/definitions/workers-kv_identifier"
body — Required $ref: "#/definitions/workers-kv_create_rename_namespace_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "namespace_id": "0f2ac74b498b48028cb68387c421e279",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "title": "My Own Namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Write multiple key-value pairs — cloudflare.workers-kv-namespace-write-multiple-key-value-pairs

Run Write multiple key-value pairs with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.namespace_id — Required $ref: "#/definitions/workers-kv_namespace_identifier"
path.account_id — Required $ref: "#/definitions/workers-kv_identifier"
body — Required $ref: "#/definitions/workers-kv_bulk_write"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "namespace_id": "0f2ac74b498b48028cb68387c421e279",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete multiple key-value pairs — cloudflare.workers-kv-namespace-delete-multiple-key-value-pairs

Run Delete multiple key-value pairs with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.namespace_id — Required $ref: "#/definitions/workers-kv_namespace_identifier"
path.account_id — Required $ref: "#/definitions/workers-kv_identifier"
body — Required $ref: "#/definitions/workers-kv_bulk_delete"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "namespace_id": "0f2ac74b498b48028cb68387c421e279",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get multiple key-value pairs — cloudflare.workers-kv-namespace-get-multiple-key-value-pairs

Run Get multiple key-value pairs with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.namespace_id — Required $ref: "#/definitions/workers-kv_namespace_identifier"
path.account_id — Required $ref: "#/definitions/workers-kv_identifier"
body object Required
body.keys array Required Array of keys to retrieve (maximum of 100). maxItems: 100
body.keys[] — Optional $ref: "#/definitions/workers-kv_key_name_bulk"
body.type string Optional Return values as strings with text, or parse stored JSON values with json. enum: ["text","json"]; default: "text"
body.withMetadata boolean Optional Whether to include metadata in the response. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "namespace_id": "0f2ac74b498b48028cb68387c421e279",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "keys": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List keys in a namespace — cloudflare.workers-kv-namespace-list-a-namespace--s-keys

Run List keys in a namespace with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.namespace_id — Required $ref: "#/definitions/workers-kv_namespace_identifier"
path.account_id — Required $ref: "#/definitions/workers-kv_identifier"
query object Optional additionalProperties: false
query.limit number Optional Maximum number of keys to return in one response. Pass result_info.cursor from the response as cursor to request the next page. default: 1000; minimum: 10; maximum: 1000
query.prefix string Optional Filters returned keys by a name prefix. Exact matches and any key names that begin with the prefix will be returned.
query.cursor string Optional Opaque pagination token from result_info.cursor in the previous response. Pass it unchanged to request the next page of keys.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "namespace_id": "0f2ac74b498b48028cb68387c421e279",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a key's metadata — cloudflare.workers-kv-namespace-read-the-metadata-for-a-key

Run Get a key's metadata with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.key_name — Required $ref: "#/definitions/workers-kv_key_name"
path.namespace_id — Required $ref: "#/definitions/workers-kv_namespace_identifier"
path.account_id — Required $ref: "#/definitions/workers-kv_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "key_name": "My-Key",
    "namespace_id": "0f2ac74b498b48028cb68387c421e279",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a key-value pair — cloudflare.workers-kv-namespace-delete-key-value-pair

Run Delete a key-value pair with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.key_name — Required $ref: "#/definitions/workers-kv_key_name"
path.namespace_id — Required $ref: "#/definitions/workers-kv_namespace_identifier"
path.account_id — Required $ref: "#/definitions/workers-kv_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "key_name": "My-Key",
    "namespace_id": "0f2ac74b498b48028cb68387c421e279",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List videos — cloudflare.stream-videos-list-videos

Run List videos with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
query object Optional additionalProperties: false
query.status — Optional $ref: "#/definitions/stream_media_state"
query.creator — Optional $ref: "#/definitions/stream_creator"
query.type — Optional $ref: "#/definitions/stream_type"
query.asc — Optional $ref: "#/definitions/stream_asc"
query.video_name — Optional $ref: "#/definitions/stream_video_name"
query.search — Optional $ref: "#/definitions/stream_search"
query.start — Optional $ref: "#/definitions/stream_start"
query.end — Optional $ref: "#/definitions/stream_end"
query.include_counts — Optional $ref: "#/definitions/stream_include_counts"
query.id string Optional Filter by video ID(s). Can be a single ID or a comma-separated list of IDs.
query.name string Optional Filter by video name/UID(s). Can be a single name or a comma-separated list.
query.live_input_id string Optional Filter by live input ID to find videos associated with a specific live stream.
query.before string Optional Alias for 'end'. Returns videos created before this date/time (RFC 3339 format). format: "date-time"
query.after string Optional Alias for 'start'. Returns videos created after this date/time (RFC 3339 format). format: "date-time"
query.limit integer Optional Maximum number of videos to return (default 1000, max 1000). minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Initiate video uploads using TUS — cloudflare.stream-videos-initiate-video-uploads-using-tus

Run Initiate video uploads using TUS with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
headers object Required additionalProperties: false
headers.Tus-Resumable — Required $ref: "#/definitions/stream_tus_resumable"
headers.Upload-Creator — Optional $ref: "#/definitions/stream_creator"
headers.Upload-Length — Required $ref: "#/definitions/stream_upload_length"
headers.Upload-Metadata — Optional $ref: "#/definitions/stream_upload_metadata"
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
query object Optional additionalProperties: false
query.direct_user — Optional $ref: "#/definitions/stream_direct_user"

Full JSON Schema

Full JSON Schema

Example input

{
  "headers": {
    "Tus-Resumable": "1.0.0",
    "Upload-Length": 1
  },
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Clip videos given a start and end time — cloudflare.stream-video-clipping-clip-videos-given-a-start-and-end-time

Run Clip videos given a start and end time with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
body — Required $ref: "#/definitions/stream_videoClipStandard"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "clippedFromVideoUID": "023e105f4ecef8ad9ca31a8372d0c353",
    "startTimeSeconds": 1,
    "endTimeSeconds": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Upload videos from a URL — cloudflare.stream-videos-upload-videos-from-a-url

Run Upload videos from a URL with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
headers object Optional additionalProperties: false
headers.Upload-Creator — Optional $ref: "#/definitions/stream_creator"
body — Required $ref: "#/definitions/stream_video_copy_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "input": "https://example.com/myvideo.mp4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Upload videos via direct upload URLs — cloudflare.stream-videos-upload-videos-via-direct-upload-ur-ls

Run Upload videos via direct upload URLs with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
headers object Optional additionalProperties: false
headers.Upload-Creator — Optional $ref: "#/definitions/stream_creator"
body — Required $ref: "#/definitions/stream_direct_upload_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "maxDurationSeconds": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List signing keys — cloudflare.stream-signing-keys-list-signing-keys

Run List signing keys with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create signing keys — cloudflare.stream-signing-keys-create-signing-keys

Run Create signing keys with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete signing keys — cloudflare.stream-signing-keys-delete-signing-keys

Run Delete signing keys with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier-2"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List live inputs — cloudflare.stream-live-inputs-list-live-inputs

Run List live inputs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_identifier-2"
query object Optional additionalProperties: false
query.include_counts — Optional $ref: "#/definitions/stream_include_counts"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a live input — cloudflare.stream-live-inputs-create-a-live-input

Run Create a live input with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_identifier-2"
headers object Optional additionalProperties: false
headers.Idempotency-Key string Optional Prevents duplicate live inputs from being created when retrying this request. The key is scoped to the account, may contain up to 255 bytes, and expires six hours after the live input is created. Reusing a key for a deleted input before expiry returns a 409 Conflict response. maxLength: 255
body — Required $ref: "#/definitions/stream_create_input_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a live input — cloudflare.stream-live-inputs-delete-a-live-input

Run Delete a live input with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.live_input_identifier — Required $ref: "#/definitions/stream_live_input_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "live_input_identifier": "66be4bf738797e01e1fca35a7bdecdcd",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve a live input — cloudflare.stream-live-inputs-retrieve-a-live-input

Run Retrieve a live input with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.live_input_identifier — Required $ref: "#/definitions/stream_live_input_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "live_input_identifier": "66be4bf738797e01e1fca35a7bdecdcd",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a live input — cloudflare.stream-live-inputs-update-a-live-input

Run Update a live input with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.live_input_identifier — Required $ref: "#/definitions/stream_live_input_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"
body — Required $ref: "#/definitions/stream_update_input_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "live_input_identifier": "66be4bf738797e01e1fca35a7bdecdcd",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Disable a live input — cloudflare.stream-live-inputs-disable-a-live-input

Run Disable a live input with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.live_input_identifier — Required $ref: "#/definitions/stream_live_input_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "live_input_identifier": "66be4bf738797e01e1fca35a7bdecdcd",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Enable a live input — cloudflare.stream-live-inputs-enable-a-live-input

Run Enable a live input with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.live_input_identifier — Required $ref: "#/definitions/stream_live_input_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "live_input_identifier": "66be4bf738797e01e1fca35a7bdecdcd",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all outputs associated with a specified live input — cloudflare.stream-live-inputs-list-all-outputs-associated-with-a-spec-7c0ac43140

Run List all outputs associated with a specified live input with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.live_input_identifier — Required $ref: "#/definitions/stream_live_input_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "live_input_identifier": "66be4bf738797e01e1fca35a7bdecdcd",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new output, connected to a live input — cloudflare.stream-live-inputs-create-a-new-output--connected-to-a-live-input

Run Create a new output, connected to a live input with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.live_input_identifier — Required $ref: "#/definitions/stream_live_input_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"
body — Required $ref: "#/definitions/stream_create_output_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "live_input_identifier": "66be4bf738797e01e1fca35a7bdecdcd",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "url": "rtmp://a.rtmp.youtube.com/live2",
    "streamKey": "uzya-f19y-g2g9-a2ee-51j2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an output — cloudflare.stream-live-inputs-delete-an-output

Run Delete an output with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.output_identifier — Required $ref: "#/definitions/stream_output_identifier"
path.live_input_identifier — Required $ref: "#/definitions/stream_live_input_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "output_identifier": "baea4d9c515887b80289d5c33cf01145",
    "live_input_identifier": "66be4bf738797e01e1fca35a7bdecdcd",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an output — cloudflare.stream-live-inputs-update-an-output

Run Update an output with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.output_identifier — Required $ref: "#/definitions/stream_output_identifier"
path.live_input_identifier — Required $ref: "#/definitions/stream_live_input_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"
body — Required $ref: "#/definitions/stream_update_output_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "output_identifier": "baea4d9c515887b80289d5c33cf01145",
    "live_input_identifier": "66be4bf738797e01e1fca35a7bdecdcd",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rotate keys for a live input — cloudflare.stream-live-inputs-rotate-keys-for-a-live-input

Run Rotate keys for a live input with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.live_input_identifier — Required $ref: "#/definitions/stream_live_input_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "live_input_identifier": "66be4bf738797e01e1fca35a7bdecdcd",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Storage use — cloudflare.stream-videos-storage-usage

Run Storage use with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
query object Optional additionalProperties: false
query.creator — Optional $ref: "#/definitions/stream_creator"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account Stream usage — cloudflare.usage-analytics-get-account-stream-usage

Run Get account Stream usage with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Standard Cloudflare hex account identifier. The API gateway translates this to an internal numeric ID before forwarding to the backend service. $ref: "#/definitions/usage-analytics_identifier"
query object Optional additionalProperties: false
query.metrics string Optional Comma-separated list of metrics to include in the response. Available metrics depend on the endpoint. Billing usage supports: streamMinutesViewed, rateLimitingRequestsAllowed, loadBalancingQueries, argoAcceleratedBytes, workersRequests, workersKVReads, imageResizingRequests, spectrumBytesTransferred, mediaUniqueTransformations. Stream/media usage supports: streamMinutesViewed.
query.since string Optional Start of the time range for the query (inclusive). ISO 8601 timestamp. Defaults to 6 hours before the current time. format: "date-time"
query.until string Optional End of the time range for the query (inclusive). ISO 8601 timestamp. Defaults to the current time. format: "date-time"
query.time_delta string Optional Time unit to aggregate usage observations into. Data retention is approximately 18 months. The effective number of data points returned depends on the time range and granularity selected. For example, requesting hourly granularity over 18 months could produce up to ~13,000 data points; use the limit parameter to cap results and be aware that responses may be truncated. enum: ["hour","day","week","month","quarter","year"]; default: "hour"
query.limit integer Optional Maximum number of data points to return. The actual number of results depends on the interaction between the time range (since/until) and time_delta granularity. Results are truncated to this limit without error if the time range produces more data points than the limit allows. default: 100; minimum: 1; maximum: 10000
query.filters string Optional Filter expressions to apply to the query. Format: field==value. Multiple filters can be combined.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List watermark profiles — cloudflare.stream-watermark-profile-list-watermark-profiles

Run List watermark profiles with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create watermark profiles via basic upload — cloudflare.stream-watermark-profile-create-watermark-profiles-via-basic-upload

Run Create watermark profiles via basic upload with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
body object Required
body.name — Optional $ref: "#/definitions/stream_name"
body.opacity — Optional $ref: "#/definitions/stream_opacity"
body.padding — Optional $ref: "#/definitions/stream_padding"
body.position — Optional $ref: "#/definitions/stream_position"
body.scale — Optional $ref: "#/definitions/stream_scale"
body.url string Optional URL of the watermark image to copy. format: "uri"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete watermark profiles — cloudflare.stream-watermark-profile-delete-watermark-profiles

Run Delete watermark profiles with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_watermark_identifier"
path.account_id — Required $ref: "#/definitions/stream_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Watermark profile details — cloudflare.stream-watermark-profile-watermark-profile-details

Run Watermark profile details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_watermark_identifier"
path.account_id — Required $ref: "#/definitions/stream_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete webhooks — cloudflare.stream-webhook-delete-webhooks

Run Delete webhooks with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

View webhook — cloudflare.stream-webhook-view-webhooks

Run View webhook with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create VOD webhooks — cloudflare.stream-webhook-create-webhooks

Run Create VOD webhooks with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
body — Required $ref: "#/definitions/stream_webhook_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "notificationUrl": "https://example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete video — cloudflare.stream-videos-delete-video

Run Delete video with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve video details — cloudflare.stream-videos-retrieve-video-details

Run Retrieve video details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit video details — cloudflare.stream-videos-update-video-details

Run Edit video details with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
body — Required $ref: "#/definitions/stream_video_update"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List additional audio tracks on a video — cloudflare.list-audio-tracks

Run List additional audio tracks on a video with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
path.identifier — Required $ref: "#/definitions/stream_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "identifier": "ea95132c15732412d22c1476fa83f27a"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add audio tracks to a video — cloudflare.add-audio-track

Run Add audio tracks to a video with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
path.identifier — Required $ref: "#/definitions/stream_identifier"
body — Required $ref: "#/definitions/stream_copyAudioTrack"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "identifier": "ea95132c15732412d22c1476fa83f27a"
  },
  "body": {
    "label": "director commentary"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete additional audio tracks on a video — cloudflare.delete-audio-tracks

Run Delete additional audio tracks on a video with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.audio_identifier — Required $ref: "#/definitions/stream_audio_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "audio_identifier": "ea95132c15732412d22c1476fa83f27a"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit additional audio tracks on a video — cloudflare.edit-audio-tracks

Run Edit additional audio tracks on a video with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.audio_identifier — Required $ref: "#/definitions/stream_audio_identifier"
body — Required $ref: "#/definitions/stream_editAudioTrack"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "audio_identifier": "ea95132c15732412d22c1476fa83f27a"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List captions or subtitles — cloudflare.stream-subtitles.-captions-list-captions-or-subtitles

Run List captions or subtitles with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete captions or subtitles — cloudflare.stream-subtitles.-captions-delete-captions-or-subtitles

Run Delete captions or subtitles with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.language — Required $ref: "#/definitions/stream_language"
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "language": "tr",
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List captions or subtitles for a provided language — cloudflare.stream-subtitles.-captions-get-caption-or-subtitle-for-language

Run List captions or subtitles for a provided language with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.language — Required $ref: "#/definitions/stream_language"
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "language": "tr",
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Generate captions or subtitles for a provided language via AI — cloudflare.stream-subtitles.-captions-generate-caption-or-subtitle-for-language

Run Generate captions or subtitles for a provided language via AI with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.language — Required $ref: "#/definitions/stream_language"
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "language": "tr",
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Return WebVTT captions for a provided language — cloudflare.stream-subtitles.-captions-get-vtt-caption-or-subtitle

Run Return WebVTT captions for a provided language with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.language — Required $ref: "#/definitions/stream_language"
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "language": "tr",
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete downloads — cloudflare.stream-mp4-downloads-delete-downloads

Run Delete downloads with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List downloads — cloudflare.stream-mp4-downloads-list-downloads

Run List downloads with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create downloads — cloudflare.stream-mp4-downloads-create-downloads

Run Create downloads with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete download — cloudflare.stream-downloads-delete-type-specific-downloads

Run Delete download with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"
path.download_type — Required $ref: "#/definitions/stream_download_type"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "download_type": "audio"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create download — cloudflare.stream-downloads-create-type-specific-downloads

Run Create download with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_identifier-2"
path.download_type — Required $ref: "#/definitions/stream_download_type"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "download_type": "audio"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Deprecated: Retrieve legacy embed code HTML — cloudflare.stream-videos-retreieve-embed-code-html

Run Deprecated: Retrieve legacy embed code HTML with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create signed URL tokens for videos — cloudflare.stream-videos-create-signed-url-tokens-for-videos

Run Create signed URL tokens for videos with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/stream_identifier"
path.account_id — Required $ref: "#/definitions/stream_account_identifier"
body — Required $ref: "#/definitions/stream_signed_token_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ea95132c15732412d22c1476fa83f27a",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Subscriptions — cloudflare.account-subscriptions-list-subscriptions

Run List Subscriptions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Subscription — cloudflare.account-subscriptions-create-subscription

Run Create Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_subscription-v2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Cancel Delayed Downgrade — cloudflare.account-subscriptions-cancel-delayed-downgrade

Run Cancel Delayed Downgrade with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body object Required
body.subscription_ids array Optional List of subscription identifiers to cancel downgrades for.
body.subscription_ids[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Subscription — cloudflare.account-subscriptions-delete-subscription

Run Delete Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subscription_identifier — Required $ref: "#/definitions/bill-subs-api_schemas-identifier"
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subscription_identifier": "506e3185e9c882d175a2d0cb0093d9f2",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Subscription — cloudflare.account-subscriptions-get-subscription

Run Get Subscription with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subscription_identifier — Required $ref: "#/definitions/bill-subs-api_schemas-identifier"
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subscription_identifier": "506e3185e9c882d175a2d0cb0093d9f2",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Subscription — cloudflare.account-subscriptions-update-subscription

Run Update Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subscription_identifier — Required $ref: "#/definitions/bill-subs-api_schemas-identifier"
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_subscription-v2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subscription_identifier": "506e3185e9c882d175a2d0cb0093d9f2",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Append Subscription Action — cloudflare.account-subscriptions-action-append-subscription

Run Append Subscription Action with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subscription_identifier — Required $ref: "#/definitions/bill-subs-api_schemas-identifier"
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_subscription-v2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subscription_identifier": "506e3185e9c882d175a2d0cb0093d9f2",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Cancel Reason — cloudflare.account-subscriptions-get-cancel-reason

Run Get Cancel Reason with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subscription_identifier — Required $ref: "#/definitions/bill-subs-api_schemas-identifier"
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subscription_identifier": "506e3185e9c882d175a2d0cb0093d9f2",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Cancel Reason — cloudflare.account-subscriptions-create-cancel-reason

Run Create Cancel Reason with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subscription_identifier — Required $ref: "#/definitions/bill-subs-api_schemas-identifier"
path.account_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_cancel_reason_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subscription_identifier": "506e3185e9c882d175a2d0cb0093d9f2",
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete tags from an account-level resource — cloudflare.tags-delete

Run Delete tags from an account-level resource with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-tagging_account_id"
headers object Optional additionalProperties: false
headers.If-Match string Optional ETag value for optimistic concurrency control. When provided, the server will verify the current resource ETag matches before applying the write. Returns 412 Precondition Failed if the resource has been modified since the ETag was obtained. Omit this header for unconditional writes.
body — Required $ref: "#/definitions/resource-tagging_delete_tags_request_account_level"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "resource_type": "worker_version",
    "resource_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "3f72a691-44b3-4c11-8642-c18a88ddaa5e"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get tags for an account-level resource — cloudflare.tags-get

Run Get tags for an account-level resource with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-tagging_account_id"
query object Required additionalProperties: false
query.resource_id — Required The ID of the resource to retrieve tags for. $ref: "#/definitions/resource-tagging_resource_id"
query.resource_type — Required The type of the resource. $ref: "#/definitions/resource-tagging_account_resource_type"
query.worker_id — Optional Worker identifier. Required for worker_version resources. $ref: "#/definitions/resource-tagging_worker_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "resource_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "resource_type": "worker"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set tags for an account-level resource — cloudflare.tags-set

Run Set tags for an account-level resource with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-tagging_account_id"
headers object Optional additionalProperties: false
headers.If-Match string Optional ETag value for optimistic concurrency control. When provided, the server will verify the current resource ETag matches before applying the write. Returns 412 Precondition Failed if the resource has been modified since the ETag was obtained. Omit this header for unconditional writes.
body — Required $ref: "#/definitions/resource-tagging_set_tags_request_account_level"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "resource_type": "worker_version",
    "resource_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "3f72a691-44b3-4c11-8642-c18a88ddaa5e"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tag keys — cloudflare.tags-list-keys

Run List tag keys with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-tagging_account_id"
query object Optional additionalProperties: false
query.cursor string Optional Cursor for pagination.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tagged resources — cloudflare.tags-list

Run List tagged resources with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.include_navigation boolean Optional Resolve current namespace Worker navigation by immutable child tag. Optional read-only navigation is omitted for deleted or unresolved children. Lookups are limited to this page, at most five concurrently, with a shared two-second budget. Tag identity, ETag, filters and pagination are unchanged; name filtering still uses the stored resource name. Defaults to false. default: false
query.type array Optional Filter by resource type. Can be repeated to filter by multiple types (OR logic). Example: ?type=zone&type=worker
query.type[] — Optional $ref: "#/definitions/resource-tagging_resource_type"
query.name string Optional Filter by resource name. Performs a case-insensitive substring match. Example: ?name=my-zone maxLength: 256
query.id array Optional Filter by resource ID. Can be repeated up to 50 times to filter by multiple IDs. Example: ?id=abc&id=def maxItems: 50
query.id[] — Optional $ref: "#/definitions/resource-tagging_resource_id"
query.case_insensitive boolean Optional Match tag keys and values case-insensitively. Stored casing is unchanged. Example: ?tag=environment=production&case_insensitive=true default: false
query.tag array Optional Filter resources by tag criteria. This parameter can be repeated multiple times, with AND logic between parameters. Supported syntax: - Key-only: tag=&lt;key&gt; - Resource must have the tag key (e.g., tag=production) - Key-value: tag=&lt;key&gt;=&lt;value&gt; - Resource must have the tag with specific value (e.g., tag=env=prod) - Multiple values (OR): tag=&lt;key&gt;=&lt;v1&gt;,&lt;v2&gt; - Resource must have tag with any of the values (e.g., tag=env=prod,staging) - Negate key-only: tag=!&lt;key&gt; - Resource must not have the tag key (e.g., tag=!archived) - Negate key-value: tag=&lt;key&gt;!=&lt;value&gt; - Resource must not have the tag with specific value (e.g., tag=region!=us-west-1) Multiple tag parameters are combined with AND logic.
query.tag[] string Optional
query.cursor string Optional Cursor for pagination.
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-tagging_account_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tag key summary — cloudflare.tags-list-key-summary

Run List tag key summary with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-tagging_account_id"
query object Optional additionalProperties: false
query.cursor string Optional Cursor for pagination.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tag values — cloudflare.tags-list-values

Run List tag values with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/resource-tagging_account_id"
path.tag_key string Required The tag key to retrieve values for.
query object Optional additionalProperties: false
query.type — Optional Filter by resource type. $ref: "#/definitions/resource-tagging_resource_type"
query.cursor string Optional Cursor for pagination.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "tag_key": "environment"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tunnel routes — cloudflare.tunnel-route-list-tunnel-routes

Run List tunnel routes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
query object Optional additionalProperties: false
query.comment — Optional $ref: "#/definitions/tunnel_route_comment"
query.is_deleted boolean Optional If true, only include deleted routes. If false, exclude deleted routes. If empty, all routes will be included.
query.network_subset — Optional If set, only list routes that are contained within this IP range.
query.network_subset — Optional allOf[1]; $ref: "#/definitions/tunnel_ip_network"
query.network_superset — Optional If set, only list routes that contain this IP range.
query.network_superset — Optional allOf[1]; $ref: "#/definitions/tunnel_ip_network"
query.existed_at — Optional $ref: "#/definitions/tunnel_existed_at"
query.tunnel_id — Optional $ref: "#/definitions/tunnel_tunnel_id"
query.route_id — Optional $ref: "#/definitions/tunnel_route_id"
query.tun_types — Optional $ref: "#/definitions/tunnel_tunnel_types"
query.virtual_network_id — Optional $ref: "#/definitions/tunnel_virtual_network_id"
query.per_page — Optional $ref: "#/definitions/tunnel_per_page"
query.page — Optional $ref: "#/definitions/tunnel_page_number"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a tunnel route — cloudflare.tunnel-route-create-a-tunnel-route

Run Create a tunnel route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
body object Required
body.comment — Optional $ref: "#/definitions/tunnel_route_comment"
body.network — Required $ref: "#/definitions/tunnel_ip_network"
body.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"
body.virtual_network_id — Optional $ref: "#/definitions/tunnel_virtual_network_id_computed_optional"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "network": "172.16.0.0/16",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get tunnel route by IP — cloudflare.tunnel-route-get-tunnel-route-by-ip

Run Get tunnel route by IP with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ip — Required $ref: "#/definitions/tunnel_ip"
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
query object Optional additionalProperties: false
query.virtual_network_id — Optional $ref: "#/definitions/tunnel_virtual_network_id"
query.default_virtual_network_fallback boolean Optional When the virtual_network_id parameter is not provided the request filter will default search routes that are in the default virtual network for the account. If this parameter is set to false, the search will include routes that do not have a virtual network. default: true

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ip": "10.1.0.137",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a tunnel route — cloudflare.tunnel-route-delete-a-tunnel-route

Run Delete a tunnel route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.route_id — Required $ref: "#/definitions/tunnel_route_id"
path.account_id — Required $ref: "#/definitions/tunnel_account_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "route_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get tunnel route — cloudflare.tunnel-route-get-tunnel-route

Run Get tunnel route with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.route_id — Required $ref: "#/definitions/tunnel_route_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "route_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a tunnel route — cloudflare.tunnel-route-update-a-tunnel-route

Run Update a tunnel route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.route_id — Required $ref: "#/definitions/tunnel_route_id"
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
body object Required
body.comment — Optional $ref: "#/definitions/tunnel_route_comment"
body.network — Optional $ref: "#/definitions/tunnel_ip_network"
body.tunnel_id — Optional $ref: "#/definitions/tunnel_tunnel_id"
body.virtual_network_id — Optional $ref: "#/definitions/tunnel_virtual_network_id_computed_optional"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "route_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List virtual networks — cloudflare.tunnel-virtual-network-list-virtual-networks

Run List virtual networks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
query object Optional additionalProperties: false
query.id — Optional $ref: "#/definitions/tunnel_virtual_network_id"
query.name — Optional $ref: "#/definitions/tunnel_virtual_network_name"
query.is_default boolean Optional If true, only include the default virtual network. If false, exclude the default virtual network. If empty, all virtual networks will be included.
query.is_default_network boolean Optional If true, only include the default virtual network. If false, exclude the default virtual network. If empty, all virtual networks will be included.
query.is_deleted boolean Optional If true, only include deleted virtual networks. If false, exclude deleted virtual networks. If empty, all virtual networks will be included.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a virtual network — cloudflare.tunnel-virtual-network-create-a-virtual-network

Run Create a virtual network with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
body object Required
body.comment — Optional $ref: "#/definitions/tunnel_virtual_network_comment"
body.is_default boolean Optional If true, this virtual network is the default for the account.
body.is_default_network — Optional $ref: "#/definitions/tunnel_is_default_network_optional"
body.name — Required $ref: "#/definitions/tunnel_virtual_network_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "us-east-1-vpc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a virtual network — cloudflare.tunnel-virtual-network-delete

Run Delete a virtual network with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.virtual_network_id — Required $ref: "#/definitions/tunnel_virtual_network_id"
path.account_id — Required $ref: "#/definitions/tunnel_account_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "virtual_network_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a virtual network — cloudflare.tunnel-virtual-network-get

Run Get a virtual network with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.virtual_network_id — Required $ref: "#/definitions/tunnel_virtual_network_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "virtual_network_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a virtual network — cloudflare.tunnel-virtual-network-update

Run Update a virtual network with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.virtual_network_id — Required $ref: "#/definitions/tunnel_virtual_network_id"
body object Required
body.comment — Optional $ref: "#/definitions/tunnel_virtual_network_comment"
body.is_default_network — Optional $ref: "#/definitions/tunnel_is_default_network_optional"
body.name — Optional $ref: "#/definitions/tunnel_virtual_network_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "virtual_network_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Tokens — cloudflare.account-api-tokens-list-tokens

Run List Tokens with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.direction string Optional Direction to order results. enum: ["asc","desc"]
query.include_expired boolean Optional When true, includes recently-expired tokens in the response. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Token — cloudflare.account-api-tokens-create-token

Run Create Token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
body — Required $ref: "#/definitions/iam_create_payload"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "readonly token",
    "policies": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Permission Groups — cloudflare.account-api-tokens-list-permission-groups

Run List Permission Groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
query object Optional additionalProperties: false
query.name string Optional Filter by the name of the permission group. The value must be URL-encoded.
query.scope string Optional Filter by the scope of the permission group. The value must be URL-encoded.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Verify Token — cloudflare.account-api-tokens-verify-token

Run Verify Token with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Token — cloudflare.account-api-tokens-delete-token

Run Delete Token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.token_id — Required $ref: "#/definitions/iam_token_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "token_id": "ed17574386854bf78a67040be0a770b0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Token Details — cloudflare.account-api-tokens-token-details

Run Token Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.token_id — Required $ref: "#/definitions/iam_token_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "token_id": "ed17574386854bf78a67040be0a770b0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Roll Token — cloudflare.account-api-tokens-roll-token

Run Roll Token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/iam_account_identifier"
path.token_id — Required $ref: "#/definitions/iam_token_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "token_id": "ed17574386854bf78a67040be0a770b0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete script triggers — cloudflare.wor-delete-script-triggers

Run Delete script triggers with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.script_name string Required minLength: 1; maxLength: 255
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "script_name": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get script triggers — cloudflare.wor-get-script-triggers

Run Get script triggers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.script_name string Required minLength: 1; maxLength: 255
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "script_name": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add script triggers — cloudflare.wor-add-script-triggers

Run Add script triggers with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.script_name string Required minLength: 1; maxLength: 255
path.account_id string Required
body array Required maxItems: 100
body[] object Optional
body[].filter object Optional default: {}; additionalProperties: {"anyOf":[{"maxLength":1024,"type":"string"},{"type":"number"},{"type":"boolean"}]}
body[].targets array Required minItems: 1; maxItems: 100
body[].targets[] object Optional
body[].targets[].script_name string Required minLength: 1; maxLength: 255
body[].targets[].type string Required enum: ["workflow"]
body[].targets[].workflow_name string Required minLength: 1; maxLength: 255
body[].type string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "script_name": "example",
    "account_id": "example"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace script triggers — cloudflare.wor-replace-script-triggers

Run Replace script triggers with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.script_name string Required minLength: 1; maxLength: 255
path.account_id string Required
body array Required maxItems: 100
body[] object Optional
body[].filter object Optional default: {}; additionalProperties: {"anyOf":[{"maxLength":1024,"type":"string"},{"type":"number"},{"type":"boolean"}]}
body[].targets array Required minItems: 1; maxItems: 100
body[].targets[] object Optional
body[].targets[].script_name string Required minLength: 1; maxLength: 255
body[].targets[].type string Required enum: ["workflow"]
body[].targets[].workflow_name string Required minLength: 1; maxLength: 255
body[].type string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "script_name": "example",
    "account_id": "example"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List All Tunnels — cloudflare.cloudflare-tunnel-list-all-tunnels

Run List All Tunnels with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
query object Optional additionalProperties: false
query.name string Optional A user-friendly name for the tunnel.
query.is_deleted boolean Optional If true, only include deleted tunnels. If false, exclude deleted tunnels. If empty, all tunnels will be included.
query.existed_at — Optional $ref: "#/definitions/tunnel_existed_at"
query.uuid — Optional $ref: "#/definitions/tunnel_tunnel_id"
query.was_active_at string Optional format: "date-time"
query.was_inactive_at string Optional format: "date-time"
query.include_prefix string Optional
query.exclude_prefix string Optional
query.tun_types — Optional $ref: "#/definitions/tunnel_tunnel_types"
query.status — Optional $ref: "#/definitions/tunnel_status"
query.per_page — Optional $ref: "#/definitions/tunnel_per_page"
query.page — Optional $ref: "#/definitions/tunnel_page_number"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Bulk create URL Scans — cloudflare.urlscanner-create-scan-bulk-v2

Run Bulk create URL Scans with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body array Optional List of urls to scan (up to a 100).
body[] object Optional
body[].agentReadiness boolean Optional Enable agent readiness checks.
body[].customHeaders object Optional Set custom headers. additionalProperties: {"type":"string"}
body[].customagent string Optional maxLength: 4096
body[].referer string Optional maxLength: 4096
body[].screenshotsResolutions array Optional Take multiple screenshots targeting different device types. default: ["desktop"]
body[].screenshotsResolutions[] string Optional Device resolutions. enum: ["desktop","mobile","tablet"]; default: "desktop"
body[].url string Required
body[].visibility string Optional The option Public means it will be included in listings like recent scans and search results. Unlisted means it will not be included in the aforementioned listings, users will need to have the scan's ID to access it. A a scan will be automatically marked as unlisted if it fails, if it contains potential PII or other sensitive material. enum: ["Public","Unlisted"]; default: "Public"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get URL scan's DOM — cloudflare.urlscanner-get-scan-dom-v2

Run Get URL scan's DOM with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.scan_id string Required Scan UUID. format: "uuid"
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "scan_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get URL scan's HAR — cloudflare.urlscanner-get-scan-har-v2

Run Get URL scan's HAR with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.scan_id string Required Scan UUID. format: "uuid"
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "scan_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get raw response — cloudflare.urlscanner-get-response-v2

Run Get raw response with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.response_id string Required Response hash.
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "response_id": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get URL scan — cloudflare.urlscanner-get-scan-v2

Run Get URL scan with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.scan_id string Required Scan UUID. format: "uuid"
path.account_id string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "scan_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create URL Scan — cloudflare.urlscanner-create-scan-v2

Run Create URL Scan with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body object Optional
body.agentReadiness boolean Optional Enable agent readiness checks.
body.country string Optional Country to geo egress from enum: ["AE","AL","AM","AO","AR","AT","AU","AZ","BB","BD","BE","BF","BG","BH","BN","BO","BR","BT","BW","BY","CA","CD","CH","CI","CL","CM","CO","CR","CW","CY","CZ","DE","DJ","DK","DO","DZ","EC","EE","EG","ES","ET","FI","FJ","FR","GB","GD","GE","GH","GR","GT","GU","GY","HK","HN","HR","HT","HU","ID","IE","IL","IN","IQ","IS","IT","JM","JO","JP","KE","KG","KH","KR","KW","KZ","LA","LB","LK","LR","LT","LU","LV","MA","MD","MG","MK","MM","MN","MO","MT","MU","MV","MW","MX","MY","MZ","NA","NC","NG","NL","NO","NP","NZ","OM","PA","PE","PF","PH","PK","PL","PR","PS","PT","PY","QA","RE","RO","RS","RU","RW","SA","SE","SG","SI","SK","SN","SR","TH","TJ","TN","TR","TT","TW","TZ","UA","UG","US","UZ","VN","ZA","ZM","ZW"]
body.customHeaders object Optional Set custom headers. additionalProperties: {"type":"string"}
body.customagent string Optional maxLength: 4096
body.referer string Optional maxLength: 4096
body.screenshotsResolutions array Optional Take multiple screenshots targeting different device types. default: ["desktop"]
body.screenshotsResolutions[] string Optional Device resolutions. enum: ["desktop","mobile","tablet"]; default: "desktop"
body.url string Required
body.visibility string Optional The option Public means it will be included in listings like recent scans and search results. Unlisted means it will not be included in the aforementioned listings, users will need to have the scan's ID to access it. A a scan will be automatically marked as unlisted if it fails, if it contains potential PII or other sensitive material. enum: ["Public","Unlisted"]; default: "Public"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get screenshot — cloudflare.urlscanner-get-scan-screenshot-v2

Run Get screenshot with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.scan_id string Required Scan UUID. format: "uuid"
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.resolution string Optional Target device type. enum: ["desktop","mobile","tablet"]; default: "desktop"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "scan_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Search URL scans — cloudflare.urlscanner-search-scans-v2

Run Search URL scans with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
query object Optional additionalProperties: false
query.size integer Optional Limit the number of objects in the response.
query.q string Optional Filter scans

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Vectorize Indexes — cloudflare.vectorize-list-vectorize-indexes

Run List Vectorize Indexes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Vectorize Index — cloudflare.vectorize-create-vectorize-index

Run Create Vectorize Index with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"
body — Required $ref: "#/definitions/vectorize_create-index-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "example-index",
    "config": {
      "dimensions": 768,
      "metric": "cosine"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Vectorize Index — cloudflare.vectorize-delete-vectorize-index

Run Delete Vectorize Index with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"
path.index_name — Required $ref: "#/definitions/vectorize_index-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "index_name": "example-index"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Vectorize Index — cloudflare.vectorize-get-vectorize-index

Run Get Vectorize Index with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"
path.index_name — Required $ref: "#/definitions/vectorize_index-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "index_name": "example-index"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Vectors By Identifier — cloudflare.vectorize-delete-vectors-by-id

Run Delete Vectors By Identifier with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"
path.index_name — Required $ref: "#/definitions/vectorize_index-name"
body — Required $ref: "#/definitions/vectorize_index-delete-vectors-by-id-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "index_name": "example-index"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Vectors By Identifier — cloudflare.vectorize-get-vectors-by-id

Run Get Vectors By Identifier with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"
path.index_name — Required $ref: "#/definitions/vectorize_index-name"
body — Required $ref: "#/definitions/vectorize_index-get-vectors-by-id-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "index_name": "example-index"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Vectorize Index Info — cloudflare.vectorize-index-info

Run Get Vectorize Index Info with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"
path.index_name — Required $ref: "#/definitions/vectorize_index-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "index_name": "example-index"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Vectors — cloudflare.vectorize-list-vectors

Run List Vectors with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"
path.index_name — Required $ref: "#/definitions/vectorize_index-name"
query object Optional additionalProperties: false
query.count integer Optional Maximum number of vectors to return default: 100; minimum: 1; maximum: 1000
query.cursor string Optional Cursor for pagination to get the next page of results

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "index_name": "example-index"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Metadata Index — cloudflare.vectorize-create-metadata-index

Run Create Metadata Index with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"
path.index_name — Required $ref: "#/definitions/vectorize_index-name"
body — Required $ref: "#/definitions/vectorize_create-metadata-index-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "index_name": "example-index"
  },
  "body": {
    "propertyName": "random_metadata_property",
    "indexType": "string"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Metadata Index — cloudflare.vectorize-delete-metadata-index

Run Delete Metadata Index with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"
path.index_name — Required $ref: "#/definitions/vectorize_index-name"
body — Required $ref: "#/definitions/vectorize_delete-metadata-index-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "index_name": "example-index"
  },
  "body": {
    "propertyName": "random_metadata_property"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Metadata Indexes — cloudflare.vectorize-list-metadata-indexes

Run List Metadata Indexes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"
path.index_name — Required $ref: "#/definitions/vectorize_index-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "index_name": "example-index"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query Vectors — cloudflare.vectorize-query-vector

Run Query Vectors with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/vectorize_identifier"
path.index_name — Required $ref: "#/definitions/vectorize_index-name"
body — Required $ref: "#/definitions/vectorize_index-query-v2-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "index_name": "example-index"
  },
  "body": {
    "vector": [
      0.5,
      0.5,
      0.5
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List credential sets — cloudflare.list-credential-sets

Run List credential sets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Number of results per page. default: 20; minimum: 5; maximum: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create credential set — cloudflare.create-credential-set

Run Create credential set with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
body — Required $ref: "#/definitions/vuln_scanner_create-credential-set-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Production API credentials"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete credential set — cloudflare.delete-credential-set

Run Delete credential set with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.credential_set_id string Required Credential set identifier. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "credential_set_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get credential set — cloudflare.get-credential-set

Run Get credential set with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.credential_set_id string Required Credential set identifier. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "credential_set_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit credential set — cloudflare.edit-credential-set

Run Edit credential set with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.credential_set_id string Required Credential set identifier. format: "uuid"
body — Required $ref: "#/definitions/vuln_scanner_patch-credential-set-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "credential_set_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update credential set — cloudflare.update-credential-set

Run Update credential set with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.credential_set_id string Required Credential set identifier. format: "uuid"
body — Required $ref: "#/definitions/vuln_scanner_update-credential-set-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "credential_set_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "Production API credentials"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List credentials — cloudflare.list-credentials

Run List credentials with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.credential_set_id string Required Credential set identifier. format: "uuid"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Number of results per page. default: 20; minimum: 5; maximum: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "credential_set_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create credential — cloudflare.create-credential

Run Create credential with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.credential_set_id string Required Credential set identifier. format: "uuid"
body — Required $ref: "#/definitions/vuln_scanner_create-credential-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "credential_set_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "Admin API key",
    "location": "header",
    "location_name": "Authorization",
    "value": "Bearer EXAMPLE_TOKEN"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete credential — cloudflare.delete-credential

Run Delete credential with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.credential_set_id string Required Credential set identifier. format: "uuid"
path.credential_id string Required Credential identifier. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "credential_set_id": "00000000-0000-4000-8000-000000000000",
    "credential_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get credential — cloudflare.get-credential

Run Get credential with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.credential_set_id string Required Credential set identifier. format: "uuid"
path.credential_id string Required Credential identifier. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "credential_set_id": "00000000-0000-4000-8000-000000000000",
    "credential_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit credential — cloudflare.edit-credential

Run Edit credential with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.credential_set_id string Required Credential set identifier. format: "uuid"
path.credential_id string Required Credential identifier. format: "uuid"
body — Required $ref: "#/definitions/vuln_scanner_patch-credential-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "credential_set_id": "00000000-0000-4000-8000-000000000000",
    "credential_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update credential — cloudflare.update-credential

Run Update credential with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.credential_set_id string Required Credential set identifier. format: "uuid"
path.credential_id string Required Credential identifier. format: "uuid"
body — Required $ref: "#/definitions/vuln_scanner_update-credential-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "credential_set_id": "00000000-0000-4000-8000-000000000000",
    "credential_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "Admin API key",
    "location": "header",
    "location_name": "Authorization",
    "value": "Bearer EXAMPLE_TOKEN"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List scans — cloudflare.list-scans

Run List scans with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Number of results per page. default: 20; minimum: 5; maximum: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create scan — cloudflare.create-scan

Run Create scan with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
body — Required $ref: "#/definitions/vuln_scanner_create-scan-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "target_environment_id": "00000000-0000-4000-8000-000000000000",
    "scan_type": "bola",
    "open_api": "example",
    "credential_sets": {
      "owner": "00000000-0000-4000-8000-000000000000",
      "attacker": "00000000-0000-4000-8000-000000000000"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete scan — cloudflare.delete-scan

Run Delete scan with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.scan_id string Required Scan identifier. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "scan_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get scan — cloudflare.get-scan

Run Get scan with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.scan_id string Required Scan identifier. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "scan_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List target environments — cloudflare.list-target-environments

Run List target environments with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Number of results per page. default: 20; minimum: 5; maximum: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create target environment — cloudflare.create-target-environment

Run Create target environment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
body — Required $ref: "#/definitions/vuln_scanner_create-target-environment-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Production Zone",
    "target": {
      "type": "zone",
      "zone_tag": "d8e8fca2dc0f896fd7cb4cb0031ba249"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete target environment — cloudflare.delete-target-environment

Run Delete target environment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.target_environment_id string Required Target environment identifier. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "target_environment_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get target environment — cloudflare.get-target-environment

Run Get target environment with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.target_environment_id string Required Target environment identifier. format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "target_environment_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit target environment — cloudflare.edit-target-environment

Run Edit target environment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.target_environment_id string Required Target environment identifier. format: "uuid"
body — Required $ref: "#/definitions/vuln_scanner_patch-target-environment-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "target_environment_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update target environment — cloudflare.update-target-environment

Run Update target environment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required Account identifier. $ref: "#/definitions/vuln_scanner_identifier"
path.target_environment_id string Required Target environment identifier. format: "uuid"
body — Required $ref: "#/definitions/vuln_scanner_update-target-environment-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "target_environment_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "name": "Production Zone",
    "target": {
      "type": "zone",
      "zone_tag": "d8e8fca2dc0f896fd7cb4cb0031ba249"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List waiting rooms for account — cloudflare.waiting-room-list-waiting-rooms-account

Run List waiting rooms for account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/waitingroom_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. Must be a multiple of 5. default: 25; minimum: 5; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Mesh nodes — cloudflare.cloudflare-tunnel-list-warp-connector-tunnels

Run List Mesh nodes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
query object Optional additionalProperties: false
query.name string Optional A user-friendly name for the tunnel.
query.is_deleted boolean Optional If true, only include deleted tunnels. If false, exclude deleted tunnels. If empty, all tunnels will be included.
query.existed_at — Optional $ref: "#/definitions/tunnel_existed_at"
query.uuid — Optional $ref: "#/definitions/tunnel_tunnel_id"
query.was_active_at string Optional format: "date-time"
query.was_inactive_at string Optional format: "date-time"
query.include_prefix string Optional
query.exclude_prefix string Optional
query.status — Optional $ref: "#/definitions/tunnel_status"
query.per_page — Optional $ref: "#/definitions/tunnel_per_page"
query.page — Optional $ref: "#/definitions/tunnel_page_number"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Mesh node — cloudflare.cloudflare-tunnel-create-a-warp-connector-tunnel

Run Create a Mesh node with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
body object Required
body.ha boolean Optional Indicates that the tunnel will be created to be highly available. If omitted, defaults to false. default: false
body.name — Required $ref: "#/definitions/tunnel_tunnel_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "blog"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Mesh node — cloudflare.cloudflare-tunnel-delete-a-warp-connector-tunnel

Run Delete a Mesh node with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Mesh node — cloudflare.cloudflare-tunnel-get-a-warp-connector-tunnel

Run Get a Mesh node with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Mesh node — cloudflare.cloudflare-tunnel-update-a-warp-connector-tunnel

Run Update a Mesh node with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"
body object Required
body.name — Optional $ref: "#/definitions/tunnel_tunnel_name"
body.tunnel_secret — Optional $ref: "#/definitions/tunnel_tunnel_secret"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Mesh node HA configuration — cloudflare.cloudflare-tunnel-configuration-get-warp-connector-configuration

Run Get Mesh node HA configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_identifier"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Mesh node HA configuration — cloudflare.cloudflare-tunnel-configuration-update-warp-connector-configuration

Run Update Mesh node HA configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_identifier"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id-2"
body — Required $ref: "#/definitions/tunnel_mesh_configuration_request_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "ha_mode": "aws"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Mesh node connections — cloudflare.cloudflare-tunnel-list-warp-connector-tunnel-connections

Run List Mesh node connections with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Mesh node connector — cloudflare.cloudflare-tunnel-get-warp-connector-tunnel-connector

Run Get a Mesh node connector with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"
path.connector_id — Required $ref: "#/definitions/tunnel_client_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
    "connector_id": "1bedc50d-42b3-473c-b108-ff3d10c0d925"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger a manual failover for a Mesh node — cloudflare.cloudflare-tunnel-manual-failover-warp-connector-tunnel

Run Trigger a manual failover for a Mesh node with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"
body object Required
body.client_id — Required
body.client_id — Required allOf[1]; $ref: "#/definitions/tunnel_client_id_input"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  },
  "body": {
    "client_id": "1bedc50d-42b3-473c-b108-ff3d10c0d925"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Mesh node token — cloudflare.cloudflare-tunnel-get-a-warp-connector-tunnel-token

Run Get a Mesh node token with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.tunnel_id — Required $ref: "#/definitions/tunnel_tunnel_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "tunnel_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch Workers Account Settings — cloudflare.worker-account-settings-fetch-worker-account-settings

Run Fetch Workers Account Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Configure Workers Account Settings — cloudflare.worker-account-settings-create-worker-account-settings

Run Configure Workers Account Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
body — Required $ref: "#/definitions/workers_account-settings"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Workers for Platforms Dispatch Namespaces — cloudflare.namespace-worker-list

Run List Workers for Platforms Dispatch Namespaces with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Workers for Platforms Dispatch Namespace — cloudflare.namespace-worker-create

Run Create Workers for Platforms Dispatch Namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
body object Required
body.name string Optional The name of the dispatch namespace.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Workers for Platforms Dispatch Namespace — cloudflare.namespace-worker-delete-namespace

Run Delete Workers for Platforms Dispatch Namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workers for Platforms Dispatch Namespace — cloudflare.namespace-worker-get-namespace

Run Get Workers for Platforms Dispatch Namespace with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Workers for Platforms Dispatch Namespace — cloudflare.namespace-worker-patch-namespace

Run Patch Workers for Platforms Dispatch Namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
body object Required
body.name string Optional The name of the dispatch namespace.
body.trusted_workers — Optional $ref: "#/definitions/workers_trusted_workers"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Workers for Platforms Dispatch Namespace — cloudflare.namespace-worker-put-namespace

Run Update Workers for Platforms Dispatch Namespace with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
body object Required
body.name string Optional The name of the dispatch namespace.
body.trusted_workers — Optional $ref: "#/definitions/workers_trusted_workers"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Workers for Platforms Scripts — cloudflare.namespace-worker-delete-scripts

Run Delete Workers for Platforms Scripts with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
query object Required additionalProperties: false
query.tags string Required Filter scripts by tags before deletion. Format: comma-separated list of tag:allowed pairs where allowed is 'yes' or 'no'.
query.limit integer Optional Limit the number of scripts to delete.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace"
  },
  "query": {
    "tags": "production:yes,staging:no"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Workers for Platforms Scripts — cloudflare.namespace-worker-list-scripts

Run List Workers for Platforms Scripts with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
query object Optional additionalProperties: false
query.tags string Optional Filter scripts by tags. Format: comma-separated list of tag:allowed pairs where allowed is 'yes' or 'no'.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Workers for Platforms Script — cloudflare.namespace-worker-script-delete-worker

Run Delete Workers for Platforms Script with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"
query object Optional additionalProperties: false
query.force boolean Optional If true, delete the script even when other Workers still reference it. Service bindings in those Workers may be left broken. Durable Object namespaces implemented by the deleted script are deleted even if other Workers reference them.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workers for Platforms Script details — cloudflare.namespace-worker-script-worker-details

Run Get Workers for Platforms Script details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Workers for Platforms Assets Upload Session — cloudflare.namespace-worker-script-update-create-assets-upload-session

Run Create Workers for Platforms Assets Upload Session with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"
body — Required $ref: "#/definitions/workers_create-assets-upload-session-object"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01"
  },
  "body": {
    "manifest": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workers for Platforms Script Bindings — cloudflare.namespace-worker-get-script-bindings

Run Get Workers for Platforms Script Bindings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workers for Platforms Script Content — cloudflare.namespace-worker-get-script-content

Run Get Workers for Platforms Script Content with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Workers for Platforms Script Secrets — cloudflare.namespace-worker-list-script-secrets

Run List Workers for Platforms Script Secrets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add a secret to a Workers for Platforms script — cloudflare.namespace-worker-put-script-secrets

Run Add a secret to a Workers for Platforms script with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"
body — Required $ref: "#/definitions/workers_secret"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01"
  },
  "body": {
    "name": "myBinding",
    "type": "secret_text",
    "text": "My secret."
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch multiple Workers for Platforms script secrets — cloudflare.namespace-worker-patch-script-secrets-bulk

Run Patch multiple Workers for Platforms script secrets with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"
body — Required $ref: "#/definitions/workers_secret-patch-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Workers for Platforms script secret — cloudflare.namespace-worker-delete-script-secret

Run Delete Workers for Platforms script secret with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"
path.secret_name — Required $ref: "#/definitions/workers_secret_name"
query object Optional additionalProperties: false
query.url_encoded — Optional $ref: "#/definitions/workers_secret_name_url_encoded"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01",
    "secret_name": "mySecret"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workers for Platforms Script Secret — cloudflare.namespace-worker-get-script-secrets

Run Get Workers for Platforms Script Secret with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"
path.secret_name — Required $ref: "#/definitions/workers_secret_name"
query object Optional additionalProperties: false
query.url_encoded — Optional $ref: "#/definitions/workers_secret_name_url_encoded"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01",
    "secret_name": "mySecret"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workers for Platforms Script Settings — cloudflare.namespace-worker-get-script-settings

Run Get Workers for Platforms Script Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Workers for Platforms Script Tags — cloudflare.namespace-worker-get-script-tags

Run List Workers for Platforms Script Tags with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace Workers for Platforms Script Tags — cloudflare.namespace-worker-put-script-tags

Run Replace Workers for Platforms Script Tags with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"
body — Required $ref: "#/definitions/workers_tags"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01"
  },
  "body": [
    "my-team",
    "my-public-api"
  ]
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Workers for Platforms Script Tag — cloudflare.namespace-worker-patch-script-tag

Run Update Workers for Platforms Script Tag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"
path.tag — Required Tag key. Cloudflare-reserved prefixes are not accepted. $ref: "#/definitions/workers_typed_tag_key"
headers object Optional additionalProperties: false
headers.api-version string Optional Requested API compatibility date in YYYY-MM-DD[.release] format (UTC). The optional release suffix contains lowercase letters; for example, 2026-10-01.epoch. Typed Worker tag operations require a date on or after 2026-10-01. pattern: "^\\d{4}-\\d{2}-\\d{2}(\\.[a-z]+)?$"
body — Required $ref: "#/definitions/workers_tag_patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01",
    "tag": "environment"
  },
  "body": {
    "value": "production"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Workers for Platforms Script Tag — cloudflare.namespace-worker-put-script-tag

Run Create Workers for Platforms Script Tag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.dispatch_namespace — Required $ref: "#/definitions/workers_dispatch_namespace_name"
path.script_name — Required $ref: "#/definitions/workers_script_name"
path.tag — Required $ref: "#/definitions/workers_tag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "dispatch_namespace": "my-dispatch-namespace",
    "script_name": "this-is_my_script-01",
    "tag": "my-tag"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Worker Domains — cloudflare.workers.domains.list

Run List Worker Domains with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
query object Optional additionalProperties: false
query.zone_id string Optional ID of the zone containing the domain hostname.
query.zone_name string Optional Name of the zone containing the domain hostname.
query.service string Optional Name of the Worker associated with the domain.
query.hostname string Optional Hostname of the domain.
query.environment string Optional Worker environment associated with the domain.
query.previews_enabled boolean Optional Whether previews are routable for the domain.
query.enabled boolean Optional Whether the configured hostname is routable for the domain.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Attach Worker Domain — cloudflare.workers.domains.update

Run Attach Worker Domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/workers_Domain"
body object Required allOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "zone_id": "593c9c94de529bbbfaac7c53ced0447d",
    "zone_name": "example.com",
    "hostname": "example",
    "service": "example",
    "previews_enabled": false,
    "enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Detach Worker Domain — cloudflare.workers.domains.delete

Run Detach Worker Domain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.domain_id string Required ID of the domain.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_id": "dbe10b4bc17c295377eabd600e1787fd"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Domain — cloudflare.workers.domains.get

Run Get Worker Domain with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.domain_id string Required ID of the domain.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "domain_id": "dbe10b4bc17c295377eabd600e1787fd"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Durable Object Namespaces — cloudflare.durable-objects-namespace-list-namespaces

Run List Durable Object Namespaces with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
query object Optional additionalProperties: false
query.page integer Optional Current page. default: 1; minimum: 1
query.per_page integer Optional Items per-page. default: 20; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Objects in a Durable Object namespace — cloudflare.durable-objects-namespace-list-objects

Run List Objects in a Durable Object namespace with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.id — Required $ref: "#/definitions/workers_schemas-id"
query object Optional additionalProperties: false
query.limit number Optional The number of objects to return. The cursor attribute may be used to iterate over the next batch of objects if there are more than the limit. default: 1000; minimum: 10; maximum: 10000
query.cursor string Optional Opaque token indicating the position from which to continue when requesting the next set of records. A valid value for the cursor can be obtained from the cursors object in the result_info structure.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "5fd1cafff895419c8bcc647fc64ab8f0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query a Durable Object — cloudflare.durable-objects-namespace-query

Run Query a Durable Object with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.id — Required $ref: "#/definitions/workers_schemas-id"
body — Required
body — Required oneOf[1]; $ref: "#/definitions/workers_query-by-id"
body — Required oneOf[2]; $ref: "#/definitions/workers_query-by-name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "id": "5fd1cafff895419c8bcc647fc64ab8f0"
  },
  "body": {
    "durable_object_id": "example",
    "queries": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Agent sessions — cloudflare.agents.sessions.list

Run List Agent sessions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
query object Required additionalProperties: false
query.service string Required Worker service name associated with the participating agent. minLength: 1; maxLength: 512
query.agent string Required Agent name reported in gen_ai.agent.name. The request is limited to conversations in which this service and agent participated. minLength: 1; maxLength: 512
query.from integer Required Start of the requested time range, as Unix epoch milliseconds. Values earlier than the 7-day retention boundary are clamped. minimum: 0
query.to integer Required End of the requested time range, as Unix epoch milliseconds. Must be later than from. minimum: 0
query.cursor string Optional Opaque cursor from result_info.cursors.after in the previous response. minLength: 1; maxLength: 2048
query.per_page integer Optional Maximum number of items to return. Defaults to 20 and cannot exceed 100. minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "service": "example",
    "agent": "example",
    "from": 1,
    "to": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Agent session runs — cloudflare.agents.sessions.runs.list

Run List Agent session runs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.conversationId string Required OpenTelemetry gen_ai.conversation.id value that identifies the session. minLength: 1; maxLength: 512
query object Required additionalProperties: false
query.service string Required Worker service name associated with the participating agent. minLength: 1; maxLength: 512
query.agent string Required Agent name reported in gen_ai.agent.name. The request is limited to conversations in which this service and agent participated. minLength: 1; maxLength: 512
query.from integer Required Start of the requested time range, as Unix epoch milliseconds. Values earlier than the 7-day retention boundary are clamped. minimum: 0
query.to integer Required End of the requested time range, as Unix epoch milliseconds. Must be later than from. minimum: 0
query.cursor string Optional Opaque cursor from result_info.cursors.after in the previous response. minLength: 1; maxLength: 2048
query.per_page integer Optional Maximum number of items to return. Defaults to 20 and cannot exceed 100. minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "conversationId": "example"
  },
  "query": {
    "service": "example",
    "agent": "example",
    "from": 1,
    "to": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Destinations — cloudflare.destination.list

Run Get Destinations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
query object Optional additionalProperties: false
query.page number Optional default: 1; minimum: 1
query.perPage number Optional default: 20; minimum: 5; maximum: 50
query.order string Optional enum: ["asc","desc"]; default: "desc"
query.orderBy string Optional enum: ["created","updated"]; default: "updated"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Destination — cloudflare.destination.create

Run Create Destination with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
body object Optional
body.configuration object Required
body.configuration.headers object Required additionalProperties: {"type":"string"}
body.configuration.logpushDataset — Required
body.configuration.logpushDataset string Required anyOf[1]; enum: ["opentelemetry-traces"]
body.configuration.logpushDataset string Required anyOf[2]; enum: ["opentelemetry-logs"]
body.configuration.logpushDataset string Required anyOf[3]; enum: ["opentelemetry-metrics"]
body.configuration.type string Required enum: ["logpush"]
body.configuration.url string Required
body.enabled boolean Required
body.name string Required pattern: "^[a-z0-9][a-z0-9-]*[a-z0-9]$"
body.skipPreflightCheck boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Destination — cloudflare.destinations.delete

Run Delete Destination with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.slug string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "slug": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Destination — cloudflare.destination.update

Run Update Destination with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.slug string Required
body object Optional
body.configuration object Optional
body.configuration.headers object Required additionalProperties: {"type":["string","null"]}
body.configuration.replaceHeaders boolean Optional
body.configuration.type string Required enum: ["logpush"]
body.configuration.url string Required
body.enabled boolean Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "slug": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List detected issues — cloudflare.issues.list

Run List detected issues with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
query object Optional additionalProperties: false
query.page integer Optional minimum: 1
query.perPage integer Optional minimum: 1; maximum: 100
query.order string Optional enum: ["asc","desc"]
query.orderBy string Optional enum: ["id","service","title","type","status","statusUpdated","count","firstObserved","lastObserved","created","updated"]
query.search string Optional maxLength: 256
query.service string Optional
query.type string Optional minLength: 1; maxLength: 32
query.status string Optional enum: ["active","resolved","ignored"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List issue automations — cloudflare.issues.automations.list

Run List issue automations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
query object Optional additionalProperties: false
query.service string Optional minLength: 1; maxLength: 128

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an issue automation — cloudflare.issues.automations.create

Run Create an issue automation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
body object Required additionalProperties: false
body.afterInactivitySeconds integer Optional minimum: 3600; maximum: 31536000
body.afterOccurrences integer Optional minimum: 1; maximum: 9007199254740991
body.enabled boolean Optional
body.name string Optional minLength: 1; maxLength: 200
body.policyId string Required minLength: 1; maxLength: 200
body.service string Optional minLength: 1; maxLength: 128

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "policyId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an issue automation — cloudflare.issues.automations.delete

Run Delete an issue automation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.automationId string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "automationId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an issue automation — cloudflare.issues.automations.get

Run Get an issue automation with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.automationId string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "automationId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an issue automation — cloudflare.issues.automations.update

Run Update an issue automation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.automationId string Required minLength: 1
body object Required additionalProperties: false
body.afterInactivitySeconds integer Optional minimum: 3600; maximum: 31536000
body.afterOccurrences integer Optional minimum: 1; maximum: 9007199254740991
body.enabled boolean Optional
body.name string Optional minLength: 1; maxLength: 200
body.policyId string Required minLength: 1; maxLength: 200
body.service string Optional minLength: 1; maxLength: 128

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "automationId": "example"
  },
  "body": {
    "policyId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an issue group — cloudflare.issues.groups.create

Run Create an issue group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
body object Required
body.issueIds array Required minItems: 2; maxItems: 100
body.issueIds[] string Optional minLength: 1
body.title string Required minLength: 1; maxLength: 128

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "title": "example",
    "issueIds": [
      "example",
      "example"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Dissolve an issue group — cloudflare.issues.groups.delete

Run Dissolve an issue group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.groupId string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "groupId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add issue group members — cloudflare.issues.groups.members.add

Run Add issue group members with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.groupId string Required minLength: 1
body object Required
body.issueIds array Required minItems: 1; maxItems: 100
body.issueIds[] string Optional minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "groupId": "example"
  },
  "body": {
    "issueIds": [
      "example"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove an issue group member — cloudflare.issues.groups.members.remove

Run Remove an issue group member with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.groupId string Required minLength: 1
path.issueId string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "groupId": "example",
    "issueId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Summarize detected issues — cloudflare.issues.summary

Run Summarize detected issues with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
query object Optional additionalProperties: false
query.service string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an issue — cloudflare.issues.get

Run Get an issue with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.issueId string Required minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "issueId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Modify an issue — cloudflare.issues.patch

Run Modify an issue with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.issueId string Required minLength: 1
body object Required
body.status string Optional enum: ["active","resolved","ignored"]
body.title string Optional minLength: 1; maxLength: 128

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "issueId": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Notify about an issue — cloudflare.issues.notificationruns.create

Run Notify about an issue with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.issueId string Required minLength: 1
body object Required additionalProperties: false
body.policyId string Optional minLength: 1; maxLength: 200

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "issueId": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List issue occurrences — cloudflare.issues.occurrences.list

Run List issue occurrences with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.issueId string Required Issue ID returned by the issues API. minLength: 1
query object Optional additionalProperties: false
query.cursor string Optional Opaque cursor returned in result_info.cursors.after. minLength: 1; maxLength: 512
query.per_page integer Optional minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "issueId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Metrics Exports — cloudflare.metricsexport.list

Run List Metrics Exports with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Upsert Metrics Exports — cloudflare.metricsexport.upsert

Run Upsert Metrics Exports with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
body object Optional additionalProperties: false
body.requester object Required additionalProperties: false
body.requester.requesterId string Required minLength: 1
body.requester.requesterType string Required enum: ["workers"]
body.resources array Required
body.resources[] object Optional additionalProperties: false
body.resources[].destinations array Required minItems: 1
body.resources[].destinations[] string Optional minLength: 1
body.resources[].resourceId string Required minLength: 1
body.resources[].resourceType string Required enum: ["workers","d1","r2","containers"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List queries — cloudflare.queries.list

Run List queries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
query object Optional additionalProperties: false
query.page number Optional default: 1; minimum: 1
query.perPage number Optional default: 20; minimum: 5; maximum: 50
query.order string Optional enum: ["asc","desc"]; default: "desc"
query.orderBy string Optional enum: ["created","updated"]; default: "updated"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Save query — cloudflare.queries.post

Run Save query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
body object Required
body.description string | null Required maxLength: 1000
body.name string Required Query name minLength: 1; maxLength: 250
body.parameters object Required
body.parameters.calculations array Optional Create Calculations to compute as part of the query.
body.parameters.calculations[] — Optional
body.parameters.calculations[] object Optional oneOf[1]
body.parameters.calculations[].alias string Optional oneOf[1]
body.parameters.calculations[].key string Optional oneOf[1]
body.parameters.calculations[].keyType string Optional oneOf[1]; enum: ["string","number","boolean"]
body.parameters.calculations[].operator string Required oneOf[1]; enum: ["count","COUNT"]
body.parameters.calculations[] object Optional oneOf[2]
body.parameters.calculations[].alias string Optional oneOf[2]
body.parameters.calculations[].key string Required oneOf[2]; pattern: "\\S"
body.parameters.calculations[].keyType string Optional oneOf[2]; enum: ["string","number","boolean"]
body.parameters.calculations[].operator string Required oneOf[2]; enum: ["uniq","max","min","sum","avg","median","p001","p01","p05","p10","p25","p75","p90","p95","p99","p999","stddev","variance","COUNT_DISTINCT","MAX","MIN","SUM","AVG","MEDIAN","P001","P01","P05","P10","P25","P75","P90","P95","P99","P999","STDDEV","VARIANCE"]
body.parameters.datasets array Optional Set the Datasets to query. Leave it empty to query all the datasets.
body.parameters.datasets[] string Optional
body.parameters.filterCombination string Optional Set a Flag to describe how to combine the filters on the query. enum: ["and","or","AND","OR"]
body.parameters.filters array Optional Configure the Filters to apply to the query. Supports nested groups via kind: 'group'.
body.parameters.filters[] — Optional $ref: "#/definitions/workers-observability_filter_node"
body.parameters.groupBys array Optional Define how to group the results of the query.
body.parameters.groupBys[] object Optional
body.parameters.groupBys[].type string Required enum: ["string","number","boolean"]
body.parameters.groupBys[].value string Required
body.parameters.havings array Optional Configure the Having clauses that filter on calculations in the query result.
body.parameters.havings[] object Optional
body.parameters.havings[].key string Required
body.parameters.havings[].operation string Required enum: ["eq","neq","gt","gte","lt","lte"]
body.parameters.havings[].value number Required
body.parameters.limit integer Optional Set a limit on the number of results / records returned by the query minimum: 0; maximum: 100
body.parameters.needle object Optional Define an expression to search using full-text search.
body.parameters.needle.isRegex boolean Optional
body.parameters.needle.matchCase boolean Optional
body.parameters.needle.value — Required
body.parameters.needle.value — Required allOf[1]
body.parameters.needle.value string Required allOf[1]; anyOf[1]
body.parameters.needle.value number Required allOf[1]; anyOf[2]
body.parameters.needle.value boolean Required allOf[1]; anyOf[3]
body.parameters.needle.value string Required allOf[2]; maxLength: 1000
body.parameters.orderBy object Optional Configure the order of the results returned by the query.
body.parameters.orderBy.order string Optional Set the order of the results enum: ["asc","desc"]
body.parameters.orderBy.value string Required Configure which Calculation to order the results by.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "description": "Query description",
    "name": "example",
    "parameters": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete query — cloudflare.queries.delete

Run Delete query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.queryId string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "queryId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get query — cloudflare.queries.get

Run Get query with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.queryId string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "queryId": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update query — cloudflare.queries.patch

Run Update query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.queryId string Required
body object Required
body.description string | null Required maxLength: 1000
body.name string Required Query name minLength: 1; maxLength: 250
body.parameters object Required
body.parameters.calculations array Optional Create Calculations to compute as part of the query.
body.parameters.calculations[] — Optional
body.parameters.calculations[] object Optional oneOf[1]
body.parameters.calculations[].alias string Optional oneOf[1]
body.parameters.calculations[].key string Optional oneOf[1]
body.parameters.calculations[].keyType string Optional oneOf[1]; enum: ["string","number","boolean"]
body.parameters.calculations[].operator string Required oneOf[1]; enum: ["count","COUNT"]
body.parameters.calculations[] object Optional oneOf[2]
body.parameters.calculations[].alias string Optional oneOf[2]
body.parameters.calculations[].key string Required oneOf[2]; pattern: "\\S"
body.parameters.calculations[].keyType string Optional oneOf[2]; enum: ["string","number","boolean"]
body.parameters.calculations[].operator string Required oneOf[2]; enum: ["uniq","max","min","sum","avg","median","p001","p01","p05","p10","p25","p75","p90","p95","p99","p999","stddev","variance","COUNT_DISTINCT","MAX","MIN","SUM","AVG","MEDIAN","P001","P01","P05","P10","P25","P75","P90","P95","P99","P999","STDDEV","VARIANCE"]
body.parameters.datasets array Optional Set the Datasets to query. Leave it empty to query all the datasets.
body.parameters.datasets[] string Optional
body.parameters.filterCombination string Optional Set a Flag to describe how to combine the filters on the query. enum: ["and","or","AND","OR"]
body.parameters.filters array Optional Configure the Filters to apply to the query. Supports nested groups via kind: 'group'.
body.parameters.filters[] — Optional $ref: "#/definitions/workers-observability_filter_node"
body.parameters.groupBys array Optional Define how to group the results of the query.
body.parameters.groupBys[] object Optional
body.parameters.groupBys[].type string Required enum: ["string","number","boolean"]
body.parameters.groupBys[].value string Required
body.parameters.havings array Optional Configure the Having clauses that filter on calculations in the query result.
body.parameters.havings[] object Optional
body.parameters.havings[].key string Required
body.parameters.havings[].operation string Required enum: ["eq","neq","gt","gte","lt","lte"]
body.parameters.havings[].value number Required
body.parameters.limit integer Optional Set a limit on the number of results / records returned by the query minimum: 0; maximum: 100
body.parameters.needle object Optional Define an expression to search using full-text search.
body.parameters.needle.isRegex boolean Optional
body.parameters.needle.matchCase boolean Optional
body.parameters.needle.value — Required
body.parameters.needle.value — Required allOf[1]
body.parameters.needle.value string Required allOf[1]; anyOf[1]
body.parameters.needle.value number Required allOf[1]; anyOf[2]
body.parameters.needle.value boolean Required allOf[1]; anyOf[3]
body.parameters.needle.value string Required allOf[2]; maxLength: 1000
body.parameters.orderBy object Optional Configure the order of the results returned by the query.
body.parameters.orderBy.order string Optional Set the order of the results enum: ["asc","desc"]
body.parameters.orderBy.value string Required Configure which Calculation to order the results by.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "queryId": "example"
  },
  "body": {
    "description": "Query description",
    "name": "example",
    "parameters": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a sharable link to a query result — cloudflare.shared.query.post

Run Create a sharable link to a query result with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
body object Required
body.chart boolean Optional When true, includes time-series data in the response.
body.chartType string Optional Controls the SQL shape and response payload for the 'calculations' view. Omitted or 'timeseries_and_aggregate': current behaviour — both the time-series and aggregate queries. 'timeseries': time-series only. 'aggregate': aggregate only. 'distribution': a bucketed 2D histogram (time × value buckets) returned in 'distribution' instead of 'calculations'. 'distribution' is not compatible with 'compare' — combining them returns a 400. enum: ["timeseries_and_aggregate","timeseries","aggregate","distribution"]
body.compare boolean Optional When true, includes a comparison dataset from the previous time period of equal length.
body.distributionScale string Optional Value-axis bucketing for chartType 'distribution'. Omitted or 'log': geometric buckets, best for heavy-tailed latency. 'linear': fixed-width buckets, clearer for narrow or additive ranges. Ignored for other chartTypes. The response echoes the scheme used in distribution.bucketMode. enum: ["log","linear"]
body.dry boolean Optional When true, executes the query without persisting the results. Useful for validation or previewing. default: false
body.granularity number Optional Number of time-series buckets. Only used when view is 'calculations'. Omit to let the system auto-detect an appropriate granularity.
body.ignoreSeries boolean Optional When true, omits time-series data from the response and returns only aggregated values. Reduces response size when series are not needed. default: false
body.limit number Optional Maximum number of events to return when view is 'events'. Also controls the number of group-by rows when view is 'calculations'. default: 50; maximum: 2000
body.offset string Optional Cursor for pagination in event, trace, invocation, and agent views. Pass the $metadata.id of the last event, the trace cursor, or AgentRun.id to fetch the next page.
body.offsetBy number Optional Numeric offset for paginating grouped/pattern results (top-N lists). Use together with limit. Not used by cursor-based pagination.
body.offsetDirection string Optional Pagination direction: 'next' for forward, 'prev' for backward.
body.parameters object Optional Query parameters defining what data to retrieve — filters, calculations, group-bys, and ordering. In practice this should always be provided for ad-hoc queries. Only omit when executing a previously saved query by queryId. Use the keys and values endpoints to discover available fields before building filters.
body.parameters.calculations array Optional Aggregation calculations to compute (e.g. count, avg, p99). Each calculation produces aggregate values and optional time-series data.
body.parameters.calculations[] — Optional
body.parameters.calculations[] object Optional oneOf[1]
body.parameters.calculations[].alias string Optional Custom label for this calculation in the results. Useful for distinguishing multiple calculations. oneOf[1]
body.parameters.calculations[].key string Optional Field name to calculate over. Must exist in the data. Verify with the keys endpoint. Required for every operator except count, which aggregates whole rows and may omit it. oneOf[1]
body.parameters.calculations[].keyType string Optional Data type of the key. Required when key is provided to ensure correct aggregation. oneOf[1]; enum: ["string","number","boolean"]
body.parameters.calculations[].operator string Required Aggregation operator to apply. Examples: count, avg, sum, min, max, median, p90, p95, p99, uniq, stddev, variance. oneOf[1]; enum: ["count","COUNT"]
body.parameters.calculations[] object Optional oneOf[2]
body.parameters.calculations[].alias string Optional Custom label for this calculation in the results. Useful for distinguishing multiple calculations. oneOf[2]
body.parameters.calculations[].key string Required Field name to calculate over. Must exist in the data. Verify with the keys endpoint. Required for every operator except count, which aggregates whole rows and may omit it. oneOf[2]; pattern: "\\S"
body.parameters.calculations[].keyType string Optional Data type of the key. Required when key is provided to ensure correct aggregation. oneOf[2]; enum: ["string","number","boolean"]
body.parameters.calculations[].operator string Required Aggregation operator to apply. Examples: count, avg, sum, min, max, median, p90, p95, p99, uniq, stddev, variance. oneOf[2]; enum: ["uniq","max","min","sum","avg","median","p001","p01","p05","p10","p25","p75","p90","p95","p99","p999","stddev","variance","COUNT_DISTINCT","MAX","MIN","SUM","AVG","MEDIAN","P001","P01","P05","P10","P25","P75","P90","P95","P99","P999","STDDEV","VARIANCE"]
body.parameters.datasets array Optional Datasets to query. Leave empty to query all available datasets.
body.parameters.datasets[] string Optional
body.parameters.filterCombination string Optional Logical operator for combining top-level filters: 'and' (all must match) or 'or' (any must match). Defaults to 'and'. enum: ["and","or","AND","OR"]
body.parameters.filters array Optional Filters to narrow query results. Use the keys and values endpoints to discover available fields before building filters. Supports nested groups via kind: 'group'. Maximum nesting depth is 4.
body.parameters.filters[] — Optional
body.parameters.filters[] — Optional allOf[1]; $ref: "#/definitions/workers-observability_filter_node"
body.parameters.filters[] — Optional Supports nested groups via kind: 'group'. Maximum nesting depth is 4. allOf[2]
body.parameters.filters[] object Optional A group node that nests child filters combined with a logical operator. allOf[2]; anyOf[1]
body.parameters.filters[].filterCombination string Required Logical operator for combining child filters: 'and' (all must match) or 'or' (any must match). allOf[2]; anyOf[1]; enum: ["and","or","AND","OR"]
body.parameters.filters[].filters array Required Child filter nodes. Each can be a leaf filter or another nested group. allOf[2]; anyOf[1]; minItems: 1
body.parameters.filters[].filters[] — Optional allOf[2]; anyOf[1]; $ref: "#/definitions/workers-observability_filter_node"
body.parameters.filters[].kind string Required Discriminator indicating this is a nested filter group. allOf[2]; anyOf[1]; enum: ["group"]
body.parameters.filters[] — Optional allOf[2]; anyOf[2]; $ref: "#/definitions/workers-observability_filter_leaf"
body.parameters.groupBys array Optional Fields to group calculation results by. Only applicable when the query view is 'calculations'. Produces per-group aggregate values.
body.parameters.groupBys[] object Optional
body.parameters.groupBys[].type string Required Data type of the group-by field. enum: ["string","number","boolean"]
body.parameters.groupBys[].value string Required Field name to group results by (e.g. $metadata.service, $metadata.statusCode).
body.parameters.havings array Optional Post-aggregation filters applied to calculation results. Use to filter groups after aggregation (e.g. only groups where count > 100).
body.parameters.havings[] object Optional
body.parameters.havings[].key string Required Calculation alias or operator to filter on after aggregation.
body.parameters.havings[].operation string Required Numeric comparison operator: eq, neq, gt, gte, lt, lte. enum: ["eq","neq","gt","gte","lt","lte"]
body.parameters.havings[].value number Required Threshold value to compare the calculation result against.
body.parameters.limit integer Optional Maximum number of group-by rows to return in calculation results. A value of 10 is a sensible default for most use cases. minimum: 0; maximum: 2000
body.parameters.needle object Optional Full-text search expression applied across all event fields. Matches events containing the specified text.
body.parameters.needle.isRegex boolean Optional When true, treats the value as a regular expression (RE2 syntax).
body.parameters.needle.matchCase boolean Optional When true, performs a case-sensitive search. Defaults to case-insensitive.
body.parameters.needle.value — Required The text or pattern to search for.
body.parameters.needle.value — Required allOf[1]
body.parameters.needle.value string Required allOf[1]; anyOf[1]
body.parameters.needle.value number Required allOf[1]; anyOf[2]
body.parameters.needle.value boolean Required allOf[1]; anyOf[3]
body.parameters.needle.value string Required allOf[2]; maxLength: 1000
body.parameters.orderBy object Optional Ordering for grouped calculation results. Only effective when a group-by is present.
body.parameters.orderBy.order string Optional Sort direction: 'asc' for ascending, 'desc' for descending. enum: ["asc","desc"]
body.parameters.orderBy.value string Required Alias of the calculation to order results by. Must match the alias (or operator) of a calculation in the query.
body.queryId string Required Identifier for the query. When parameters are omitted, this ID is used to load a previously saved query's parameters. When providing parameters inline, pass any identifier (e.g. an ad-hoc ID).
body.timeframe object Required Timeframe for the query using Unix timestamps in milliseconds. 'from' must be earlier than 'to'. Narrower timeframes produce faster responses and more specific results.
body.timeframe.from integer Required Start timestamp for the query timeframe. Unix timestamp in milliseconds minimum: 0; maximum: 253402300799999
body.timeframe.to integer Required End timestamp for the query timeframe. Unix timestamp in milliseconds minimum: 0; maximum: 253402300799999
body.view string Optional Controls the shape of the response. 'events': individual log lines matching the query. 'calculations': aggregated metrics (count, avg, p99, etc.) with optional group-by breakdowns and time-series. 'invocations': events grouped by request ID. 'traces': distributed trace summaries. 'agents': agent-specific trace summaries. enum: ["traces","events","calculations","invocations","requests","agents"]; default: "calculations"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "queryId": "example",
    "timeframe": {
      "to": 1,
      "from": 1
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

View a query that has been shared — cloudflare.shared.query.get

Run View a query that has been shared with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
path.id string Required Specify the ID of the shared query.
query object Optional additionalProperties: false
query.view string Optional Select the view of the query result to return, defaults to events. enum: ["events","invocations","calculations"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List keys — cloudflare.telemetry.keys.list

Run List keys with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
body object Required
body.datasets array Optional Leave this empty to use the default datasets default: []
body.datasets[] string Optional
body.filters array Optional Apply filters to narrow key discovery. Supports nested groups via kind: 'group'. Maximum nesting depth is 4. default: []
body.filters[] — Optional
body.filters[] — Optional allOf[1]; $ref: "#/definitions/workers-observability_filter_node"
body.filters[] — Optional Supports nested groups via kind: 'group'. Maximum nesting depth is 4. allOf[2]
body.filters[] object Optional A group node that nests child filters combined with a logical operator. allOf[2]; anyOf[1]
body.filters[].filterCombination string Required Logical operator for combining child filters: 'and' (all must match) or 'or' (any must match). allOf[2]; anyOf[1]; enum: ["and","or","AND","OR"]
body.filters[].filters array Required Child filter nodes. Each can be a leaf filter or another nested group. allOf[2]; anyOf[1]; minItems: 1
body.filters[].filters[] — Optional allOf[2]; anyOf[1]; $ref: "#/definitions/workers-observability_filter_node"
body.filters[].kind string Required Discriminator indicating this is a nested filter group. allOf[2]; anyOf[1]; enum: ["group"]
body.filters[] — Optional allOf[2]; anyOf[2]; $ref: "#/definitions/workers-observability_filter_leaf"
body.from number Optional
body.keyNeedle object Optional If the user suggests a key, use this to narrow down the list of keys returned. Make sure matchCase is false to avoid case sensitivity issues.
body.keyNeedle.isRegex boolean Optional When true, treats the value as a regular expression (RE2 syntax).
body.keyNeedle.matchCase boolean Optional When true, performs a case-sensitive search. Defaults to case-insensitive.
body.keyNeedle.value — Required The text or pattern to search for.
body.keyNeedle.value — Required allOf[1]
body.keyNeedle.value string Required allOf[1]; anyOf[1]
body.keyNeedle.value number Required allOf[1]; anyOf[2]
body.keyNeedle.value boolean Required allOf[1]; anyOf[3]
body.keyNeedle.value string Required allOf[2]; maxLength: 1000
body.limit number Optional Advanced usage: set limit=1000+ to retrieve comprehensive key options without needing additional filtering.
body.needle object Optional Search for a specific substring in any of the events
body.needle.isRegex boolean Optional When true, treats the value as a regular expression (RE2 syntax).
body.needle.matchCase boolean Optional When true, performs a case-sensitive search. Defaults to case-insensitive.
body.needle.value — Required The text or pattern to search for.
body.needle.value — Required allOf[1]
body.needle.value string Required allOf[1]; anyOf[1]
body.needle.value number Required allOf[1]; anyOf[2]
body.needle.value boolean Required allOf[1]; anyOf[3]
body.needle.value string Required allOf[2]; maxLength: 1000
body.to number Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Prepare live tail — cloudflare.telemetry.live-tail.post

Run Prepare live tail with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
body object Required
body.filterCombination string Optional Set a flag to describe how to combine the filters on the query. enum: ["and","or","AND","OR"]; default: "and"
body.filters array Optional Apply filters to the query. Supports nested groups via kind: 'group'. default: []
body.filters[] — Optional
body.filters[] — Optional allOf[1]; $ref: "#/definitions/workers-observability_filter_node"
body.filters[] — Optional Supports nested groups via kind: 'group'. Maximum nesting depth is 4. allOf[2]
body.filters[] object Optional A group node that nests child filters combined with a logical operator. allOf[2]; anyOf[1]
body.filters[].filterCombination string Required Logical operator for combining child filters: 'and' (all must match) or 'or' (any must match). allOf[2]; anyOf[1]; enum: ["and","or","AND","OR"]
body.filters[].filters array Required Child filter nodes. Each can be a leaf filter or another nested group. allOf[2]; anyOf[1]; minItems: 1
body.filters[].filters[] — Optional allOf[2]; anyOf[1]; $ref: "#/definitions/workers-observability_filter_node"
body.filters[].kind string Required Discriminator indicating this is a nested filter group. allOf[2]; anyOf[1]; enum: ["group"]
body.filters[] — Optional allOf[2]; anyOf[2]; $ref: "#/definitions/workers-observability_filter_leaf"
body.scriptId string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Live tail heartbeat — cloudflare.telemetry.live-tail.heartbeat.get

Run Live tail heartbeat with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
body object Required
body.scriptId string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Run a query — cloudflare.telemetry.query

Run Run a query with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
body object Required
body.chart boolean Optional When true, includes time-series data in the response.
body.chartType string Optional Controls the SQL shape and response payload for the 'calculations' view. Omitted or 'timeseries_and_aggregate': current behaviour — both the time-series and aggregate queries. 'timeseries': time-series only. 'aggregate': aggregate only. 'distribution': a bucketed 2D histogram (time × value buckets) returned in 'distribution' instead of 'calculations'. 'distribution' is not compatible with 'compare' — combining them returns a 400. enum: ["timeseries_and_aggregate","timeseries","aggregate","distribution"]
body.compare boolean Optional When true, includes a comparison dataset from the previous time period of equal length.
body.distributionScale string Optional Value-axis bucketing for chartType 'distribution'. Omitted or 'log': geometric buckets, best for heavy-tailed latency. 'linear': fixed-width buckets, clearer for narrow or additive ranges. Ignored for other chartTypes. The response echoes the scheme used in distribution.bucketMode. enum: ["log","linear"]
body.dry boolean Optional When true, executes the query without persisting the results. Useful for validation or previewing. default: false
body.granularity number Optional Number of time-series buckets. Only used when view is 'calculations'. Omit to let the system auto-detect an appropriate granularity.
body.ignoreSeries boolean Optional When true, omits time-series data from the response and returns only aggregated values. Reduces response size when series are not needed. default: false
body.limit number Optional Maximum number of events to return when view is 'events'. Also controls the number of group-by rows when view is 'calculations'. default: 50; maximum: 2000
body.offset string Optional Cursor for pagination in event, trace, invocation, and agent views. Pass the $metadata.id of the last event, the trace cursor, or AgentRun.id to fetch the next page.
body.offsetBy number Optional Numeric offset for paginating grouped/pattern results (top-N lists). Use together with limit. Not used by cursor-based pagination.
body.offsetDirection string Optional Pagination direction: 'next' for forward, 'prev' for backward.
body.parameters object Optional Query parameters defining what data to retrieve — filters, calculations, group-bys, and ordering. In practice this should always be provided for ad-hoc queries. Only omit when executing a previously saved query by queryId. Use the keys and values endpoints to discover available fields before building filters.
body.parameters.calculations array Optional Aggregation calculations to compute (e.g. count, avg, p99). Each calculation produces aggregate values and optional time-series data.
body.parameters.calculations[] — Optional
body.parameters.calculations[] object Optional oneOf[1]
body.parameters.calculations[].alias string Optional Custom label for this calculation in the results. Useful for distinguishing multiple calculations. oneOf[1]
body.parameters.calculations[].key string Optional Field name to calculate over. Must exist in the data. Verify with the keys endpoint. Required for every operator except count, which aggregates whole rows and may omit it. oneOf[1]
body.parameters.calculations[].keyType string Optional Data type of the key. Required when key is provided to ensure correct aggregation. oneOf[1]; enum: ["string","number","boolean"]
body.parameters.calculations[].operator string Required Aggregation operator to apply. Examples: count, avg, sum, min, max, median, p90, p95, p99, uniq, stddev, variance. oneOf[1]; enum: ["count","COUNT"]
body.parameters.calculations[] object Optional oneOf[2]
body.parameters.calculations[].alias string Optional Custom label for this calculation in the results. Useful for distinguishing multiple calculations. oneOf[2]
body.parameters.calculations[].key string Required Field name to calculate over. Must exist in the data. Verify with the keys endpoint. Required for every operator except count, which aggregates whole rows and may omit it. oneOf[2]; pattern: "\\S"
body.parameters.calculations[].keyType string Optional Data type of the key. Required when key is provided to ensure correct aggregation. oneOf[2]; enum: ["string","number","boolean"]
body.parameters.calculations[].operator string Required Aggregation operator to apply. Examples: count, avg, sum, min, max, median, p90, p95, p99, uniq, stddev, variance. oneOf[2]; enum: ["uniq","max","min","sum","avg","median","p001","p01","p05","p10","p25","p75","p90","p95","p99","p999","stddev","variance","COUNT_DISTINCT","MAX","MIN","SUM","AVG","MEDIAN","P001","P01","P05","P10","P25","P75","P90","P95","P99","P999","STDDEV","VARIANCE"]
body.parameters.datasets array Optional Datasets to query. Leave empty to query all available datasets.
body.parameters.datasets[] string Optional
body.parameters.filterCombination string Optional Logical operator for combining top-level filters: 'and' (all must match) or 'or' (any must match). Defaults to 'and'. enum: ["and","or","AND","OR"]
body.parameters.filters array Optional Filters to narrow query results. Use the keys and values endpoints to discover available fields before building filters. Supports nested groups via kind: 'group'. Maximum nesting depth is 4.
body.parameters.filters[] — Optional
body.parameters.filters[] — Optional allOf[1]; $ref: "#/definitions/workers-observability_filter_node"
body.parameters.filters[] — Optional Supports nested groups via kind: 'group'. Maximum nesting depth is 4. allOf[2]
body.parameters.filters[] object Optional A group node that nests child filters combined with a logical operator. allOf[2]; anyOf[1]
body.parameters.filters[].filterCombination string Required Logical operator for combining child filters: 'and' (all must match) or 'or' (any must match). allOf[2]; anyOf[1]; enum: ["and","or","AND","OR"]
body.parameters.filters[].filters array Required Child filter nodes. Each can be a leaf filter or another nested group. allOf[2]; anyOf[1]; minItems: 1
body.parameters.filters[].filters[] — Optional allOf[2]; anyOf[1]; $ref: "#/definitions/workers-observability_filter_node"
body.parameters.filters[].kind string Required Discriminator indicating this is a nested filter group. allOf[2]; anyOf[1]; enum: ["group"]
body.parameters.filters[] — Optional allOf[2]; anyOf[2]; $ref: "#/definitions/workers-observability_filter_leaf"
body.parameters.groupBys array Optional Fields to group calculation results by. Only applicable when the query view is 'calculations'. Produces per-group aggregate values.
body.parameters.groupBys[] object Optional
body.parameters.groupBys[].type string Required Data type of the group-by field. enum: ["string","number","boolean"]
body.parameters.groupBys[].value string Required Field name to group results by (e.g. $metadata.service, $metadata.statusCode).
body.parameters.havings array Optional Post-aggregation filters applied to calculation results. Use to filter groups after aggregation (e.g. only groups where count > 100).
body.parameters.havings[] object Optional
body.parameters.havings[].key string Required Calculation alias or operator to filter on after aggregation.
body.parameters.havings[].operation string Required Numeric comparison operator: eq, neq, gt, gte, lt, lte. enum: ["eq","neq","gt","gte","lt","lte"]
body.parameters.havings[].value number Required Threshold value to compare the calculation result against.
body.parameters.limit integer Optional Maximum number of group-by rows to return in calculation results. A value of 10 is a sensible default for most use cases. minimum: 0; maximum: 2000
body.parameters.needle object Optional Full-text search expression applied across all event fields. Matches events containing the specified text.
body.parameters.needle.isRegex boolean Optional When true, treats the value as a regular expression (RE2 syntax).
body.parameters.needle.matchCase boolean Optional When true, performs a case-sensitive search. Defaults to case-insensitive.
body.parameters.needle.value — Required The text or pattern to search for.
body.parameters.needle.value — Required allOf[1]
body.parameters.needle.value string Required allOf[1]; anyOf[1]
body.parameters.needle.value number Required allOf[1]; anyOf[2]
body.parameters.needle.value boolean Required allOf[1]; anyOf[3]
body.parameters.needle.value string Required allOf[2]; maxLength: 1000
body.parameters.orderBy object Optional Ordering for grouped calculation results. Only effective when a group-by is present.
body.parameters.orderBy.order string Optional Sort direction: 'asc' for ascending, 'desc' for descending. enum: ["asc","desc"]
body.parameters.orderBy.value string Required Alias of the calculation to order results by. Must match the alias (or operator) of a calculation in the query.
body.queryId string Required Identifier for the query. When parameters are omitted, this ID is used to load a previously saved query's parameters. When providing parameters inline, pass any identifier (e.g. an ad-hoc ID).
body.timeframe object Required Timeframe for the query using Unix timestamps in milliseconds. 'from' must be earlier than 'to'. Narrower timeframes produce faster responses and more specific results.
body.timeframe.from integer Required Start timestamp for the query timeframe. Unix timestamp in milliseconds minimum: 0; maximum: 253402300799999
body.timeframe.to integer Required End timestamp for the query timeframe. Unix timestamp in milliseconds minimum: 0; maximum: 253402300799999
body.view string Optional Controls the shape of the response. 'events': individual log lines matching the query. 'calculations': aggregated metrics (count, avg, p99, etc.) with optional group-by breakdowns and time-series. 'invocations': events grouped by request ID. 'traces': distributed trace summaries. 'agents': agent-specific trace summaries. enum: ["traces","events","calculations","invocations","requests","agents"]; default: "calculations"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "queryId": "example",
    "timeframe": {
      "to": 1,
      "from": 1
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List values — cloudflare.telemetry.values.list

Run List values with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
body object Required
body.datasets array Required Leave this empty to use the default datasets
body.datasets[] string Optional
body.filters array Optional Apply filters before listing values. Supports nested groups via kind: 'group'. Maximum nesting depth is 4. default: []
body.filters[] — Optional
body.filters[] — Optional allOf[1]; $ref: "#/definitions/workers-observability_filter_node"
body.filters[] — Optional Supports nested groups via kind: 'group'. Maximum nesting depth is 4. allOf[2]
body.filters[] object Optional A group node that nests child filters combined with a logical operator. allOf[2]; anyOf[1]
body.filters[].filterCombination string Required Logical operator for combining child filters: 'and' (all must match) or 'or' (any must match). allOf[2]; anyOf[1]; enum: ["and","or","AND","OR"]
body.filters[].filters array Required Child filter nodes. Each can be a leaf filter or another nested group. allOf[2]; anyOf[1]; minItems: 1
body.filters[].filters[] — Optional allOf[2]; anyOf[1]; $ref: "#/definitions/workers-observability_filter_node"
body.filters[].kind string Required Discriminator indicating this is a nested filter group. allOf[2]; anyOf[1]; enum: ["group"]
body.filters[] — Optional allOf[2]; anyOf[2]; $ref: "#/definitions/workers-observability_filter_leaf"
body.key string Required
body.limit number Optional default: 50
body.needle object Optional Full-text search expression to match events containing the specified text or pattern.
body.needle.isRegex boolean Optional When true, treats the value as a regular expression (RE2 syntax).
body.needle.matchCase boolean Optional When true, performs a case-sensitive search. Defaults to case-insensitive.
body.needle.value — Required The text or pattern to search for.
body.needle.value — Required allOf[1]
body.needle.value string Required allOf[1]; anyOf[1]
body.needle.value number Required allOf[1]; anyOf[2]
body.needle.value boolean Required allOf[1]; anyOf[3]
body.needle.value string Required allOf[2]; maxLength: 1000
body.timeframe object Required
body.timeframe.from number Required
body.timeframe.to number Required
body.type string Required enum: ["string","boolean","number"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "timeframe": {
      "to": 1,
      "from": 1
    },
    "key": "example",
    "type": "string",
    "datasets": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get event count — cloudflare.usage.get

Run Get event count with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Your Cloudflare account ID.
query object Required additionalProperties: false
query.from string Required Unix timestamp in milliseconds for the start of the range. minLength: 1
query.to string Required Unix timestamp in milliseconds for the end of the range. minLength: 1
query.tz string Optional IANA timezone used to align daily bins to local midnight (e.g. 'America/Chicago'). Defaults to UTC. minLength: 1; maxLength: 64

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "query": {
    "from": "example",
    "to": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Workers Smart Placement Regions — cloudflare.worker-placement-list-regions

Run List Workers Smart Placement Regions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Worker Scripts — cloudflare.worker-script-list-workers

Run List Worker Scripts with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
query object Optional additionalProperties: false
query.tags string Optional Filter scripts by tags. Format: comma-separated list of tag:allowed pairs where allowed is 'yes' or 'no'.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Search Worker Scripts — cloudflare.worker-script-search-workers

Run Search Worker Scripts with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
query object Optional additionalProperties: false
query.name string Optional Worker name to search for. Both exact and partial matches are returned.
query.id string Optional Worker ID (also called tag) to search for. Only exact matches are returned.
query.order_by string Optional Property to sort results by. Results are sorted in ascending order. enum: ["created_on","modified_on","name"]; default: "name"
query.page integer Optional Current page. default: 1; minimum: 1
query.per_page integer Optional Items per page. default: 10; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Worker — cloudflare.worker-script-delete-worker

Run Delete Worker with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
query object Optional additionalProperties: false
query.force boolean Optional If true, delete the Worker even when other Workers still reference it. Service bindings in those Workers may be left broken. Durable Object namespaces implemented by the deleted Worker are deleted even if other Workers reference them.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Worker Assets Upload Session — cloudflare.worker-script-update-create-assets-upload-session

Run Create Worker Assets Upload Session with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
body — Required $ref: "#/definitions/workers_create-assets-upload-session-object"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  },
  "body": {
    "manifest": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Script Content — cloudflare.worker-script-get-content

Run Get Worker Script Content with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Worker Deployments — cloudflare.worker-deployments-list-deployments

Run List Worker Deployments with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
query object Optional additionalProperties: false
query.since string Optional Start of the deployment creation time range, inclusive. format: "date-time"
query.until string Optional End of the deployment creation time range, inclusive. format: "date-time"
query.page integer Optional Current page. default: 1; minimum: 1
query.per_page integer Optional Items per page. default: 10; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Worker Deployment — cloudflare.worker-deployments-create-deployment

Run Create Worker Deployment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
query object Optional additionalProperties: false
query.force boolean Optional If set to true, the deployment will be created even if normally blocked by something such rolling back to an older version when a secret has changed.
body — Required $ref: "#/definitions/workers_deployment"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  },
  "body": {
    "strategy": "percentage",
    "versions": [
      {
        "percentage": 100,
        "version_id": "023e105f-2a42-4f8b-a1c1-73f6a2a30c0f"
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Worker Deployment — cloudflare.worker-deployments-delete-deployment

Run Delete Worker Deployment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
path.deployment_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01",
    "deployment_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Deployment — cloudflare.worker-deployments-get-deployment

Run Get Worker Deployment with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
path.deployment_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01",
    "deployment_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Script Schedules (Cron Triggers) — cloudflare.worker-cron-trigger-get-cron-triggers

Run Get Worker Script Schedules (Cron Triggers) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Worker Script Schedules (Cron Triggers) — cloudflare.worker-cron-trigger-update-cron-triggers

Run Update Worker Script Schedules (Cron Triggers) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
body array Required
body[] — Optional $ref: "#/definitions/workers_schedule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Script Settings — cloudflare.worker-script-settings-get-settings

Run Get Worker Script Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Worker Script Settings — cloudflare.worker-script-settings-patch-settings

Run Patch Worker Script Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
body — Required $ref: "#/definitions/workers_script-settings-item"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List secrets bound to a Worker script — cloudflare.worker-list-script-secrets

Run List secrets bound to a Worker script with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add a secret to a Worker script — cloudflare.worker-put-script-secret

Run Add a secret to a Worker script with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
body — Required $ref: "#/definitions/workers_secret"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  },
  "body": {
    "name": "myBinding",
    "type": "secret_text",
    "text": "My secret."
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch multiple Worker script secrets — cloudflare.worker-patch-script-secrets-bulk

Run Patch multiple Worker script secrets with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
body — Required $ref: "#/definitions/workers_secret-patch-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Worker script secret — cloudflare.worker-delete-script-secret

Run Delete Worker script secret with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
path.secret_name — Required $ref: "#/definitions/workers_secret_name"
query object Optional additionalProperties: false
query.url_encoded — Optional $ref: "#/definitions/workers_secret_name_url_encoded"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01",
    "secret_name": "mySecret"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a secret binding — cloudflare.worker-get-script-secret

Run Get a secret binding with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
path.secret_name — Required $ref: "#/definitions/workers_secret_name"
query object Optional additionalProperties: false
query.url_encoded — Optional $ref: "#/definitions/workers_secret_name_url_encoded"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01",
    "secret_name": "mySecret"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Script and Version Settings — cloudflare.worker-script-get-settings

Run Get Worker Script and Version Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Worker Script Subdomain — cloudflare.worker-script-delete-subdomain

Run Delete Worker Script Subdomain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Script Subdomain — cloudflare.worker-script-get-subdomain

Run Get Worker Script Subdomain with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Worker Script Subdomain — cloudflare.worker-script-post-subdomain

Run Update Worker Script Subdomain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
body object Required
body.enabled boolean Required Whether the Worker should be available on the workers.dev subdomain.
body.previews_enabled boolean Optional Whether the Worker's Preview URLs should be available on the workers.dev subdomain.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  },
  "body": {
    "enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Worker Tails — cloudflare.worker-tail-logs-list-tails

Run List Worker Tails with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start Worker Tail — cloudflare.worker-tail-logs-start-tail

Run Start Worker Tail with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Worker Tail — cloudflare.worker-tail-logs-delete-tail

Run Delete Worker Tail with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
path.id — Required $ref: "#/definitions/workers_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01",
    "id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Script Usage Model — cloudflare.worker-script-fetch-usage-model

Run Get Worker Script Usage Model with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace Worker Script Usage Model — cloudflare.worker-script-update-usage-model

Run Replace Worker Script Usage Model with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name"
body object Required
body.usage_model — Optional $ref: "#/definitions/workers_usage_model"
body.user_limits — Optional $ref: "#/definitions/workers_user_limits"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Versions — cloudflare.worker-versions-list-versions

Run List Versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name-2"
query object Optional additionalProperties: false
query.deployable boolean Optional Only return versions that can be used in a deployment. Ignores pagination. default: false
query.page integer Optional Current page. default: 1
query.per_page integer Optional Items per-page.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Script Version — cloudflare.worker-versions-get-version-detail

Run Get Worker Script Version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.script_name — Required $ref: "#/definitions/workers_script_name-2"
path.version_id — Required $ref: "#/definitions/workers_version_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_name": "this-is_my_script-01",
    "version_id": "bcf48806-b317-4351-9ee7-36e7d557d4de"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Environment Script Content — cloudflare.worker-environment-get-script-content

Run Get Worker Environment Script Content with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.service_name — Required $ref: "#/definitions/workers_service"
path.environment_name — Required $ref: "#/definitions/workers_environment"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "service_name": "my-worker",
    "environment_name": "production"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Environment Settings — cloudflare.worker-script-environment-get-settings

Run Get Worker Environment Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.service_name — Required $ref: "#/definitions/workers_service"
path.environment_name — Required $ref: "#/definitions/workers_environment"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "service_name": "my-worker",
    "environment_name": "production"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Worker Environment Settings — cloudflare.worker-script-environment-patch-settings

Run Patch Worker Environment Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.service_name — Required $ref: "#/definitions/workers_service"
path.environment_name — Required $ref: "#/definitions/workers_environment"
body — Required $ref: "#/definitions/workers_script-settings-response"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "service_name": "my-worker",
    "environment_name": "production"
  },
  "body": {
    "success": true,
    "errors": [],
    "messages": [],
    "result": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Workers Subdomain — cloudflare.worker-subdomain-delete-subdomain

Run Delete Workers Subdomain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Workers Subdomain — cloudflare.worker-subdomain-get-subdomain

Run Get a Workers Subdomain with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Workers Subdomain — cloudflare.worker-subdomain-create-subdomain

Run Create a Workers Subdomain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
body — Required $ref: "#/definitions/workers_subdomain-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "subdomain": "my-subdomain"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Workers — cloudflare.listworkers

Run List Workers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
query object Optional additionalProperties: false
query.page integer Optional Current page. default: 1; minimum: 1
query.per_page integer Optional Items per-page. default: 10; minimum: 1; maximum: 100
query.order_by string Optional Property to sort results by. enum: ["deployed_on","updated_on","created_on","name"]; default: "deployed_on"
query.order string Optional Sort direction. enum: ["asc","desc"]; default: "desc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Worker — cloudflare.createworker

Run Create Worker with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/workers_Worker"
body object Required allOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "example",
    "tags": [
      "my-team",
      "my-public-api"
    ],
    "subdomain": {},
    "observability": {},
    "logpush": false,
    "tail_consumers": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Worker — cloudflare.deleteworker

Run Delete Worker with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
query object Optional additionalProperties: false
query.force boolean Optional If true, delete the Worker even when other Workers still reference it. Service bindings in those Workers may be left broken. Durable Object namespaces implemented by the deleted Worker are deleted even if other Workers reference them.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker — cloudflare.getworker

Run Get Worker with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit Worker — cloudflare.editworker

Run Edit Worker with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
body — Required
body — Required allOf[1]; $ref: "#/definitions/workers_Worker"
body object Required allOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example"
  },
  "body": {
    "name": "my-worker",
    "tags": [
      "my-team",
      "my-public-api"
    ],
    "subdomain": {},
    "observability": {},
    "logpush": false,
    "tail_consumers": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Worker — cloudflare.updateworker

Run Update Worker with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
body — Required
body — Required allOf[1]; $ref: "#/definitions/workers_Worker"
body object Required allOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example"
  },
  "body": {
    "name": "example",
    "tags": [
      "my-team",
      "my-public-api"
    ],
    "subdomain": {},
    "observability": {},
    "logpush": false,
    "tail_consumers": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Previews — cloudflare.workers.previews.list

Run List Previews with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
query object Optional additionalProperties: false
query.page integer Optional Current page. default: 1; minimum: 1
query.per_page integer Optional Items per-page. default: 10; minimum: 1; maximum: 100
query.order_by string Optional Property to sort results by. enum: ["deployed_on","updated_on","created_on","slug","name"]; default: "deployed_on"
query.order string Optional Sort direction. enum: ["asc","desc"]; default: "desc"
query.slug string Optional Partial-match filter on preview slug.
query.name string Optional Partial-match filter on preview name.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Preview — cloudflare.workers.previews.create

Run Create Preview with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
query object Optional additionalProperties: false
query.ignore_defaults boolean Optional If true, preview defaults/base config from the parent Worker is ignored.
query.ignore_base_config boolean Optional If true, preview base config from the parent Worker is ignored.
body — Required
body — Required allOf[1]; $ref: "#/definitions/workers_Preview"
body object Required allOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example"
  },
  "body": {
    "name": "example",
    "tags": [
      "my-team",
      "my-preview"
    ],
    "observability": {},
    "logpush": false,
    "tail_consumers": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Preview — cloudflare.workers.previews.delete

Run Delete Preview with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
path.preview_id string Required Identifier for the Preview, which can be ID, slug, or URL-encoded name.
query object Optional additionalProperties: false
query.force boolean Optional If true, delete the Preview even when other Workers still reference it. Service bindings in those Workers may be left broken. Durable Object namespaces implemented by the deleted Preview are deleted even if other Workers reference them.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example",
    "preview_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Preview — cloudflare.workers.previews.get

Run Get Preview with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
path.preview_id string Required Identifier for the Preview, which can be ID, slug, or URL-encoded name.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example",
    "preview_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit Preview — cloudflare.workers.previews.edit

Run Edit Preview with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
path.preview_id string Required Identifier for the Preview, which can be ID, slug, or URL-encoded name.
body — Required
body — Required allOf[1]; $ref: "#/definitions/workers_Preview"
body object Required allOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example",
    "preview_id": "example"
  },
  "body": {
    "name": "feature/my-branch",
    "tags": [
      "my-team",
      "my-preview"
    ],
    "observability": {},
    "logpush": false,
    "tail_consumers": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Preview — cloudflare.workers.previews.update

Run Update Preview with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
path.preview_id string Required Identifier for the Preview, which can be ID, slug, or URL-encoded name.
query object Optional additionalProperties: false
query.ignore_defaults boolean Optional If true, preview defaults/base config from the parent Worker is ignored.
query.ignore_base_config boolean Optional If true, preview base config from the parent Worker is ignored.
body — Required
body — Required allOf[1]; $ref: "#/definitions/workers_Preview"
body object Required allOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example",
    "preview_id": "example"
  },
  "body": {
    "name": "example",
    "tags": [
      "my-team",
      "my-preview"
    ],
    "observability": {},
    "logpush": false,
    "tail_consumers": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Preview Deployments — cloudflare.workers.previews.deployments.list

Run List Preview Deployments with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
path.preview_id string Required Identifier for the Preview, which can be ID, slug, or URL-encoded name.
query object Optional additionalProperties: false
query.page integer Optional Current page. default: 1; minimum: 1
query.per_page integer Optional Items per-page. default: 10; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example",
    "preview_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Preview Deployment — cloudflare.workers.previews.deployments.create

Run Create Preview Deployment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
path.preview_id string Required Identifier for the Preview, which can be ID, slug, or URL-encoded name.
query object Optional additionalProperties: false
query.ignore_defaults boolean Optional If true, preview defaults from the parent Worker are ignored.
body — Required $ref: "#/definitions/workers_PreviewDeploymentRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example",
    "preview_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Latest Preview Deployment — cloudflare.workers.previews.deployments.patchlatest

Run Patch Latest Preview Deployment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
path.preview_id string Required Identifier for the Preview, which can be ID, slug, or URL-encoded name.
query object Optional additionalProperties: false
query.ignore_defaults boolean Optional If true, preview defaults from the parent Worker are ignored.
body — Optional $ref: "#/definitions/workers_PreviewDeploymentRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example",
    "preview_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Preview Deployment — cloudflare.workers.previews.deployments.delete

Run Delete Preview Deployment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
path.preview_id string Required Identifier for the Preview, which can be ID, slug, or URL-encoded name.
path.deployment_id string Required Identifier for the deployment, which can be a UUID, a UUID prefix (minimum length 8), or the literal "latest" to operate on the most recently created deployment.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example",
    "preview_id": "example",
    "deployment_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Preview Deployment — cloudflare.workers.previews.deployments.get

Run Get Preview Deployment with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
path.preview_id string Required Identifier for the Preview, which can be ID, slug, or URL-encoded name.
path.deployment_id string Required Identifier for the deployment, which can be a UUID, a UUID prefix (minimum length 8), or the literal "latest" to operate on the most recently created deployment.
query object Optional additionalProperties: false
query.include string Optional Whether to include the modules property of the deployment in the response, which contains code and sourcemap content and may add several megabytes to the response size. enum: ["modules"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example",
    "preview_id": "example",
    "deployment_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Worker Versions — cloudflare.listworkerversions

Run List Worker Versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
query object Optional additionalProperties: false
query.page integer Optional Current page. default: 1; minimum: 1
query.per_page integer Optional Items per-page. default: 10; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Worker Version — cloudflare.createworkerversion

Run Create Worker Version with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
query object Optional additionalProperties: false
query.deploy boolean Optional If true, a deployment will be created that sends 100% of traffic to the new version.
body — Required $ref: "#/definitions/workers_Version"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Latest Worker Version — cloudflare.getlatestworkerversion

Run Get Latest Worker Version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
query object Optional additionalProperties: false
query.include string Optional Whether to include the modules property of the version in the response, which contains code and sourcemap content and may add several megabytes to the response size. enum: ["modules"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Latest Worker Version — cloudflare.patchlatestworkerversion

Run Patch Latest Worker Version with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
query object Optional additionalProperties: false
query.deploy boolean Optional If true, a deployment will be created that sends 100% of traffic to the new version.
body — Optional
body — Optional allOf[1]; $ref: "#/definitions/workers_Version"
body object Optional allOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Worker Version — cloudflare.deleteworkerversion

Run Delete Worker Version with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
path.version_id string Required Identifier for the version, which can be a UUID, a UUID prefix (minimum length 8), or the literal "latest" to operate on the most recently created version.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example",
    "version_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Version — cloudflare.getworkerversion

Run Get Worker Version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/workers_identifier"
path.worker_id string Required Identifier for the Worker, which can be ID or name.
path.version_id string Required Identifier for the version, which can be a UUID, a UUID prefix (minimum length 8), or the literal "latest" to operate on the most recently created version.
query object Optional additionalProperties: false
query.include string Optional Whether to include the modules property of the version in the response, which contains code and sourcemap content and may add several megabytes to the response size. enum: ["modules"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "worker_id": "example",
    "version_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all Workflows — cloudflare.wor-list-workflows

Run List all Workflows with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.per_page number Optional default: 10; minimum: 1; maximum: 100
query.page number Optional default: 1; minimum: 1
query.search string Optional Allows filtering workflows` name. minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List concurrency keys — cloudflare.wor-list-concurrency-keys

Run List concurrency keys with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.per_page number Optional default: 10; minimum: 1; maximum: 100
query.page number Optional default: 1; minimum: 1
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a concurrency key — cloudflare.wor-create-concurrency-key

Run Create a concurrency key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Required
body.limit integer Required Maximum number of steps that may concurrently hold this key. maximum: 9007199254740991; exclusiveMinimum: 0
body.name string Required Unique (per account) name of the concurrency key. Referenced by workflow steps via step config. minLength: 1; maxLength: 255

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "name": "example",
    "limit": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a concurrency key — cloudflare.wor-delete-concurrency-key

Run Delete a concurrency key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.key_id string Required Identifier of the concurrency key. format: "uuid"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "key_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get concurrency key details — cloudflare.wor-get-concurrency-key

Run Get concurrency key details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.key_id string Required Identifier of the concurrency key. format: "uuid"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "key_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a concurrency key — cloudflare.wor-update-concurrency-key

Run Update a concurrency key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.key_id string Required Identifier of the concurrency key. format: "uuid"
path.account_id string Required
body object Required
body.limit integer Required Maximum number of steps that may concurrently hold this key. maximum: 9007199254740991; exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "key_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  },
  "body": {
    "limit": 1
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get account settings — cloudflare.wor-get-workflow-settings

Run Get account settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update account settings — cloudflare.wor-update-workflow-settings

Run Update account settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body object Required
body.default_retention object Optional Default retention applied to instances of this version when they do not set their own retention.
body.default_retention.error_retention — Optional Specifies the duration in milliseconds or as a string like '5 minutes'.
body.default_retention.error_retention integer Optional Specifies the duration in milliseconds. anyOf[1]
body.default_retention.error_retention string Optional anyOf[2]; pattern: "^(\\d+)\\s+(second|minute|hour|day|week|month|year)s?$"
body.default_retention.success_retention — Optional Specifies the duration in milliseconds or as a string like '5 minutes'.
body.default_retention.success_retention integer Optional Specifies the duration in milliseconds. anyOf[1]
body.default_retention.success_retention string Optional anyOf[2]; pattern: "^(\\d+)\\s+(second|minute|hour|day|week|month|year)s?$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Deletes a Workflow — cloudflare.wor-delete-workflow

Run Deletes a Workflow with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workflow details — cloudflare.wor-get-workflow-details

Run Get Workflow details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create/modify Workflow — cloudflare.wor-create-or-modify-workflow

Run Create/modify Workflow with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.account_id string Required
body object Required
body.class_name string Required minLength: 1; maxLength: 255
body.concurrency object Optional
body.concurrency.limit integer Optional Maximum number of instances of this workflow that can run concurrently. Additional instances are queued and started as running instances complete. Must not exceed the account concurrency limit. minimum: 1; maximum: 9007199254740991
body.default_retention object Optional Default retention applied to instances of this version when they do not set their own retention.
body.default_retention.error_retention — Optional Specifies the duration in milliseconds or as a string like '5 minutes'.
body.default_retention.error_retention integer Optional Specifies the duration in milliseconds. anyOf[1]
body.default_retention.error_retention string Optional anyOf[2]; pattern: "^(\\d+)\\s+(second|minute|hour|day|week|month|year)s?$"
body.default_retention.success_retention — Optional Specifies the duration in milliseconds or as a string like '5 minutes'.
body.default_retention.success_retention integer Optional Specifies the duration in milliseconds. anyOf[1]
body.default_retention.success_retention string Optional anyOf[2]; pattern: "^(\\d+)\\s+(second|minute|hour|day|week|month|year)s?$"
body.jurisdiction string Optional Jurisdiction where instances of this workflow run and store data. Can only be set when the workflow is created and cannot be changed afterwards; omit it to keep the existing jurisdiction. enum: ["eu","fedramp","us"]
body.limits object Optional
body.limits.steps integer Optional minimum: 1; maximum: 9007199254740991
body.schedules array Optional maxItems: 200
body.schedules[] object Optional
body.schedules[].cron string Required minLength: 1; maxLength: 256
body.script_name string Required minLength: 1; maxLength: 255

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "account_id": "example"
  },
  "body": {
    "script_name": "example",
    "class_name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List of workflow instances — cloudflare.wor-list-workflow-instances

Run List of workflow instances with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.account_id string Required
query object Optional additionalProperties: false
query.page number Optional Deprecated: use cursor for pagination instead. minimum: 1
query.per_page number Optional default: 50; minimum: 1; maximum: 100
query.cursor string Optional Opaque token for cursor-based pagination. Mutually exclusive with page.
query.direction string Optional Defines the direction for cursor-based pagination. enum: ["asc","desc"]
query.status string Optional enum: ["queued","running","paused","errored","terminated","complete","waitingForPause","waiting","rollingBack"]
query.date_start string Optional Accepts ISO 8601 with no timezone offsets and in UTC. format: "date-time"
query.date_end string Optional Accepts ISO 8601 with no timezone offsets and in UTC. format: "date-time"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a new workflow instance — cloudflare.wor-create-new-workflow-instance

Run Create a new workflow instance with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.account_id string Required
body object Required
body.instance_id string Optional The system reserves IDs that consist of the cf_ prefix and exactly 64 lowercase hexadecimal characters. minimum: 1; maximum: 100; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
body.instance_retention object Optional
body.instance_retention.error_retention — Optional Specifies the duration in milliseconds or as a string like '5 minutes'.
body.instance_retention.error_retention integer Optional Specifies the duration in milliseconds. anyOf[1]
body.instance_retention.error_retention string Optional anyOf[2]; pattern: "^(\\d+)\\s+(second|minute|hour|day|week|month|year)s?$"
body.instance_retention.success_retention — Optional Specifies the duration in milliseconds or as a string like '5 minutes'.
body.instance_retention.success_retention integer Optional Specifies the duration in milliseconds. anyOf[1]
body.instance_retention.success_retention string Optional anyOf[2]; pattern: "^(\\d+)\\s+(second|minute|hour|day|week|month|year)s?$"
body.location_hint string Optional enum: ["wnam","weur","enam","eeur","apac","apac-ne","apac-se","oc","sam","afr","me"]
body.params string Optional JSON-encoded event payload passed into the new instance.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch create new Workflow instances — cloudflare.wor-batch-create-workflow-instance

Run Batch create new Workflow instances with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.account_id string Required
body array Required minItems: 1; maxItems: 100
body[] object Optional
body[].instance_id string Optional The system reserves IDs that consist of the cf_ prefix and exactly 64 lowercase hexadecimal characters. minimum: 1; maximum: 100; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
body[].instance_retention object Optional
body[].instance_retention.error_retention — Optional Specifies the duration in milliseconds or as a string like '5 minutes'.
body[].instance_retention.error_retention integer Optional Specifies the duration in milliseconds. anyOf[1]
body[].instance_retention.error_retention string Optional anyOf[2]; pattern: "^(\\d+)\\s+(second|minute|hour|day|week|month|year)s?$"
body[].instance_retention.success_retention — Optional Specifies the duration in milliseconds or as a string like '5 minutes'.
body[].instance_retention.success_retention integer Optional Specifies the duration in milliseconds. anyOf[1]
body[].instance_retention.success_retention string Optional anyOf[2]; pattern: "^(\\d+)\\s+(second|minute|hour|day|week|month|year)s?$"
body[].location_hint string Optional enum: ["wnam","weur","enam","eeur","apac","apac-ne","apac-se","oc","sam","afr","me"]
body[].params string Optional JSON-encoded event payload passed into the new instance.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "account_id": "example"
  },
  "body": [
    {}
  ]
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch delete instances of a workflow — cloudflare.wor-batch-delete-workflow-instances

Run Batch delete instances of a workflow with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.account_id string Required
body object Required
body.instances array Required minItems: 1; maxItems: 100
body.instances[] string Optional Instance identifier. Accepts user-created IDs (^[a-zA-Z0-9_][a-zA-Z0-9-_]*$, maximum 100 characters) and system-generated IDs that consist of a cf_ or - prefix and exactly 64 lowercase hexadecimal characters. minLength: 1; maxLength: 100; pattern: "^(-[0-9a-f]{64}|[a-zA-Z0-9_][a-zA-Z0-9-_]*)$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "account_id": "example"
  },
  "body": {
    "instances": [
      "example"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch terminate instances of a workflow — cloudflare.wor-batch-terminate-workflow-instances

Run Batch terminate instances of a workflow with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.account_id string Required
body array Required minItems: 1; maxItems: 100
body[] string Optional minLength: 1; maxLength: 100; pattern: "^(-[0-9a-f]{64}|[a-zA-Z0-9_][a-zA-Z0-9-_]*)$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "account_id": "example"
  },
  "body": [
    "example"
  ]
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get status of the job responsible for terminate all instances of a workflow — cloudflare.wor-status-terminate-workflow-instances

Run Get status of the job responsible for terminate all instances of a workflow with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a workflow instance — cloudflare.wor-delete-workflow-instance

Run Delete a workflow instance with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.instance_id string Required Instance identifier. User-created instances match ^[a-zA-Z0-9_][a-zA-Z0-9-_]*$ (max 100 characters); cron-triggered instances can use a longer, system-generated id derived from the cron expression. minLength: 1; maxLength: 271
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "instance_id": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get logs and status from instance — cloudflare.wor-describe-workflow-instance

Run Get logs and status from instance with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.instance_id string Required Instance identifier. User-created instances match ^[a-zA-Z0-9_][a-zA-Z0-9-_]*$ (max 100 characters); cron-triggered instances can use a longer, system-generated id derived from the cron expression. minLength: 1; maxLength: 271
path.account_id string Required
query object Optional additionalProperties: false
query.simple string Optional When true, omits step details and returns only metadata with step_count. enum: ["true","false"]; default: "false"
query.order string Optional Step ordering: "asc" (default, oldest first) or "desc" (newest first). enum: ["asc","desc"]; default: "asc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "instance_id": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Send event to instance — cloudflare.wor-send-event-workflow-instance

Run Send event to instance with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.instance_id string Required Instance identifier. User-created instances match ^[a-zA-Z0-9_][a-zA-Z0-9-_]*$ (max 100 characters); cron-triggered instances can use a longer, system-generated id derived from the cron expression. minLength: 1; maxLength: 271
path.event_type string Required minLength: 1; maxLength: 100; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.account_id string Required
body object Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "instance_id": "example",
    "event_type": "example",
    "account_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change status of instance — cloudflare.wor-change-status-workflow-instance

Run Change status of instance with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.instance_id string Required Instance identifier. User-created instances match ^[a-zA-Z0-9_][a-zA-Z0-9-_]*$ (max 100 characters); cron-triggered instances can use a longer, system-generated id derived from the cron expression. minLength: 1; maxLength: 271
path.account_id string Required
body — Required
body object Required oneOf[1]
body.status string Required oneOf[1]; enum: ["pause"]
body object Required oneOf[2]
body.status string Required oneOf[2]; enum: ["resume"]
body object Required oneOf[3]
body.rollback boolean Optional Run rollback before terminating. oneOf[3]
body.status string Required oneOf[3]; enum: ["terminate"]
body object Required oneOf[4]
body.from object Optional Step to restart from. oneOf[4]
body.from.count integer Optional oneOf[4]; maximum: 9007199254740991; exclusiveMinimum: 0
body.from.name string Required oneOf[4]; minLength: 1; maxLength: 256
body.from.type string Optional oneOf[4]; enum: ["do","sleep","waitForEvent"]
body.status string Required oneOf[4]; enum: ["restart"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "instance_id": "example",
    "account_id": "example"
  },
  "body": {
    "status": "pause"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get full step output from instance — cloudflare.wor-get-workflow-instance-step

Run Get full step output from instance with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.instance_id string Required Instance identifier. User-created instances match ^[a-zA-Z0-9_][a-zA-Z0-9-_]*$ (max 100 characters); cron-triggered instances can use a longer, system-generated id derived from the cron expression. minLength: 1; maxLength: 271
path.account_id string Required
query object Required additionalProperties: false
query.name string Required Exact step name from the instance logs response, including the generated counter suffix. minLength: 1
query.type string Required Step type to disambiguate step.do and waitForEvent entries that share the same name. enum: ["step","waitForEvent"]
query.attempt integer Optional Specific attempt number to retrieve output or error for. maximum: 9007199254740991; exclusiveMinimum: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "instance_id": "example",
    "account_id": "example"
  },
  "query": {
    "name": "example",
    "type": "step"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a workflow instance event subscription token — cloudflare.wor-create-workflow-instance-subscription-token

Run Create a workflow instance event subscription token with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.instance_id string Required Instance identifier. User-created instances match ^[a-zA-Z0-9_][a-zA-Z0-9-_]*$ (max 100 characters); cron-triggered instances can use a longer, system-generated id derived from the cron expression. minLength: 1; maxLength: 271
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "instance_id": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List deployed Workflow versions — cloudflare.wor-list-workflow-versions

Run List deployed Workflow versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.account_id string Required
query object Optional additionalProperties: false
query.per_page number Optional default: 50; minimum: 1; maximum: 100
query.page number Optional default: 1; minimum: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workflow version details — cloudflare.wor-describe-workflow-versions

Run Get Workflow version details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.version_id string Required format: "uuid"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "version_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workflow version dag — cloudflare.wor-describe-workflow-versions-dag

Run Get Workflow version dag with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.version_id string Required format: "uuid"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "version_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workflow version graph — cloudflare.wor-describe-workflow-versions-graph

Run Get Workflow version graph with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.workflow_name string Required minLength: 1; maxLength: 64; pattern: "^[a-zA-Z0-9_][a-zA-Z0-9-_]*$"
path.version_id string Required format: "uuid"
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "workflow_name": "example",
    "version_id": "00000000-0000-4000-8000-000000000000",
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zero Trust Connectivity Settings — cloudflare.zero-trust-accounts-get-connectivity-settings

Run Get Zero Trust Connectivity Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Updates the Zero Trust Connectivity Settings — cloudflare.zero-trust-accounts-patch-connectivity-settings

Run Updates the Zero Trust Connectivity Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
body object Required
body.icmp_proxy_enabled — Optional $ref: "#/definitions/tunnel_icmp_proxy_enabled"
body.offramp_warp_enabled — Optional $ref: "#/definitions/tunnel_offramp_warp_enabled"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List hostname routes — cloudflare.zero-trust-networks-route-hostname-list

Run List hostname routes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
query object Optional additionalProperties: false
query.id — Optional $ref: "#/definitions/tunnel_hostname_route_id"
query.hostname — Optional If set, only list hostname routes that contain a substring of the given value, the filter is case-insensitive. $ref: "#/definitions/tunnel_hostname"
query.tunnel_id — Optional If set, only list hostname routes that point to a specific tunnel. $ref: "#/definitions/tunnel_tunnel_id-3"
query.comment — Optional $ref: "#/definitions/tunnel_hostname_query_comment"
query.existed_at — Optional $ref: "#/definitions/tunnel_existed_at"
query.is_deleted boolean Optional If true, only return deleted hostname routes. If false, exclude deleted hostname routes. default: false
query.per_page — Optional $ref: "#/definitions/tunnel_per_page"
query.page — Optional $ref: "#/definitions/tunnel_page_number"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create hostname route — cloudflare.zero-trust-networks-route-hostname-create

Run Create hostname route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
body object Required
body.comment — Optional $ref: "#/definitions/tunnel_hostname_comment"
body.hostname — Optional $ref: "#/definitions/tunnel_hostname"
body.tunnel_id — Optional $ref: "#/definitions/tunnel_tunnel_id-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete hostname route — cloudflare.zero-trust-networks-route-hostname-delete

Run Delete hostname route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.hostname_route_id — Required $ref: "#/definitions/tunnel_hostname_route_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "hostname_route_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get hostname route — cloudflare.zero-trust-networks-route-hostname-get

Run Get hostname route with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.hostname_route_id — Required $ref: "#/definitions/tunnel_hostname_route_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "hostname_route_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update hostname route — cloudflare.zero-trust-networks-route-hostname-update

Run Update hostname route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.hostname_route_id — Required $ref: "#/definitions/tunnel_hostname_route_id"
body object Required
body.comment — Optional $ref: "#/definitions/tunnel_hostname_comment"
body.hostname — Optional $ref: "#/definitions/tunnel_hostname"
body.tunnel_id — Optional $ref: "#/definitions/tunnel_tunnel_id-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "hostname_route_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Subnets — cloudflare.zero-trust-networks-subnets-list

Run List Subnets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
query object Optional additionalProperties: false
query.name — Optional If set, only list subnets with the given name $ref: "#/definitions/tunnel_subnet_query_name"
query.comment — Optional $ref: "#/definitions/tunnel_subnet_query_comment"
query.network — Optional If set, only list the subnet whose network exactly matches the given CIDR.
query.network — Optional allOf[1]; $ref: "#/definitions/tunnel_ip_network_encoded"
query.existed_at — Optional $ref: "#/definitions/tunnel_existed_at"
query.address_family — Optional If set, only include subnets in the given address family - v4 or v6 $ref: "#/definitions/tunnel_address_family"
query.is_default_network boolean Optional If true, only include default subnets. If false, exclude default subnets subnets. If not set, all subnets will be included.
query.is_deleted boolean Optional If true, only include deleted subnets. If false, exclude deleted subnets. If not set, all subnets will be included.
query.sort_order string Optional Sort order of the results. asc means oldest to newest, desc means newest to oldest. If not set, they will not be in any particular order. enum: ["asc","desc"]
query.subnet_types string Optional If set, the types of subnets to include, separated by comma. enum: ["cloudflare_source","initial_resolved_ip","warp"]
query.per_page — Optional $ref: "#/definitions/tunnel_per_page"
query.page — Optional $ref: "#/definitions/tunnel_page_number"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Cloudflare Source Subnet — cloudflare.zero-trust-networks-subnet-get-cloudflare-source

Run Get Cloudflare Source Subnet with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.address_family — Required $ref: "#/definitions/tunnel_address_family"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "address_family": "v4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Cloudflare Source Subnet — cloudflare.zero-trust-networks-subnet-update-cloudflare-source

Run Update Cloudflare Source Subnet with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.address_family — Required $ref: "#/definitions/tunnel_address_family"
body object Required
body.comment — Optional $ref: "#/definitions/tunnel_subnet_comment"
body.name — Optional $ref: "#/definitions/tunnel_subnet_name"
body.network — Optional $ref: "#/definitions/tunnel_subnet_ip_network"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "address_family": "v4"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Initial Resolved IP Subnet — cloudflare.zero-trust-networks-subnet-get-initial-resolved-ip

Run Get Initial Resolved IP Subnet with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.address_family — Required $ref: "#/definitions/tunnel_address_family"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "address_family": "v4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Initial Resolved IP Subnet — cloudflare.zero-trust-networks-subnet-update-initial-resolved-ip

Run Update Initial Resolved IP Subnet with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.address_family — Required $ref: "#/definitions/tunnel_address_family"
body object Required
body.comment — Optional $ref: "#/definitions/tunnel_subnet_comment"
body.name — Optional $ref: "#/definitions/tunnel_subnet_name"
body.network — Optional $ref: "#/definitions/tunnel_subnet_ip_network"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "address_family": "v4"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create WARP IP subnet — cloudflare.zero-trust-networks-subnet-create-warp

Run Create WARP IP subnet with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
body object Required
body.comment — Optional $ref: "#/definitions/tunnel_subnet_comment"
body.is_default_network — Optional $ref: "#/definitions/tunnel_subnet_is_default_network"
body.name — Required $ref: "#/definitions/tunnel_subnet_name"
body.network — Required $ref: "#/definitions/tunnel_subnet_ip_network"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "IPv4 Cloudflare Source IPs",
    "network": "100.64.0.0/12"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete WARP IP subnet — cloudflare.zero-trust-networks-subnet-delete-warp

Run Delete WARP IP subnet with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.subnet_id — Required $ref: "#/definitions/tunnel_subnet_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "subnet_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get WARP IP subnet — cloudflare.zero-trust-networks-subnet-get-warp

Run Get WARP IP subnet with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.subnet_id — Required $ref: "#/definitions/tunnel_subnet_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "subnet_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update WARP IP subnet — cloudflare.zero-trust-networks-subnet-update-warp

Run Update WARP IP subnet with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id — Required $ref: "#/definitions/tunnel_account_id"
path.subnet_id — Required $ref: "#/definitions/tunnel_subnet_id"
body object Required
body.comment — Optional $ref: "#/definitions/tunnel_subnet_comment"
body.is_default_network — Optional $ref: "#/definitions/tunnel_subnet_is_default_network"
body.name — Optional $ref: "#/definitions/tunnel_subnet_name"
body.network — Optional $ref: "#/definitions/tunnel_subnet_ip_network"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "699d98642c564d2e855e9661899b7252",
    "subnet_id": "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get all behaviors and associated configuration — cloudflare.dlp-risk-score-behaviors-get

Run Get all behaviors and associated configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update configuration for risk behaviors — cloudflare.dlp-risk-score-behaviors-put

Run Update configuration for risk behaviors with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required Account ID.
body — Required $ref: "#/definitions/dlp_UpdateBehaviors"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "behaviors": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all risk score integrations for the account. — cloudflare.dlp-zt-risk-score-integration-list

Run List all risk score integrations for the account. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create new risk score integration. — cloudflare.dlp-zt-risk-score-integration-create

Run Create new risk score integration. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
body — Required $ref: "#/definitions/dlp_CreateIntegrationBody"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  },
  "body": {
    "integration_type": "Okta",
    "tenant_url": "https://example.com/"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get risk score integration by reference id. — cloudflare.dlp-zt-risk-score-integration-get-by-reference-id

Run Get risk score integration by reference id. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.reference_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "reference_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a risk score integration. — cloudflare.dlp-zt-risk-score-integration-delete

Run Delete a risk score integration. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.integration_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "integration_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get risk score integration by id. — cloudflare.dlp-zt-risk-score-integration-get

Run Get risk score integration by id. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.integration_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "integration_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a risk score integration. — cloudflare.dlp-zt-risk-score-integration-update

Run Update a risk score integration. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.integration_id string Required format: "uuid"
body — Required $ref: "#/definitions/dlp_UpdateIntegrationBody"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "integration_id": "00000000-0000-4000-8000-000000000000"
  },
  "body": {
    "tenant_url": "https://example.com/",
    "active": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get risk score info for all users in the account — cloudflare.dlp-risk-score-summary-get

Run Get risk score info for all users in the account with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get risk event/score information for a specific user — cloudflare.dlp-risk-score-summary-get-for-user

Run Get risk event/score information for a specific user with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.user_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "user_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Clear the risk score for a particular user — cloudflare.dlp-risk-score-reset-post

Run Clear the risk score for a particular user with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.account_id string Required
path.user_id string Required format: "uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "account_id": "example",
    "user_id": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query analytics datasets — cloudflare.sql-api-query-get

Run Query analytics datasets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Required additionalProperties: false
query.query string Required SQL query to execute. A trailing FORMAT selects JSON, JSONEachRow, TabSeparated, or TSV output on any dataset.

Full JSON Schema

Full JSON Schema

Example input

{
  "query": {
    "query": "SELECT edgeResponseStatus FROM events.httpRequests WHERE accountTag = '0123456789abcdef0123456789abcdef' AND datetime > '2026-01-01' LIMIT 10"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Query analytics datasets — cloudflare.sql-api-query-post

Run Query analytics datasets with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body — Required $ref: "#/definitions/analytics-sql_SqlQueryRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {
    "params": {
      "status": 404
    },
    "query": "SELECT edgeResponseStatus FROM events.httpRequests WHERE edgeResponseStatus = $status LIMIT 10",
    "scope": {
      "accountTag": "0123456789abcdef0123456789abcdef"
    },
    "time_range": {
      "end": "2026-01-02T00:00:00Z",
      "start": "2026-01-01T00:00:00Z"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List available analytics datasets — cloudflare.sql-api-introspection

Run List available analytics datasets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Required additionalProperties: false
query.account_tag string Required Account whose available analytics datasets are returned. pattern: "^[0-9a-f]{32}$"
query.include_columns boolean Optional Include column metadata for each returned dataset. default: false
query.include_custom_attributes boolean Optional Include a capped set of custom attribute names and types observed during the preceding seven days, as custom_attributes. Requires a nonempty dataset_name. Deprecated in favor of include_attributes. default: false
query.include_attributes boolean Optional Include a capped set of attribute names and types observed during the preceding seven days, as attributes. Requires a nonempty dataset_name. Replaces include_custom_attributes, which is deprecated. default: false
query.include_wae boolean Optional Include Workers Analytics Engine datasets, which are discovered from the account's own data. Set to false to return only datasets described from the static catalogue, which avoids that lookup. default: true
query.include_lex boolean Optional Include Log Explorer datasets, which are listed only where the account has them. Set to false to return only datasets described from the static catalogue, which avoids that lookup. default: true
query.dataset_name string Optional Return only the dataset with this exact name. An empty value is treated as if the parameter had been omitted, and does not filter the catalogue. A name that matches no dataset in this deployment's catalogue is rejected with 422; a dataset that exists but is not describable here is rejected identically, so the two cases cannot be told apart. A Workers Analytics Engine dataset is named in full, as events.analyticsEngine.&lt;dataset_name&gt;; the namespace on its own returns every such dataset the account has. A dataset_name the account does not have is rejected with 422 like any other unknown name.

Full JSON Schema

Full JSON Schema

Example input

{
  "query": {
    "account_tag": "0123456789abcdef0123456789abcdef"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate Billing Address — cloudflare.billing-validate-address

Run Validate Billing Address with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body — Required $ref: "#/definitions/bill-subs-api_address_validation_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Rate Plan by Public Key — cloudflare.billing-get-rate-plan

Run Get Rate Plan by Public Key with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.public_key string Required The public key identifier for the rate plan.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "public_key": "teams_free"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Certificates — cloudflare.origin-ca-list-certificates

Run List Certificates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Required additionalProperties: false
query.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of records per page. default: 20; minimum: 5; maximum: 50
query.limit integer Optional Limit to the number of records returned.
query.offset integer Optional Offset the results.

Full JSON Schema

Full JSON Schema

Example input

{
  "query": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Certificate — cloudflare.origin-ca-create-certificate

Run Create Certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body object Required
body.csr — Required $ref: "#/definitions/tls-certificates-and-hostnames_csr"
body.hostnames — Required $ref: "#/definitions/tls-certificates-and-hostnames_hostnames"
body.request_type — Required $ref: "#/definitions/tls-certificates-and-hostnames_request_type"
body.requested_validity — Optional $ref: "#/definitions/tls-certificates-and-hostnames_requested_validity"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {
    "hostnames": [
      "example.com",
      "*.example.com",
      "sub.example.com"
    ],
    "request_type": "origin-rsa",
    "csr": "-----BEGIN CERTIFICATE REQUEST-----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\ndcWYTthM51JIqRBfNqy4QcBnX+GY05yltEEswQI55wdiS3CjTTA67sdbcQ==\n-----END CERTIFICATE REQUEST-----"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revoke Certificate — cloudflare.origin-ca-revoke-certificate

Run Revoke Certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_origin_ca_certificate_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "328578533902268680212849205732770752308931942346"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Certificate — cloudflare.origin-ca-get-certificate

Run Get Certificate with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_origin_ca_certificate_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "328578533902268680212849205732770752308931942346"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List category APIs — cloudflare.cws-list-category-apis

Run List category APIs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.cursor string Optional Pagination cursor from previous response
query.per_page integer Optional Number of items per page (1-100, default 20) default: 20; minimum: 1; maximum: 100
query.application string Optional Exact case-sensitive application name. Omit to search every application. minLength: 1
query.name string Optional Case-insensitive substring search over API names.
query.variants boolean Optional Include the routing identities represented by each API name. Defaults to false.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List category applications — cloudflare.cws-list-category-applications

Run List category applications with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.cursor string Optional Pagination cursor from previous response
query.per_page integer Optional Number of items per page (1-100, default 20) default: 20; minimum: 1; maximum: 100
query.name string Optional Case-insensitive substring search over application names.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List application versions — cloudflare.cws-list-category-application-versions

Run List application versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.cursor string Optional Pagination cursor from previous response
query.per_page integer Optional Number of items per page (1-100, default 20) default: 20; minimum: 1; maximum: 100
path object Required additionalProperties: false
path.application_key string Required Stable application key. minLength: 1; maxLength: 255; pattern: "^[a-z0-9]+(?:-[a-z0-9]+)*$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "application_key": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the latest application version — cloudflare.cws-get-latest-category-application-version

Run Get the latest application version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.application_key string Required Stable application key. minLength: 1; maxLength: 255; pattern: "^[a-z0-9]+(?:-[a-z0-9]+)*$"
headers object Optional additionalProperties: false
headers.If-None-Match string Optional Previously received bundle ETag. A match returns 304 without a response body.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "application_key": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an application version — cloudflare.cws-get-category-application-version

Run Get an application version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.application_key string Required Stable application key. minLength: 1; maxLength: 255; pattern: "^[a-z0-9]+(?:-[a-z0-9]+)*$"
path.version_tag string Required Immutable application version identifier. minLength: 1; maxLength: 255; pattern: "^[A-Za-z0-9][A-Za-z0-9._~-]*$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "application_key": "example",
    "version_tag": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List category operations — cloudflare.cws-list-category-operations

Run List category operations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.cursor string Optional Pagination cursor from previous response
query.per_page integer Optional Number of items per page (1-100, default 20) default: 20; minimum: 1; maximum: 100
query.application string Optional Exact case-sensitive application ancestor name. Omit to search every application. minLength: 1
query.api string Optional Exact case-sensitive API ancestor name. Omit to search every API. minLength: 1
query.name string Optional Case-insensitive substring search over operation names.
query.variants boolean Optional Include the routing identities represented by each operation name. Defaults to false.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get filter fields — cloudflare.cws-get-filter-schema

Run Get filter fields with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

This tool has no input parameters.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Cloudflare/JD Cloud IP Details — cloudflare.cloudflare-ips-cloudflare-ip-details

Run Cloudflare/JD Cloud IP Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.networks string Optional Specified as jdcloud to list IPs used by JD Cloud data centers.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Memberships — cloudflare.user--s-account-memberships-list-memberships

Run List Memberships with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.account.name — Optional $ref: "#/definitions/iam_properties-name"
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of memberships per page. default: 20; minimum: 5; maximum: 50
query.order string Optional Field to order memberships by. enum: ["id","account.name","status"]
query.direction string Optional Direction to order memberships. enum: ["asc","desc"]
query.name — Optional $ref: "#/definitions/iam_properties-name"
query.status string Optional Status of this membership. enum: ["accepted","pending","rejected"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Membership — cloudflare.user--s-account-memberships-delete-membership

Run Delete Membership with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.membership_id — Required $ref: "#/definitions/iam_membership_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "membership_id": "4536bcfad5faccb111b47003c79917fa"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Membership Details — cloudflare.user--s-account-memberships-membership-details

Run Membership Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.membership_id — Required $ref: "#/definitions/iam_membership_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "membership_id": "4536bcfad5faccb111b47003c79917fa"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Membership — cloudflare.user--s-account-memberships-update-membership

Run Update Membership with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.membership_id — Required $ref: "#/definitions/iam_membership_components-schemas-identifier"
body object Required
body.status string Required Whether to accept or reject this account invitation. enum: ["accepted","rejected"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "membership_id": "4536bcfad5faccb111b47003c79917fa"
  },
  "body": {
    "status": "accepted"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List OAuth Scopes — cloudflare.oauth-scopes-list

Run List OAuth Scopes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

This tool has no input parameters.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List organizations the user has access to — cloudflare.organization_listorganizations

Run List organizations the user has access to with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.id array Optional Only return organizations with the specified IDs (ex. id=foo&id=bar). Send multiple elements by repeating the query value.
query.id[] — Optional $ref: "#/definitions/organizations-api_OrganizationID"
query.name string Optional (case-sensitive) Filter the list of organizations to where the name is equal to a particular string.
query.name.startsWith string Optional (case-insensitive) Filter the list of organizations to where the name starts with a particular string.
query.name.endsWith string Optional (case-insensitive) Filter the list of organizations to where the name ends with a particular string.
query.name.contains string Optional (case-insensitive) Filter the list of organizations to where the name contains a particular string.
query.containing.account string Optional Filter the list of organizations to the ones that contain this particular account.
query.containing.user string Optional Filter the list of organizations to the ones that contain this particular user. IMPORTANT: Just because an organization "contains" a user is not a representation of any authorization or privilege to manage any resources therein. An organization "containing" a user simply means the user is managed by that organization.
query.containing.organization string Optional Filter the list of organizations to the ones that contain this particular organization.
query.parent.id — Optional Filter the list of organizations to the ones that are a sub-organization of the specified organization. "null" is a valid value to provide for this parameter. It means "where an organization has no parent (i.e. it is a 'root' organization)."
query.parent.id — Optional anyOf[1]; $ref: "#/definitions/organizations-api_OrganizationID"
query.parent.id string Optional anyOf[2]; enum: ["null"]
query.member.email string Optional Filter organizations to those where the given user, by email, is an active member of that exact organization. This does not include hierarchy-derived access.
query.order_by string Optional Field to order results by. Currently supported values: name. When not specified, results are ordered by hierarchy. enum: ["name"]
query.direction string Optional Sort direction for the order_by field. Defaults to asc when order_by is specified. enum: ["asc","desc"]
query.page_token string Optional An opaque token returned from the last list response that when provided will retrieve the next page. Parameters used to filter the retrieved list must remain in subsequent requests with a page token.
query.page_size integer Optional The amount of items to return. Defaults to 10. minimum: 0; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create organization — cloudflare.organizations_createuserorganization

Run Create organization with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body — Required $ref: "#/definitions/organizations-api_CreateOrganizationRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {
    "name": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete organization — cloudflare.organizations_delete

Run Delete organization with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required The ID of the organization to delete. $ref: "#/definitions/organizations-api_OrganizationID"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get organization — cloudflare.organizations_retrieve

Run Get organization with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required The ID of the organization to retrieve. $ref: "#/definitions/organizations-api_OrganizationID"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update organization — cloudflare.organizations_modify

Run Update organization with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required The ID of the organization to modify. $ref: "#/definitions/organizations-api_OrganizationID"
body — Required $ref: "#/definitions/organizations-api_ModifyOrganizationRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List organization accounts — cloudflare.organizations_getaccounts

Run List organization accounts with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
headers object Optional additionalProperties: false
headers.Accept string Optional Request application/json; legacy=true for the LegacyAccount representation.
path object Required additionalProperties: false
path.organization_id — Required The ID of the organization to retrieve a list of accounts for. $ref: "#/definitions/organizations-api_OrganizationID"
query object Optional additionalProperties: false
query.account_pubname string Optional (case-sensitive) Filter the list of accounts to where the account_pubname is equal to a particular string.
query.account_pubname.startsWith string Optional (case-insensitive) Filter the list of accounts to where the account_pubname starts with a particular string.
query.account_pubname.endsWith string Optional (case-insensitive) Filter the list of accounts to where the account_pubname ends with a particular string.
query.account_pubname.contains string Optional (case-insensitive) Filter the list of accounts to where the account_pubname contains a particular string.
query.name string Optional (case-sensitive) Filter the list of accounts to where the name is equal to a particular string. At most one of name, name.startsWith, name.endsWith, or name.contains may be supplied per request.
query.name.startsWith string Optional (case-insensitive) Filter the list of accounts to where the name starts with a particular string.
query.name.endsWith string Optional (case-insensitive) Filter the list of accounts to where the name ends with a particular string.
query.name.contains string Optional (case-insensitive) Filter the list of accounts to where the name contains a particular string.
query.status string Optional Filter accounts by lifecycle status. Defaults to active. enum: ["active","deleted"]
query.order_by string Optional Field to order results by. Currently supported values: account_name. enum: ["account_name"]
query.direction string Optional Sort direction for the order_by field. Valid values: asc, desc. Defaults to asc when order_by is specified. enum: ["asc","desc"]
query.include_tags boolean Optional Include Account tags from the resource tag mirror. Omit this parameter to preserve the existing Account response shape.
query.include_total boolean Optional Whether to calculate and return the exact result_info.total_size for cursor pagination. Defaults to true. When false, total_size is omitted. page_size and include_total may change between pages; next_page_token remains the authoritative continuation signal. Legacy page/per_page requests always calculate total_count. default: true
query.page integer Optional Legacy offset page number. Must be provided with per_page. Values below 1 are treated as 1. Cursor pagination takes precedence when requested.
query.per_page integer Optional Legacy offset page size. Must be provided with page. Values are clamped to the range 1-100. Cursor pagination takes precedence when requested.
query.page_token string Optional An opaque token returned from the last list response that when provided will retrieve the next page. Parameters used to filter the retrieved list must remain in subsequent requests with a page token.
query.page_size integer Optional The amount of items to return. Defaults to 10. minimum: 0; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Organization Usage (Version 2, Alpha, Restricted) — cloudflare.billable-usage-v2-get-organization-usage

Run Get Organization Usage (Version 2, Alpha, Restricted) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required Identifies the Cloudflare organization. $ref: "#/definitions/billable-usage-api_identifier"
query object Optional additionalProperties: false
query.from string Optional Start date for the usage query (ISO 8601). Required if to is set. When omitted along with to, defaults to the start of the current month. Filters by charge period (when consumption happened), not billing period. The maximum date range is 31 days. format: "date"
query.to string Optional End date for the usage query (ISO 8601). Required if from is set. When omitted along with from, defaults to today. Filters by charge period (when consumption happened), not billing period. The maximum date range is 31 days. format: "date"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Handle organization invite — cloudflare.organizations_handleorganizationinvite

Run Handle organization invite with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required The ID of the organization associated with the invitation. $ref: "#/definitions/organizations-api_OrganizationID"
path.member_code string Required The invitation code to accept or reject.
body — Required $ref: "#/definitions/organizations-api_HandleOrganizationInviteRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8",
    "member_code": "example"
  },
  "body": {
    "status": "accept"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get organization audit logs (Version 2) — cloudflare.audit-logs-v2-get-organization-audit-logs

Run Get organization audit logs (Version 2) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id string Required The unique id that identifies the organization.
query object Required additionalProperties: false
query.action_result array Optional Filters by whether the action was successful or not.
query.action_result[] string Optional enum: ["success","failure"]
query.action_type array Optional Filters by the action type.
query.action_type[] string Optional enum: ["create","delete","view","update"]
query.actor_context array Optional Filters by the actor context. - api: The action was performed through the API. The specific credential type was not recorded. - api_key: The action was authenticated with a Cloudflare Global API Key. - api_token: The action was authenticated with an API token. - dash: The action was performed through the Cloudflare dashboard. - oauth: The action was authenticated with an OAuth token. - origin_ca_key: The action was authenticated with an Origin CA key.
query.actor_context[] string Optional enum: ["api","api_key","api_token","dash","oauth","origin_ca_key"]
query.actor_email array Optional Filters by the actor's email address.
query.actor_email[] string Optional format: "email"
query.actor_id array Optional Filters by the actor's user ID.
query.actor_id[] string Optional
query.actor_ip_address array Optional The IP address where the action was initiated.
query.actor_ip_address[] string Optional
query.actor_token_id array Optional Filters by the API token ID when the actor context is an api_token or oauth.
query.actor_token_id[] string Optional
query.actor_token_name array Optional Filters by the API token name when the actor context is an api_token or oauth.
query.actor_token_name[] string Optional
query.actor_type array Optional Filters by the actor type.
query.actor_type[] string Optional enum: ["cloudflare_admin","system","user"]
query.id array Optional Finds a specific log by its ID.
query.id[] string Optional
query.raw_cf_ray_id array Optional Filters by the response CF Ray ID.
query.raw_cf_ray_id[] string Optional
query.raw_method array Optional The HTTP method for the API call.
query.raw_method[] string Optional
query.raw_status_code array Optional The response status code that was returned.
query.raw_status_code[] integer Optional
query.raw_uri array Optional Filters by the request URI.
query.raw_uri[] string Optional
query.resource_id array Optional Filters by the resource ID.
query.resource_id[] string Optional
query.resource_product array Optional Filters audit logs by the Cloudflare product associated with the changed resource.
query.resource_product[] string Optional
query.resource_type array Optional Filters audit logs based on the unique type of resource changed by the action.
query.resource_type[] string Optional
query.resource_scope array Optional Filters by the resource scope, specifying whether the resource is associated with an organization.
query.resource_scope[] string Optional enum: ["organizations"]
query.action_result.not array Optional Filters out audit logs by whether the action was successful or not.
query.action_result.not[] string Optional enum: ["success","failure"]
query.action_type.not array Optional Filters out audit logs by the action type.
query.action_type.not[] string Optional enum: ["create","delete","view","update"]
query.actor_context.not array Optional Filters out audit logs by the actor context. - api: The action was performed through the API. The specific credential type was not recorded. - api_key: The action was authenticated with a Cloudflare Global API Key. - api_token: The action was authenticated with an API token. - dash: The action was performed through the Cloudflare dashboard. - oauth: The action was authenticated with an OAuth token. - origin_ca_key: The action was authenticated with an Origin CA key.
query.actor_context.not[] string Optional enum: ["api","api_key","api_token","dash","oauth","origin_ca_key"]
query.actor_email.not array Optional Filters out audit logs by the actor's email address.
query.actor_email.not[] string Optional format: "email"
query.actor_id.not array Optional Filters out audit logs by the actor's user ID.
query.actor_id.not[] string Optional
query.actor_ip_address.not array Optional Filters out audit logs IP address where the action was initiated.
query.actor_ip_address.not[] string Optional
query.actor_token_id.not array Optional Filters out audit logs by the API token ID when the actor context is an api_token or oauth.
query.actor_token_id.not[] string Optional
query.actor_token_name.not array Optional Filters out audit logs by the API token name when the actor context is an api_token or oauth.
query.actor_token_name.not[] string Optional
query.actor_type.not array Optional Filters out audit logs by the actor type.
query.actor_type.not[] string Optional enum: ["cloudflare_admin","system","user"]
query.id.not array Optional Filters out audit logs by their IDs.
query.id.not[] string Optional
query.raw_cf_ray_id.not array Optional Filters out audit logs by the response CF Ray ID.
query.raw_cf_ray_id.not[] string Optional
query.raw_method.not array Optional Filters out audit logs by the HTTP method for the API call.
query.raw_method.not[] string Optional
query.raw_status_code.not array Optional Filters out audit logs by the response status code that was returned.
query.raw_status_code.not[] integer Optional
query.raw_uri.not array Optional Filters out audit logs by the request URI.
query.raw_uri.not[] string Optional
query.resource_id.not array Optional Filters out audit logs by the resource ID.
query.resource_id.not[] string Optional
query.resource_product.not array Optional Filters out audit logs by the Cloudflare product associated with the changed resource.
query.resource_product.not[] string Optional
query.resource_type.not array Optional Filters out audit logs based on the unique type of resource changed by the action.
query.resource_type.not[] string Optional
query.resource_scope.not array Optional Filters out audit logs by the resource scope, specifying whether the resource is associated with an organization.
query.resource_scope.not[] string Optional enum: ["organizations"]
query.since string Required Limits the returned results to logs newer than the specified date. This can be a date string 2019-04-30 (interpreted in UTC) or an absolute timestamp that conforms to RFC3339. format: "date"
query.before string Required Limits the returned results to logs older than the specified date. This can be a date string 2019-04-30 (interpreted in UTC) or an absolute timestamp that conforms to RFC3339. format: "date"
query.direction string Optional Sets sorting order. enum: ["desc","asc"]; default: "desc"
query.limit number Optional The number limits the objects to return. The cursor attribute may be used to iterate over the next batch of objects if there are more than the limit. default: 100; minimum: 1; maximum: 1000
query.cursor string Optional The cursor is an opaque token used to paginate through large sets of records. It indicates the position from which to continue when requesting the next set of records. A valid cursor value can be obtained from the cursor object in the result_info structure of a previous response.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a67e14daa5f8dceeb91fe5449ba496ef"
  },
  "query": {
    "since": "2024-10-30",
    "before": "2024-10-31"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get resource change history from an organization audit log entry (Version 2) — cloudflare.audit-logs-v2-get-organization-audit-log-history

Run Get resource change history from an organization audit log entry (Version 2) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id string Required The unique ID that identifies the organization.
path.id string Required The ID of the audit log to fetch resource history for. format: "uuid"
query object Required additionalProperties: false
query.action_time string Required RFC3339 timestamp of the source audit log entry's action time. Used to narrow the source-entry lookup window. Provide the action.time value from the audit log identified by id. format: "date-time"
query.since string Required Limits the returned results to logs newer than the specified date. This can be a date string 2019-04-30 (interpreted in UTC) or an absolute timestamp that conforms to RFC3339. format: "date"
query.before string Required Limits the returned results to logs older than the specified date. This can be a date string 2019-04-30 (interpreted in UTC) or an absolute timestamp that conforms to RFC3339. format: "date"
query.direction string Optional Sets sorting order. enum: ["desc","asc"]; default: "desc"
query.limit number Optional The number limits the objects to return. The cursor attribute may be used to iterate over the next batch of objects if there are more than the limit. default: 100; minimum: 1; maximum: 1000
query.cursor string Optional The cursor is an opaque token used to paginate through large sets of records. It indicates the position from which to continue when requesting the next set of records. A valid cursor value can be obtained from the cursor object in the result_info structure of a previous response.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a67e14daa5f8dceeb91fe5449ba496ef",
    "id": "f174be97-19b1-40d6-954d-70cd5fbd52db"
  },
  "query": {
    "action_time": "2024-10-30T15:00:00Z",
    "since": "2024-10-30",
    "before": "2024-10-31"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List organization members — cloudflare.members_list

Run List organization members with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required $ref: "#/definitions/organizations-api_OrganizationID"
query object Optional additionalProperties: false
query.status array Optional Filter the list of memberships by membership status. Defaults to active, pending, and rejected; pass canceled explicitly to include canceled memberships.
query.status[] string Optional enum: ["active","pending","rejected","canceled"]
query.user.email string Optional Filter the list of memberships for a specific email.
query.user.email.contains string Optional Filter the list of memberships for a specific email that contains a substring.
query.user.email.startsWith string Optional Filter the list of memberships for a specific email that starts with a substring.
query.user.email.endsWith string Optional Filter the list of memberships for a specific email that ends with a substring.
query.page_token string Optional An opaque token returned from the last list response that when provided will retrieve the next page. Parameters used to filter the retrieved list must remain in subsequent requests with a page token.
query.page_size integer Optional The amount of items to return. Defaults to 10. minimum: 0; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create organization member — cloudflare.members_create

Run Create organization member with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required $ref: "#/definitions/organizations-api_OrganizationID"
body — Required $ref: "#/definitions/organizations-api_CreateMemberRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8"
  },
  "body": {
    "member": {
      "user": {
        "email": "example"
      }
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete organization member — cloudflare.members_delete

Run Delete organization member with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required $ref: "#/definitions/organizations-api_OrganizationID"
path.member_id — Required $ref: "#/definitions/organizations-api_MemberID"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8",
    "member_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get organization member — cloudflare.members_retrieve

Run Get organization member with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required $ref: "#/definitions/organizations-api_OrganizationID"
path.member_id — Required $ref: "#/definitions/organizations-api_MemberID"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8",
    "member_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch create organization members — cloudflare.members_batchcreate

Run Batch create organization members with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required $ref: "#/definitions/organizations-api_OrganizationID"
body — Required $ref: "#/definitions/organizations-api_BatchCreateMembersRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get organization profile — cloudflare.organizations_getprofile

Run Get organization profile with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required The ID of the organization to retrieve a profile for. $ref: "#/definitions/organizations-api_OrganizationID"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Modify organization profile. — cloudflare.organizations_modifyprofile

Run Modify organization profile. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required $ref: "#/definitions/organizations-api_OrganizationID"
body — Required $ref: "#/definitions/organizations-api_ModifyProfileRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "a7b9c3d2e8f4a1b5c6d0e9f2a3b7c4d8"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List organization shares — cloudflare.organization-shares-list

Run List organization shares with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.organization_id — Required $ref: "#/definitions/resource-sharing_organization_id"
query object Optional additionalProperties: false
query.status — Optional Filter shares by status. $ref: "#/definitions/resource-sharing_share_status"
query.order string Optional Order shares by values in the given field. enum: ["name","created"]; default: "created"
query.direction string Optional Direction to sort objects. enum: ["asc","desc"]; default: "asc"
query.page integer Optional Page number. Defaults to 1 when omitted. default: 1; minimum: 1; multipleOf: 1
query.per_page integer Optional Number of objects to return per page. Defaults to 20 when omitted. default: 20; minimum: 1; maximum: 100; multipleOf: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "organization_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check missing assets — cloudflare.pages-assets-check-missing

Run Check missing assets with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body — Required $ref: "#/definitions/pages_pages_assets_check_missing_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {
    "hashes": [
      "a948904f2f0f479b8f936b8a0c5d9882",
      "b026324c6904b2a9cb4b88d6d61c81d1"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Upload asset — cloudflare.pages-assets-upload

Run Upload asset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body — Required $ref: "#/definitions/pages_pages_assets_upload_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Upsert asset hashes — cloudflare.pages-assets-upsert-hashes

Run Upsert asset hashes with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body — Required $ref: "#/definitions/pages_pages_assets_upsert_hashes_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {
    "hashes": [
      "a948904f2f0f479b8f936b8a0c5d9882",
      "b026324c6904b2a9cb4b88d6d61c81d1"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get agent readiness summary — cloudflare.radar-get-agent-readiness-summary

Run Get agent readiness summary with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the agent readiness data dimension by which to group the results. enum: ["CHECK"]
query object Optional additionalProperties: false
query.date string Optional Filters results by the specified date. format: "date"
query.domainCategory array Optional Filters results by domain category.
query.domainCategory[] string Optional maxLength: 100
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "CHECK"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AI bots HTTP requests distribution by dimension — cloudflare.radar-get-ai-bots-summary

Run Get AI bots HTTP requests distribution by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["USER_AGENT","CRAWL_PURPOSE","INDUSTRY","VERTICAL","CONTENT_TYPE","RESPONSE_STATUS","RESPONSE_STATUS_CATEGORY"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.crawlPurpose array Optional Filters results by bot crawl purpose.
query.crawlPurpose[] string Optional maxLength: 100
query.userAgent array Optional Filters results by user agent.
query.userAgent[] string Optional maxLength: 100
query.vertical array Optional Filters results by vertical.
query.vertical[] string Optional maxLength: 2000
query.industry array Optional Filters results by industry.
query.industry[] string Optional maxLength: 2000
query.contentType array Optional Filters results by content type category. When set, results can only be further filtered by location, continent, or Autonomous System.
query.contentType[] string Optional enum: ["HTML","IMAGES","JSON","JAVASCRIPT","CSS","PLAIN_TEXT","FONTS","XML","YAML","VIDEO","AUDIO","MARKDOWN","DOCUMENTS","BINARY","SERIALIZATION","OTHER"]
query.responseStatus array Optional Filters results by HTTP response status code (e.g. 200, 403, 404). Only IANA-registered codes are accepted.
query.responseStatus[] string Optional pattern: "^\\d{3}$"
query.responseStatusCategory array Optional Filters results by HTTP response status code category.
query.responseStatusCategory[] string Optional enum: ["INFORMATIONAL","SUCCESS","REDIRECTION","CLIENT_ERROR","SERVER_ERROR"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "USER_AGENT"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AI bots HTTP requests time series — cloudflare.radar-get-ai-bots-timeseries

Run Get AI bots HTTP requests time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.crawlPurpose array Optional Filters results by bot crawl purpose.
query.crawlPurpose[] string Optional maxLength: 100
query.userAgent array Optional Filters results by user agent.
query.userAgent[] string Optional maxLength: 100
query.industry array Optional Filters results by industry.
query.industry[] string Optional maxLength: 2000
query.vertical array Optional Filters results by vertical.
query.vertical[] string Optional maxLength: 2000
query.contentType array Optional Filters results by content type category. When set, results can only be further filtered by location, continent, or Autonomous System.
query.contentType[] string Optional enum: ["HTML","IMAGES","JSON","JAVASCRIPT","CSS","PLAIN_TEXT","FONTS","XML","YAML","VIDEO","AUDIO","MARKDOWN","DOCUMENTS","BINARY","SERIALIZATION","OTHER"]
query.responseStatus array Optional Filters results by HTTP response status code (e.g. 200, 403, 404). Only IANA-registered codes are accepted.
query.responseStatus[] string Optional pattern: "^\\d{3}$"
query.responseStatusCategory array Optional Filters results by HTTP response status code category.
query.responseStatusCategory[] string Optional enum: ["INFORMATIONAL","SUCCESS","REDIRECTION","CLIENT_ERROR","SERVER_ERROR"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get time series distribution of AI bots HTTP requests by dimension. — cloudflare.radar-get-ai-bots-timeseries-group

Run Get time series distribution of AI bots HTTP requests by dimension. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["USER_AGENT","CRAWL_PURPOSE","INDUSTRY","VERTICAL","CONTENT_TYPE","RESPONSE_STATUS","RESPONSE_STATUS_CATEGORY"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.crawlPurpose array Optional Filters results by bot crawl purpose.
query.crawlPurpose[] string Optional maxLength: 100
query.userAgent array Optional Filters results by user agent.
query.userAgent[] string Optional maxLength: 100
query.industry array Optional Filters results by industry.
query.industry[] string Optional maxLength: 2000
query.vertical array Optional Filters results by vertical.
query.vertical[] string Optional maxLength: 2000
query.contentType array Optional Filters results by content type category. When set, results can only be further filtered by location, continent, or Autonomous System.
query.contentType[] string Optional enum: ["HTML","IMAGES","JSON","JAVASCRIPT","CSS","PLAIN_TEXT","FONTS","XML","YAML","VIDEO","AUDIO","MARKDOWN","DOCUMENTS","BINARY","SERIALIZATION","OTHER"]
query.responseStatus array Optional Filters results by HTTP response status code (e.g. 200, 403, 404). Only IANA-registered codes are accepted.
query.responseStatus[] string Optional pattern: "^\\d{3}$"
query.responseStatusCategory array Optional Filters results by HTTP response status code category.
query.responseStatusCategory[] string Optional enum: ["INFORMATIONAL","SUCCESS","REDIRECTION","CLIENT_ERROR","SERVER_ERROR"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. PERCENTAGE_CHANGE requires exactly one comparison series (e.g. a control date range). enum: ["PERCENTAGE","MIN0_MAX","PERCENTAGE_CHANGE"]; default: "PERCENTAGE"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "USER_AGENT"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Workers AI inference distribution by dimension — cloudflare.radar-get-ai-inference-summary

Run Get Workers AI inference distribution by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["MODEL","TASK"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "MODEL"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get time series distribution of Workers AI inference by dimension. — cloudflare.radar-get-ai-inference-timeseries-group

Run Get time series distribution of Workers AI inference by dimension. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["MODEL","TASK"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. enum: ["PERCENTAGE","MIN0_MAX"]; default: "PERCENTAGE"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "MODEL"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AI markdown for agents reduction ratio summary — cloudflare.radar-get-ai-markdown-for-agents-summary

Run Get AI markdown for agents reduction ratio summary with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AI markdown for agents reduction ratio time series — cloudflare.radar-get-ai-markdown-for-agents-timeseries

Run Get AI markdown for agents reduction ratio time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get latest annotations — cloudflare.radar-get-annotations

Run Get latest annotations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.dateRange string Optional Filters results by a relative date range ending at the current time. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w), e.g. 7d. Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 3dcontrol covers days -10 to -7, 7dcontrol covers days -14 to -7, 28dcontrol covers days -56 to -28, and 10dcontrol covers days -24 to -14). Mutually exclusive with dateStart/dateEnd. pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart string Optional Start of the date range (inclusive). Alternative to dateRange; provide together with dateEnd. format: "date-time"
query.dateEnd string Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. format: "date-time"
query.dataSource string Optional Filters results by data source. enum: ["ALL","AI_BOTS","AI_GATEWAY","BGP","BOTS","CONNECTION_ANOMALY","CT","DNS","DNS_MAGNITUDE","DNS_AS112","DOS","EMAIL_ROUTING","EMAIL_SECURITY","FW","FW_PG","HTTP","HTTP_CONTROL","HTTP_CRAWLER_REFERER","HTTP_ORIGINS","IQI","LEAKED_CREDENTIALS","NET","ROBOTS_TXT","SPEED","WORKERS_AI"]
query.eventType string Optional Filters results by event type. EVENT is a legacy alias for GENERAL. enum: ["EVENT","GENERAL","OUTAGE","PARTIAL_PROJECTION","PIPELINE","TRAFFIC_ANOMALY"]
query.outageType string Optional Filters results by outage type. enum: ["NATIONWIDE","REGIONAL","NETWORK","PLATFORM"]
query.outageCause string Optional Filters results by outage cause. enum: ["BLOCKING","CABLE_CUT","CYBERATTACK","DNS","FIRE","GOVERNMENT_DIRECTED","MAINTENANCE","MECHANICAL","MILITARY_ACTION","MISCONFIGURATION","NATURAL_DISASTER","NETWORK_PROBLEM","POWER_OUTAGE","SOFTWARE","TECHNICAL_PROBLEM","UNKNOWN","WEATHER"]
query.tags array Optional Filters results by annotation tag. Matches annotations carrying at least one of the given tags.
query.tags[] string Optional Dimension tag an annotation applies to. enum: ["ADM1","ADM2","API_TRAFFIC","ARC","AS","ASN","ATTACKS","AUTHOR","BANDWIDTH","BITRATE","BOT","BOT_CATEGORY","BOT_CLASS","BOT_KIND","BOT_OPERATOR","BROWSER","BROWSER_FAMILY","BYTES","CA","CACHE_HIT","CA_OWNER","CHECK_RESULT","CLIENT_TYPE","COMPROMISED","CONTENT_TYPE","CRAWL_PURPOSE","CRAWL_REFER_RATIO","DEVICE_TYPE","DKIM","DMARC","DNS","DNSSEC","DNSSEC_AWARE","DNSSEC_E2E","DOMAIN_CATEGORY","DURATION","EDNS","ENCRYPTED","ENTRY_TYPE","EXPIRATION_STATUS","HAS_IPS","HAS_MATCHING_ANSWER","HAS_WILDCARDS","HTTP_METHOD","HTTP_PROTOCOL","HTTP_VERSION","INDUSTRY","IP_VERSION","JITTER","KEY_AGREEMENT","LATENCY","LOCATION","LOCATION_LATENCY","LOG","LOG_API","LOG_OPERATOR","MALICIOUS","MANAGED_RULES","MITIGATION_PRODUCT","MODEL","NAMESERVER_LATENCY","ORIGIN","ORIGIN_AS","ORIGIN_LOCATION","ORIGIN_TARGET_LOCATION_PAIR","OS","PERCENTILE","POST_QUANTUM","PREFIX","PRODUCT","PROTOCOL","PROVIDER","PUBLIC_KEY_ALGORITHM","QUERY_TYPE","REFERER","REGION","RESPONSE_CODE","RESPONSE_STATUS","RESPONSE_STATUS_CATEGORY","RESPONSE_TTL","SIGNATURE_ALGORITHM","SPAM","SPF","SPOOF","SUCCESS_RATE","TARGET_LOCATION","TASK","THREAT_CATEGORY","TLD","TLD_DNS_MAGNITUDE","TLS_VERSION","UPDATE_TYPE","USER_AGENT","VALIDATION_LEVEL","VECTOR","VERTICAL"]
query.query string Optional Filters results by a free-text match on the annotation description, id, or linked entities (location, ASN, origin). maxLength: 100
query.asn integer Optional Filters results by Autonomous System. Specify a single Autonomous System Number (ASN) as integer.
query.location string Optional Filters results by location. Specify an alpha-2 location code. minLength: 2; maxLength: 2
query.geoId string Optional Filters results by geolocation. Refer to GeoNames. maxLength: 100
query.origin string Optional Filters results by origin. maxLength: 100
query.tld string Optional Filters results by top-level domain. minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query.ca string Optional Filters results by certificate authority. maxLength: 100
query.log string Optional Filters results by certificate log. maxLength: 100
query.bot string Optional Filters results by bot. maxLength: 100
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get latest Internet outages and anomalies — cloudflare.radar-get-annotations-outages

Run Get latest Internet outages and anomalies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.dateRange string Optional Filters results by a relative date range ending at the current time. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w), e.g. 7d. Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 3dcontrol covers days -10 to -7, 7dcontrol covers days -14 to -7, 28dcontrol covers days -56 to -28, and 10dcontrol covers days -24 to -14). Mutually exclusive with dateStart/dateEnd. pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart string Optional Start of the date range (inclusive). Alternative to dateRange; provide together with dateEnd. format: "date-time"
query.dateEnd string Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. format: "date-time"
query.dataSource string Optional Filters results by data source. enum: ["ALL","AI_BOTS","AI_GATEWAY","BGP","BOTS","CONNECTION_ANOMALY","CT","DNS","DNS_MAGNITUDE","DNS_AS112","DOS","EMAIL_ROUTING","EMAIL_SECURITY","FW","FW_PG","HTTP","HTTP_CONTROL","HTTP_CRAWLER_REFERER","HTTP_ORIGINS","IQI","LEAKED_CREDENTIALS","NET","ROBOTS_TXT","SPEED","WORKERS_AI"]
query.outageType string Optional Filters results by outage type. enum: ["NATIONWIDE","REGIONAL","NETWORK","PLATFORM"]
query.outageCause string Optional Filters results by outage cause. enum: ["BLOCKING","CABLE_CUT","CYBERATTACK","DNS","FIRE","GOVERNMENT_DIRECTED","MAINTENANCE","MECHANICAL","MILITARY_ACTION","MISCONFIGURATION","NATURAL_DISASTER","NETWORK_PROBLEM","POWER_OUTAGE","SOFTWARE","TECHNICAL_PROBLEM","UNKNOWN","WEATHER"]
query.tags array Optional Filters results by annotation tag. Matches annotations carrying at least one of the given tags.
query.tags[] string Optional Dimension tag an annotation applies to. enum: ["ADM1","ADM2","API_TRAFFIC","ARC","AS","ASN","ATTACKS","AUTHOR","BANDWIDTH","BITRATE","BOT","BOT_CATEGORY","BOT_CLASS","BOT_KIND","BOT_OPERATOR","BROWSER","BROWSER_FAMILY","BYTES","CA","CACHE_HIT","CA_OWNER","CHECK_RESULT","CLIENT_TYPE","COMPROMISED","CONTENT_TYPE","CRAWL_PURPOSE","CRAWL_REFER_RATIO","DEVICE_TYPE","DKIM","DMARC","DNS","DNSSEC","DNSSEC_AWARE","DNSSEC_E2E","DOMAIN_CATEGORY","DURATION","EDNS","ENCRYPTED","ENTRY_TYPE","EXPIRATION_STATUS","HAS_IPS","HAS_MATCHING_ANSWER","HAS_WILDCARDS","HTTP_METHOD","HTTP_PROTOCOL","HTTP_VERSION","INDUSTRY","IP_VERSION","JITTER","KEY_AGREEMENT","LATENCY","LOCATION","LOCATION_LATENCY","LOG","LOG_API","LOG_OPERATOR","MALICIOUS","MANAGED_RULES","MITIGATION_PRODUCT","MODEL","NAMESERVER_LATENCY","ORIGIN","ORIGIN_AS","ORIGIN_LOCATION","ORIGIN_TARGET_LOCATION_PAIR","OS","PERCENTILE","POST_QUANTUM","PREFIX","PRODUCT","PROTOCOL","PROVIDER","PUBLIC_KEY_ALGORITHM","QUERY_TYPE","REFERER","REGION","RESPONSE_CODE","RESPONSE_STATUS","RESPONSE_STATUS_CATEGORY","RESPONSE_TTL","SIGNATURE_ALGORITHM","SPAM","SPF","SPOOF","SUCCESS_RATE","TARGET_LOCATION","TASK","THREAT_CATEGORY","TLD","TLD_DNS_MAGNITUDE","TLS_VERSION","UPDATE_TYPE","USER_AGENT","VALIDATION_LEVEL","VECTOR","VERTICAL"]
query.query string Optional Filters results by a free-text match on the annotation description, id, or linked entities (location, ASN, origin). maxLength: 100
query.asn integer Optional Filters results by Autonomous System. Specify a single Autonomous System Number (ASN) as integer.
query.location string Optional Filters results by location. Specify an alpha-2 location code. minLength: 2; maxLength: 2
query.geoId string Optional Filters results by geolocation. Refer to GeoNames. maxLength: 100
query.origin string Optional Filters results by origin. maxLength: 100
query.tld string Optional Filters results by top-level domain. minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query.ca string Optional Filters results by certificate authority. maxLength: 100
query.log string Optional Filters results by certificate log. maxLength: 100
query.bot string Optional Filters results by bot. maxLength: 100
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the number of outages by location — cloudflare.radar-get-annotations-outages-top

Run Get the number of outages by location with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.dateRange string Optional Filters results by a relative date range ending at the current time. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w), e.g. 7d. Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 3dcontrol covers days -10 to -7, 7dcontrol covers days -14 to -7, 28dcontrol covers days -56 to -28, and 10dcontrol covers days -24 to -14). Mutually exclusive with dateStart/dateEnd. pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart string Optional Start of the date range (inclusive). Alternative to dateRange; provide together with dateEnd. format: "date-time"
query.dateEnd string Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. format: "date-time"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get annotation by ID — cloudflare.radar-get-annotation-by-id

Run Get annotation by ID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.id string Required Annotation ID. pattern: "^[1-9]\\d{0,18}$"
query object Optional additionalProperties: false
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "id": "550"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AS112 summary by dimension — cloudflare.radar-get-dns-as112-summary

Run Get AS112 summary by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["DNSSEC","EDNS","IP_VERSION","PROTOCOL","QUERY_TYPE","RESPONSE_CODE"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.queryType array Optional Filters results by DNS query type.
query.queryType[] string | null Optional enum: ["A","AAAA","A6","AFSDB","ANY","APL","ATMA","AXFR","CAA","CDNSKEY","CDS","CERT","CNAME","CSYNC","DHCID","DLV","DNAME","DNSKEY","DOA","DS","EID","EUI48","EUI64","GPOS","GID","HINFO","HIP","HTTPS","IPSECKEY","ISDN","IXFR","KEY","KX","L32","L64","LOC","LP","MAILA","MAILB","MB","MD","MF","MG","MINFO","MR","MX","NAPTR","NB","NBSTAT","NID","NIMLOC","NINFO","NS","NSAP","NSEC","NSEC3","NSEC3PARAM","NULL","NXT","OPENPGPKEY","OPT","PTR","PX","RKEY","RP","RRSIG","RT","SIG","SINK","SMIMEA","SOA","SPF","SRV","SSHFP","SVCB","TA","TALINK","TKEY","TLSA","TSIG","TXT","UINFO","UID","UNSPEC","URI","WKS","X25","ZONEMD"]
query.protocol array Optional Filters results by DNS transport protocol.
query.protocol[] string Optional enum: ["UDP","TCP","HTTPS","TLS"]
query.responseCode array Optional Filters results by DNS response code.
query.responseCode[] string Optional enum: ["NOERROR","FORMERR","SERVFAIL","NXDOMAIN","NOTIMP","REFUSED","YXDOMAIN","YXRRSET","NXRRSET","NOTAUTH","NOTZONE","BADSIG","BADKEY","BADTIME","BADMODE","BADNAME","BADALG","BADTRUNC","BADCOOKIE"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "DNSSEC"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AS112 DNS queries time series — cloudflare.radar-get-dns-as112-timeseries

Run Get AS112 DNS queries time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.queryType array Optional Filters results by DNS query type.
query.queryType[] string | null Optional enum: ["A","AAAA","A6","AFSDB","ANY","APL","ATMA","AXFR","CAA","CDNSKEY","CDS","CERT","CNAME","CSYNC","DHCID","DLV","DNAME","DNSKEY","DOA","DS","EID","EUI48","EUI64","GPOS","GID","HINFO","HIP","HTTPS","IPSECKEY","ISDN","IXFR","KEY","KX","L32","L64","LOC","LP","MAILA","MAILB","MB","MD","MF","MG","MINFO","MR","MX","NAPTR","NB","NBSTAT","NID","NIMLOC","NINFO","NS","NSAP","NSEC","NSEC3","NSEC3PARAM","NULL","NXT","OPENPGPKEY","OPT","PTR","PX","RKEY","RP","RRSIG","RT","SIG","SINK","SMIMEA","SOA","SPF","SRV","SSHFP","SVCB","TA","TALINK","TKEY","TLSA","TSIG","TXT","UINFO","UID","UNSPEC","URI","WKS","X25","ZONEMD"]
query.protocol array Optional Filters results by DNS transport protocol.
query.protocol[] string Optional enum: ["UDP","TCP","HTTPS","TLS"]
query.responseCode array Optional Filters results by DNS response code.
query.responseCode[] string Optional enum: ["NOERROR","FORMERR","SERVFAIL","NXDOMAIN","NOTIMP","REFUSED","YXDOMAIN","YXRRSET","NXRRSET","NOTAUTH","NOTZONE","BADSIG","BADKEY","BADTIME","BADMODE","BADNAME","BADALG","BADTRUNC","BADCOOKIE"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AS112 time series grouped by dimension — cloudflare.radar-get-dns-as112-timeseries-group

Run Get AS112 time series grouped by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["DNSSEC","EDNS","IP_VERSION","PROTOCOL","QUERY_TYPE","RESPONSE_CODE"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.queryType array Optional Filters results by DNS query type.
query.queryType[] string | null Optional enum: ["A","AAAA","A6","AFSDB","ANY","APL","ATMA","AXFR","CAA","CDNSKEY","CDS","CERT","CNAME","CSYNC","DHCID","DLV","DNAME","DNSKEY","DOA","DS","EID","EUI48","EUI64","GPOS","GID","HINFO","HIP","HTTPS","IPSECKEY","ISDN","IXFR","KEY","KX","L32","L64","LOC","LP","MAILA","MAILB","MB","MD","MF","MG","MINFO","MR","MX","NAPTR","NB","NBSTAT","NID","NIMLOC","NINFO","NS","NSAP","NSEC","NSEC3","NSEC3PARAM","NULL","NXT","OPENPGPKEY","OPT","PTR","PX","RKEY","RP","RRSIG","RT","SIG","SINK","SMIMEA","SOA","SPF","SRV","SSHFP","SVCB","TA","TALINK","TKEY","TLSA","TSIG","TXT","UINFO","UID","UNSPEC","URI","WKS","X25","ZONEMD"]
query.protocol array Optional Filters results by DNS transport protocol.
query.protocol[] string Optional enum: ["UDP","TCP","HTTPS","TLS"]
query.responseCode array Optional Filters results by DNS response code.
query.responseCode[] string Optional enum: ["NOERROR","FORMERR","SERVFAIL","NXDOMAIN","NOTIMP","REFUSED","YXDOMAIN","YXRRSET","NXRRSET","NOTAUTH","NOTZONE","BADSIG","BADKEY","BADTIME","BADMODE","BADNAME","BADALG","BADTRUNC","BADCOOKIE"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "DNSSEC"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by AS112 DNS queries — cloudflare.radar-get-dns-as112-top-locations

Run Get top locations by AS112 DNS queries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by AS112 DNS queries with DNSSEC support — cloudflare.radar-get-dns-as112-top-locations-by-dnssec

Run Get top locations by AS112 DNS queries with DNSSEC support with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dnssec string Required DNSSEC (DNS Security Extensions) status. enum: ["SUPPORTED","NOT_SUPPORTED"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dnssec": "SUPPORTED"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by AS112 DNS queries with EDNS support — cloudflare.radar-get-dns-as112-top-locations-by-edns

Run Get top locations by AS112 DNS queries with EDNS support with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.edns string Required EDNS (Extension Mechanisms for DNS) status. enum: ["SUPPORTED","NOT_SUPPORTED"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "edns": "SUPPORTED"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by AS112 DNS queries for an IP version — cloudflare.radar-get-dns-as112-top-locations-by-ip-version

Run Get top locations by AS112 DNS queries for an IP version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ip_version string Required IP version. enum: ["IPv4","IPv6"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ip_version": "IPv4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get layer 3 attacks summary by dimension — cloudflare.radar-get-attacks-layer3-summary

Run Get layer 3 attacks summary by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["PROTOCOL","IP_VERSION","VECTOR","DURATION","BITRATE","VERTICAL","INDUSTRY"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.protocol array Optional Filters the results by layer 3/4 protocol.
query.protocol[] string Optional enum: ["UDP","TCP","ICMP","GRE"]
query.direction string Optional Specifies whether the location filter applies to the source or target location. enum: ["ORIGIN","TARGET"]; default: "ORIGIN"
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "PROTOCOL"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get layer 3 attacks by bytes time series — cloudflare.radar-get-attacks-layer3-timeseries-by-bytes

Run Get layer 3 attacks by bytes time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.protocol array Optional Filters the results by layer 3/4 protocol.
query.protocol[] string Optional enum: ["UDP","TCP","ICMP","GRE"]
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. PERCENTAGE_CHANGE requires exactly one comparison series (e.g. a control date range). enum: ["PERCENTAGE_CHANGE","MIN0_MAX"]
query.metric string Optional Measurement units, eg. bytes. enum: ["BYTES","BYTES_OLD"]; default: "bytes"
query.direction string Optional Specifies whether the location filter applies to the source or target location. enum: ["ORIGIN","TARGET"]; default: "ORIGIN"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get layer 3 attacks time series grouped by dimension — cloudflare.radar-get-attacks-layer3-timeseries-group

Run Get layer 3 attacks time series grouped by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["PROTOCOL","IP_VERSION","VECTOR","DURATION","BITRATE","VERTICAL","INDUSTRY"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.protocol array Optional Filters the results by layer 3/4 protocol.
query.protocol[] string Optional enum: ["UDP","TCP","ICMP","GRE"]
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. enum: ["PERCENTAGE","MIN0_MAX"]; default: "PERCENTAGE"
query.direction string Optional Specifies whether the location filter applies to the source or target location. enum: ["ORIGIN","TARGET"]; default: "ORIGIN"
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "PROTOCOL"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top layer 3 attack pairs (origin and target locations) — cloudflare.radar-get-attacks-layer3-top-attacks

Run Get top layer 3 attack pairs (origin and target locations) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.protocol array Optional Filters the results by layer 3/4 protocol.
query.protocol[] string Optional enum: ["UDP","TCP","ICMP","GRE"]
query.limitDirection string Optional Specifies whether the limitPerLocation applies to the source or target location. enum: ["ORIGIN","TARGET"]; default: "ORIGIN"
query.limitPerLocation integer Optional Limits the number of attacks per origin/target (refer to limitDirection parameter) location. default: 10; exclusiveMinimum: 0
query.magnitude string Optional Orders results based on attack magnitude, defined by total mitigated bytes or total mitigated attacks. enum: ["MITIGATED_BYTES","MITIGATED_ATTACKS"]
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. enum: ["PERCENTAGE","MIN_MAX"]; default: "PERCENTAGE"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top origin locations of layer 3 attacks — cloudflare.radar-get-attacks-layer3-top-origin-locations

Run Get top origin locations of layer 3 attacks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.protocol array Optional Filters the results by layer 3/4 protocol.
query.protocol[] string Optional enum: ["UDP","TCP","ICMP","GRE"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top target locations of layer 3 attacks — cloudflare.radar-get-attacks-layer3-top-target-locations

Run Get top target locations of layer 3 attacks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.protocol array Optional Filters the results by layer 3/4 protocol.
query.protocol[] string Optional enum: ["UDP","TCP","ICMP","GRE"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get layer 7 attacks summary by dimension — cloudflare.radar-get-attacks-layer7-summary

Run Get layer 7 attacks summary by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["HTTP_METHOD","HTTP_VERSION","IP_VERSION","MANAGED_RULES","MITIGATION_PRODUCT","VERTICAL","INDUSTRY"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.httpMethod array Optional Filters results by HTTP method.
query.httpMethod[] string Optional enum: ["GET","POST","DELETE","PUT","HEAD","PURGE","OPTIONS","PROPFIND","MKCOL","PATCH","ACL","BCOPY","BDELETE","BMOVE","BPROPFIND","BPROPPATCH","CHECKIN","CHECKOUT","CONNECT","COPY","LABEL","LOCK","MERGE","MKACTIVITY","MKWORKSPACE","MOVE","NOTIFY","ORDERPATCH","POLL","PROPPATCH","REPORT","SEARCH","SUBSCRIBE","TRACE","UNCHECKOUT","UNLOCK","UNSUBSCRIBE","UPDATE","VERSIONCONTROL","BASELINECONTROL","XMSENUMATTS","RPC_OUT_DATA","RPC_IN_DATA","JSON","COOK","TRACK"]
query.mitigationProduct array Optional Filters the results by layer 7 mitigation product.
query.mitigationProduct[] string Optional enum: ["DDOS","WAF","BOT_MANAGEMENT","ACCESS_RULES","IP_REPUTATION","API_SHIELD","DATA_LOSS_PREVENTION"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "HTTP_METHOD"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get layer 7 attacks time series — cloudflare.radar-get-attacks-layer7-timeseries

Run Get layer 7 attacks time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. PERCENTAGE_CHANGE requires exactly one comparison series (e.g. a control date range). enum: ["PERCENTAGE_CHANGE","MIN0_MAX"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.httpMethod array Optional Filters results by HTTP method.
query.httpMethod[] string Optional enum: ["GET","POST","DELETE","PUT","HEAD","PURGE","OPTIONS","PROPFIND","MKCOL","PATCH","ACL","BCOPY","BDELETE","BMOVE","BPROPFIND","BPROPPATCH","CHECKIN","CHECKOUT","CONNECT","COPY","LABEL","LOCK","MERGE","MKACTIVITY","MKWORKSPACE","MOVE","NOTIFY","ORDERPATCH","POLL","PROPPATCH","REPORT","SEARCH","SUBSCRIBE","TRACE","UNCHECKOUT","UNLOCK","UNSUBSCRIBE","UPDATE","VERSIONCONTROL","BASELINECONTROL","XMSENUMATTS","RPC_OUT_DATA","RPC_IN_DATA","JSON","COOK","TRACK"]
query.mitigationProduct array Optional Filters the results by layer 7 mitigation product.
query.mitigationProduct[] string Optional enum: ["DDOS","WAF","BOT_MANAGEMENT","ACCESS_RULES","IP_REPUTATION","API_SHIELD","DATA_LOSS_PREVENTION"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get layer 7 attacks time series grouped by dimension — cloudflare.radar-get-attacks-layer7-timeseries-group

Run Get layer 7 attacks time series grouped by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["HTTP_METHOD","HTTP_VERSION","IP_VERSION","MANAGED_RULES","MITIGATION_PRODUCT","VERTICAL","INDUSTRY"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.httpMethod array Optional Filters results by HTTP method.
query.httpMethod[] string Optional enum: ["GET","POST","DELETE","PUT","HEAD","PURGE","OPTIONS","PROPFIND","MKCOL","PATCH","ACL","BCOPY","BDELETE","BMOVE","BPROPFIND","BPROPPATCH","CHECKIN","CHECKOUT","CONNECT","COPY","LABEL","LOCK","MERGE","MKACTIVITY","MKWORKSPACE","MOVE","NOTIFY","ORDERPATCH","POLL","PROPPATCH","REPORT","SEARCH","SUBSCRIBE","TRACE","UNCHECKOUT","UNLOCK","UNSUBSCRIBE","UPDATE","VERSIONCONTROL","BASELINECONTROL","XMSENUMATTS","RPC_OUT_DATA","RPC_IN_DATA","JSON","COOK","TRACK"]
query.mitigationProduct array Optional Filters the results by layer 7 mitigation product.
query.mitigationProduct[] string Optional enum: ["DDOS","WAF","BOT_MANAGEMENT","ACCESS_RULES","IP_REPUTATION","API_SHIELD","DATA_LOSS_PREVENTION"]
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. enum: ["PERCENTAGE","MIN0_MAX"]; default: "PERCENTAGE"
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "HTTP_METHOD"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top origin ASes of layer 7 attacks — cloudflare.radar-get-attacks-layer7-top-origin-as

Run Get top origin ASes of layer 7 attacks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.httpMethod array Optional Filters results by HTTP method.
query.httpMethod[] string Optional enum: ["GET","POST","DELETE","PUT","HEAD","PURGE","OPTIONS","PROPFIND","MKCOL","PATCH","ACL","BCOPY","BDELETE","BMOVE","BPROPFIND","BPROPPATCH","CHECKIN","CHECKOUT","CONNECT","COPY","LABEL","LOCK","MERGE","MKACTIVITY","MKWORKSPACE","MOVE","NOTIFY","ORDERPATCH","POLL","PROPPATCH","REPORT","SEARCH","SUBSCRIBE","TRACE","UNCHECKOUT","UNLOCK","UNSUBSCRIBE","UPDATE","VERSIONCONTROL","BASELINECONTROL","XMSENUMATTS","RPC_OUT_DATA","RPC_IN_DATA","JSON","COOK","TRACK"]
query.mitigationProduct array Optional Filters the results by layer 7 mitigation product.
query.mitigationProduct[] string Optional enum: ["DDOS","WAF","BOT_MANAGEMENT","ACCESS_RULES","IP_REPUTATION","API_SHIELD","DATA_LOSS_PREVENTION"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top layer 7 attack pairs (origin and target locations) — cloudflare.radar-get-attacks-layer7-top-attacks

Run Get top layer 7 attack pairs (origin and target locations) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.mitigationProduct array Optional Filters the results by layer 7 mitigation product.
query.mitigationProduct[] string Optional enum: ["DDOS","WAF","BOT_MANAGEMENT","ACCESS_RULES","IP_REPUTATION","API_SHIELD","DATA_LOSS_PREVENTION"]
query.limitDirection string Optional Specifies whether the limitPerLocation applies to the source or target location. enum: ["ORIGIN","TARGET"]; default: "ORIGIN"
query.limitPerLocation integer Optional Limits the number of attacks per origin/target (refer to limitDirection parameter) location. default: 10; exclusiveMinimum: 0
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. enum: ["PERCENTAGE","MIN_MAX"]; default: "PERCENTAGE"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top origin locations of layer 7 attacks — cloudflare.radar-get-attacks-layer7-top-origin-location

Run Get top origin locations of layer 7 attacks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.httpMethod array Optional Filters results by HTTP method.
query.httpMethod[] string Optional enum: ["GET","POST","DELETE","PUT","HEAD","PURGE","OPTIONS","PROPFIND","MKCOL","PATCH","ACL","BCOPY","BDELETE","BMOVE","BPROPFIND","BPROPPATCH","CHECKIN","CHECKOUT","CONNECT","COPY","LABEL","LOCK","MERGE","MKACTIVITY","MKWORKSPACE","MOVE","NOTIFY","ORDERPATCH","POLL","PROPPATCH","REPORT","SEARCH","SUBSCRIBE","TRACE","UNCHECKOUT","UNLOCK","UNSUBSCRIBE","UPDATE","VERSIONCONTROL","BASELINECONTROL","XMSENUMATTS","RPC_OUT_DATA","RPC_IN_DATA","JSON","COOK","TRACK"]
query.mitigationProduct array Optional Filters the results by layer 7 mitigation product.
query.mitigationProduct[] string Optional enum: ["DDOS","WAF","BOT_MANAGEMENT","ACCESS_RULES","IP_REPUTATION","API_SHIELD","DATA_LOSS_PREVENTION"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top target locations of layer 7 attacks — cloudflare.radar-get-attacks-layer7-top-target-location

Run Get top target locations of layer 7 attacks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.mitigationProduct array Optional Filters the results by layer 7 mitigation product.
query.mitigationProduct[] string Optional enum: ["DDOS","WAF","BOT_MANAGEMENT","ACCESS_RULES","IP_REPUTATION","API_SHIELD","DATA_LOSS_PREVENTION"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get BGP hijack events — cloudflare.radar-get-bgp-hijacks-events

Run Get BGP hijack events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.page integer Optional Current page number, starting from 1. default: 1; exclusiveMinimum: 0
query.per_page integer Optional Number of entries per page. default: 50; exclusiveMinimum: 0
query.eventId integer Optional The unique identifier of a event.
query.hijackerAsn integer Optional The potential hijacker AS of a BGP hijack event.
query.victimAsn integer Optional The potential victim AS of a BGP hijack event.
query.involvedAsn integer Optional The potential hijacker or victim AS of a BGP hijack event.
query.involvedCountry string Optional The country code of the potential hijacker or victim AS of a BGP hijack event. minLength: 2; maxLength: 2
query.prefix — Optional
query.prefix string Optional anyOf[1]
query.prefix string Optional anyOf[2]
query.minConfidence integer Optional Filters events by minimum confidence score (1-4 low, 5-7 mid, 8+ high).
query.maxConfidence integer Optional Filters events by maximum confidence score (1-4 low, 5-7 mid, 8+ high).
query.dateRange string Optional Filters results by a relative date range ending at the current time. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w), e.g. 7d. Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 3dcontrol covers days -10 to -7, 7dcontrol covers days -14 to -7, 28dcontrol covers days -56 to -28, and 10dcontrol covers days -24 to -14). Mutually exclusive with dateStart/dateEnd. pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart string Optional Start of the date range (inclusive). Alternative to dateRange; provide together with dateEnd. format: "date-time"
query.dateEnd string Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. format: "date-time"
query.sortBy string Optional Sorts results by the specified field. enum: ["ID","TIME","CONFIDENCE"]
query.sortOrder string Optional Sort order. enum: ["ASC","DESC"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get announced IP address space time series — cloudflare.radar-get-bgp-ips-timeseries

Run Get announced IP address space time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 location codes.
query.location[] string Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.includeDelay boolean Optional Includes data delay meta information.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by announced IP space — cloudflare.radar-get-bgp-ips-top-ases

Run Get top ASes by announced IP space with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.date string Optional Filters results by the specified datetime (ISO 8601). format: "date-time"
query.limit integer Optional Limits the number of objects returned in the response. default: 5; minimum: 1; maximum: 50
query.metric string Optional Ranking metric: IPv4 /24 count or IPv6 /48 count. enum: ["v4_24s","v6_48s"]
query.country string Optional Optional ISO 3166-1 alpha-2 country filter. Omit for global top-N. minLength: 2; maxLength: 2
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get BGP route leak events — cloudflare.radar-get-bgp-route-leak-events

Run Get BGP route leak events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.page integer Optional Current page number, starting from 1. default: 1; exclusiveMinimum: 0
query.per_page integer Optional Number of entries per page. default: 50; exclusiveMinimum: 0
query.eventId integer Optional The unique identifier of a event.
query.leakAsn integer Optional The leaking AS of a route leak event.
query.involvedAsn integer Optional ASN that is causing or affected by a route leak event.
query.involvedCountry string Optional Country code of a involved ASN in a route leak event. minLength: 2; maxLength: 2
query.dateRange string Optional Filters results by a relative date range ending at the current time. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w), e.g. 7d. Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 3dcontrol covers days -10 to -7, 7dcontrol covers days -14 to -7, 28dcontrol covers days -56 to -28, and 10dcontrol covers days -24 to -14). Mutually exclusive with dateStart/dateEnd. pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart string Optional Start of the date range (inclusive). Alternative to dateRange; provide together with dateEnd. format: "date-time"
query.dateEnd string Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. format: "date-time"
query.sortBy string Optional Sorts results by the specified field. enum: ["ID","LEAKS","PEERS","PREFIXES","ORIGINS","TIME"]
query.sortOrder string Optional Sort order. enum: ["ASC","DESC"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List ASes from global routing tables — cloudflare.radar-get-bgp-routes-asns

Run List ASes from global routing tables with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.location string Optional Filters results by location. Specify an alpha-2 location code. minLength: 2; maxLength: 2
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.sortBy string Optional Sorts results by the specified field. enum: ["cone","pfxs","ipv4","ipv6","rpki_valid","rpki_invalid","rpki_unknown"]
query.sortOrder string Optional Sort order. enum: ["ASC","DESC"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Multi-Origin AS (MOAS) prefixes — cloudflare.radar-get-bgp-pfx2as-moas

Run Get Multi-Origin AS (MOAS) prefixes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.origin integer Optional Lookup MOASes originated by the given ASN.
query.prefix — Optional
query.prefix string Optional anyOf[1]
query.prefix string Optional anyOf[2]
query.invalid_only boolean Optional Lookup only RPKI invalid MOASes.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get tier-1 path segments for an AS — cloudflare.radar-get-bgp-routes-paths

Run Get tier-1 path segments for an AS with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asn integer Required Single Autonomous System Number (ASN) as integer.
query object Optional additionalProperties: false
query.ipVersion string Optional Address family of the observed paths. Defaults to IPv4. enum: ["IPv4","IPv6"]; default: "IPv4"
query.collector string Optional Scope to a single RouteViews collector (e.g. "route-views3"). Omit to merge across all active collectors (identical path segments are deduplicated, observation counts summed, and every contributing collector listed). maxLength: 100
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asn": 174
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get prefix-to-ASN mapping — cloudflare.radar-get-bgp-pfx2as

Run Get prefix-to-ASN mapping with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.prefix — Optional
query.prefix string Optional anyOf[1]
query.prefix string Optional anyOf[2]
query.origin integer Optional Lookup prefixes originated by the given ASN.
query.rpkiStatus string Optional Return only results with matching rpki status: valid, invalid or unknown. enum: ["VALID","INVALID","UNKNOWN"]
query.longestPrefixMatch boolean Optional Return only results with the longest prefix match for the given prefix. For example, specify a /32 prefix to lookup the origin ASN for an IPv4 address.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get real-time BGP routes for a prefix — cloudflare.radar-get-bgp-routes-realtime

Run Get real-time BGP routes for a prefix with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.prefix — Optional
query.prefix string Optional anyOf[1]
query.prefix string Optional anyOf[2]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get BGP routing table stats — cloudflare.radar-get-bgp-routes-stats

Run **Get BGP routing table stats ** with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.asn integer Optional Filters results by Autonomous System. Specify a single Autonomous System Number (ASN) as integer.
query.location string Optional Filters results by location. Specify an alpha-2 location code. minLength: 2; maxLength: 2
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get upstream composition time series for an AS — cloudflare.radar-get-bgp-routes-upstreams-timeseries

Run Get upstream composition time series for an AS with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asn integer Required Single Autonomous System Number (ASN) as integer.
query object Optional additionalProperties: false
query.ipVersion string Optional Address family of the observed paths. Defaults to IPv4. enum: ["IPv4","IPv6"]; default: "IPv4"
query.dateStart string Optional Start of the date range (inclusive). Alternative to dateRange; provide together with dateEnd. format: "date-time"
query.dateEnd string Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. format: "date-time"
query.limit integer Optional Number of upstream ASNs to return as separate series, ranked by the first bucket. Remaining upstreams are grouped into an "OTHER" series. Defaults to 5.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asn": 174
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get ASPA changes over time — cloudflare.radar-get-bgp-rpki-aspa-changes

Run Get ASPA changes over time with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.dateStart string Optional Start of the date range (inclusive). Alternative to dateRange; provide together with dateEnd. format: "date-time"
query.dateEnd string Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. format: "date-time"
query.asn integer Optional Filter changes involving this ASN (as customer or provider).
query.includeAsnInfo boolean Optional Include ASN metadata (name, country) in response.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get ASPA objects snapshot — cloudflare.radar-get-bgp-rpki-aspa-snapshot

Run Get ASPA objects snapshot with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.customerAsn integer Optional Filter by customer ASN (the ASN publishing the ASPA object).
query.providerAsn integer Optional Filter by provider ASN (an authorized upstream provider in ASPA objects).
query.date string Optional Filters results by the specified datetime (ISO 8601). format: "date-time"
query.includeAsnInfo boolean Optional Include ASN metadata (name, country) in response.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get ASPA count time series — cloudflare.radar-get-bgp-rpki-aspa-timeseries

Run Get ASPA count time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.dateStart string Optional Start of the date range (inclusive). Alternative to dateRange; provide together with dateEnd. format: "date-time"
query.dateEnd string Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. format: "date-time"
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.rir array Optional Filter by Regional Internet Registry (RIR). Multiple RIRs generate multiple series.
query.rir[] string Optional enum: ["RIPE_NCC","ARIN","APNIC","LACNIC","AFRINIC"]
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 location codes.
query.location[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get RPKI ROA deployment time series — cloudflare.radar-get-bgp-rpki-roas-timeseries

Run Get RPKI ROA deployment time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.dateStart string Optional Start of the date range (inclusive). Alternative to dateRange; provide together with dateEnd. format: "date-time"
query.dateEnd string Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. format: "date-time"
query.metric string Optional Which RPKI ROA validation metric to return. validPfxsRatio = ratio of RPKI-valid prefixes (IPv4+IPv6 combined). validPfxsV4Ratio / validPfxsV6Ratio = same, split by IP version. validIpsRatio = ratio of RPKI-valid address space (IPv4 /24s + IPv6 /48s). validIpsV4Ratio / validIpsV6Ratio = same, split by IP version. enum: ["validPfxsRatio","validPfxsV4Ratio","validPfxsV6Ratio","validIpsRatio","validIpsV4Ratio","validIpsV6Ratio"]; default: "validPfxsRatio"
query.asn array Optional Filters results by Autonomous System Number. Specify one or more ASNs. Multiple values generate one series per ASN.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 location codes.
query.location[] string Optional
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get BGP time series — cloudflare.radar-get-bgp-timeseries

Run Get BGP time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.prefix array Optional Filters results by BGP network prefix.
query.prefix[] — Optional
query.prefix[] string Optional anyOf[1]
query.prefix[] string Optional anyOf[2]
query.updateType array Optional Filters results by BGP update type.
query.updateType[] string Optional enum: ["ANNOUNCEMENT","WITHDRAWAL"]
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by BGP updates — cloudflare.radar-get-bgp-top-ases

Run Get top ASes by BGP updates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.prefix array Optional Filters results by BGP network prefix.
query.prefix[] — Optional
query.prefix[] string Optional anyOf[1]
query.prefix[] string Optional anyOf[2]
query.updateType array Optional Filters results by BGP update type.
query.updateType[] string Optional enum: ["ANNOUNCEMENT","WITHDRAWAL"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by prefix count — cloudflare.radar-get-bgp-top-asns-by-prefixes

Run Get top ASes by prefix count with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.country string Optional Alpha-2 country code.
query.limit integer Optional Maximum number of ASes to return.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top prefixes by BGP updates — cloudflare.radar-get-bgp-top-prefixes

Run Get top prefixes by BGP updates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.updateType array Optional Filters results by BGP update type.
query.updateType[] string Optional enum: ["ANNOUNCEMENT","WITHDRAWAL"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List bots — cloudflare.radar-get-bots

Run List bots with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.botCategory string Optional Filters results by bot category. enum: ["SEARCH_ENGINE_CRAWLER","SEARCH_ENGINE_OPTIMIZATION","MONITORING_AND_ANALYTICS","ADVERTISING_AND_MARKETING","SOCIAL_MEDIA_MARKETING","PAGE_PREVIEW","ACADEMIC_RESEARCH","SECURITY","ACCESSIBILITY","WEBHOOKS","FEED_FETCHER","AI_CRAWLER","AGGREGATOR","AI_ASSISTANT","AI_SEARCH","ARCHIVER"]
query.botOperator string Optional Filters results by bot operator. maxLength: 100
query.kind string Optional Filters results by bot kind. Deprecated: the Verified Bot / Signed Agent distinction is being removed. enum: ["AGENT","BOT"]
query.botVerificationStatus string Optional Filters results by bot verification status. enum: ["VERIFIED"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get crawler HTTP request distribution by dimension — cloudflare.radar-get-crawlers-summary

Run Get crawler HTTP request distribution by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["CLIENT_TYPE","USER_AGENT","REFERER","CRAWL_REFER_RATIO","VERTICAL","INDUSTRY","RESPONSE_STATUS","RESPONSE_STATUS_CATEGORY"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.botOperator array Optional Filters results by bot operator.
query.botOperator[] string Optional maxLength: 100
query.vertical array Optional Filters results by vertical.
query.vertical[] string Optional maxLength: 2000
query.industry array Optional Filters results by industry.
query.industry[] string Optional maxLength: 2000
query.clientType array Optional Filters results by agent type.
query.clientType[] string Optional The type of the client. enum: ["HUMAN","NON_AI_BOT","AI_BOT","MIXED_PURPOSE"]
query.responseStatus array Optional Filters results by HTTP response status code (e.g. 200, 403, 404). Only IANA-registered codes are accepted.
query.responseStatus[] string Optional pattern: "^\\d{3}$"
query.responseStatusCategory array Optional Filters results by HTTP response status code category.
query.responseStatusCategory[] string Optional enum: ["INFORMATIONAL","SUCCESS","REDIRECTION","CLIENT_ERROR","SERVER_ERROR"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "CLIENT_TYPE"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get time series of crawler HTTP request distribution by dimension — cloudflare.radar-get-crawlers-timeseries-group

Run Get time series of crawler HTTP request distribution by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["CLIENT_TYPE","USER_AGENT","REFERER","CRAWL_REFER_RATIO","VERTICAL","INDUSTRY","RESPONSE_STATUS","RESPONSE_STATUS_CATEGORY"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. PERCENTAGE_CHANGE requires exactly one comparison series (e.g. a control date range). enum: ["PERCENTAGE","MIN0_MAX","PERCENTAGE_CHANGE"]; default: "PERCENTAGE"
query.botOperator array Optional Filters results by bot operator.
query.botOperator[] string Optional maxLength: 100
query.vertical array Optional Filters results by vertical.
query.vertical[] string Optional maxLength: 2000
query.industry array Optional Filters results by industry.
query.industry[] string Optional maxLength: 2000
query.clientType array Optional Filters results by agent type.
query.clientType[] string Optional The type of the client. enum: ["HUMAN","NON_AI_BOT","AI_BOT","MIXED_PURPOSE"]
query.responseStatus array Optional Filters results by HTTP response status code (e.g. 200, 403, 404). Only IANA-registered codes are accepted.
query.responseStatus[] string Optional pattern: "^\\d{3}$"
query.responseStatusCategory array Optional Filters results by HTTP response status code category.
query.responseStatusCategory[] string Optional enum: ["INFORMATIONAL","SUCCESS","REDIRECTION","CLIENT_ERROR","SERVER_ERROR"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "CLIENT_TYPE"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get bots HTTP requests distribution by dimension — cloudflare.radar-get-bots-summary

Run Get bots HTTP requests distribution by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["BOT","BOT_KIND","BOT_OPERATOR","BOT_CATEGORY"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.bot array Optional Filters results by bot name.
query.bot[] string Optional maxLength: 100
query.botOperator array Optional Filters results by bot operator.
query.botOperator[] string Optional maxLength: 100
query.botCategory array Optional Filters results by bot category.
query.botCategory[] string Optional The category of the bot. enum: ["SEARCH_ENGINE_CRAWLER","SEARCH_ENGINE_OPTIMIZATION","MONITORING_AND_ANALYTICS","ADVERTISING_AND_MARKETING","SOCIAL_MEDIA_MARKETING","PAGE_PREVIEW","ACADEMIC_RESEARCH","SECURITY","ACCESSIBILITY","WEBHOOKS","FEED_FETCHER","AI_CRAWLER","AGGREGATOR","AI_ASSISTANT","AI_SEARCH","ARCHIVER"]
query.botKind array Optional Filters results by bot kind. Deprecated: the Verified Bot / Signed Agent distinction is being removed.
query.botKind[] string Optional enum: ["AGENT","BOT"]
query.botVerificationStatus array Optional Filters results by bot verification status (Verified vs. Unverified).
query.botVerificationStatus[] string Optional The category of the bot. enum: ["VERIFIED"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "BOT"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get bots HTTP requests time series — cloudflare.radar-get-bots-timeseries

Run Get bots HTTP requests time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.bot array Optional Filters results by bot name.
query.bot[] string Optional maxLength: 100
query.botOperator array Optional Filters results by bot operator.
query.botOperator[] string Optional maxLength: 100
query.botCategory array Optional Filters results by bot category.
query.botCategory[] string Optional The category of the bot. enum: ["SEARCH_ENGINE_CRAWLER","SEARCH_ENGINE_OPTIMIZATION","MONITORING_AND_ANALYTICS","ADVERTISING_AND_MARKETING","SOCIAL_MEDIA_MARKETING","PAGE_PREVIEW","ACADEMIC_RESEARCH","SECURITY","ACCESSIBILITY","WEBHOOKS","FEED_FETCHER","AI_CRAWLER","AGGREGATOR","AI_ASSISTANT","AI_SEARCH","ARCHIVER"]
query.botKind array Optional Filters results by bot kind. Deprecated: the Verified Bot / Signed Agent distinction is being removed.
query.botKind[] string Optional enum: ["AGENT","BOT"]
query.botVerificationStatus array Optional Filters results by bot verification status (Verified vs. Unverified).
query.botVerificationStatus[] string Optional The category of the bot. enum: ["VERIFIED"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get time series distribution of bots HTTP requests by dimension. — cloudflare.radar-get-bots-timeseries-group

Run Get time series distribution of bots HTTP requests by dimension. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["BOT","BOT_KIND","BOT_OPERATOR","BOT_CATEGORY"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.bot array Optional Filters results by bot name.
query.bot[] string Optional maxLength: 100
query.botOperator array Optional Filters results by bot operator.
query.botOperator[] string Optional maxLength: 100
query.botCategory array Optional Filters results by bot category.
query.botCategory[] string Optional The category of the bot. enum: ["SEARCH_ENGINE_CRAWLER","SEARCH_ENGINE_OPTIMIZATION","MONITORING_AND_ANALYTICS","ADVERTISING_AND_MARKETING","SOCIAL_MEDIA_MARKETING","PAGE_PREVIEW","ACADEMIC_RESEARCH","SECURITY","ACCESSIBILITY","WEBHOOKS","FEED_FETCHER","AI_CRAWLER","AGGREGATOR","AI_ASSISTANT","AI_SEARCH","ARCHIVER"]
query.botKind array Optional Filters results by bot kind. Deprecated: the Verified Bot / Signed Agent distinction is being removed.
query.botKind[] string Optional enum: ["AGENT","BOT"]
query.botVerificationStatus array Optional Filters results by bot verification status (Verified vs. Unverified).
query.botVerificationStatus[] string Optional The category of the bot. enum: ["VERIFIED"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "BOT"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get bot details — cloudflare.radar-get-bot-details

Run Get bot details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bot_slug string Required Bot slug. maxLength: 100
query object Optional additionalProperties: false
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bot_slug": "gptbot"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List certificate authorities — cloudflare.radar-get-certificate-authorities

Run List certificate authorities with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get certificate authority details — cloudflare.radar-get-certificate-authority-details

Run Get certificate authority details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ca_slug string Required Certificate authority SHA256 fingerprint. pattern: "^[A-F0-9]{64}$"
query object Optional additionalProperties: false
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ca_slug": "24EDD4E503A8D3FDB5FFB4AF66C887359901CBE687A5A0760D10A08EED99A7C3"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List certificate logs — cloudflare.radar-get-certificate-logs

Run List certificate logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get certificate log details — cloudflare.radar-get-certificate-log-details

Run Get certificate log details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.log_slug string Required Certificate log slug. maxLength: 100
query object Optional additionalProperties: false
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "log_slug": "argon2024"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get certificate distribution by dimension — cloudflare.radar-get-ct-summary

Run Get certificate distribution by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the certificate attribute by which to group the results. enum: ["CA","CA_OWNER","DURATION","ENTRY_TYPE","EXPIRATION_STATUS","HAS_IPS","HAS_WILDCARDS","LOG","LOG_API","LOG_OPERATOR","PUBLIC_KEY_ALGORITHM","SIGNATURE_ALGORITHM","TLD","VALIDATION_LEVEL"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.ca array Optional Filters results by certificate authority.
query.ca[] string Optional
query.caOwner array Optional Filters results by certificate authority owner.
query.caOwner[] string Optional
query.duration array Optional Filters results by certificate duration.
query.duration[] string Optional enum: ["LTE_3D","GT_3D_LTE_7D","GT_7D_LTE_10D","GT_10D_LTE_47D","GT_47D_LTE_100D","GT_100D_LTE_200D","GT_200D"]
query.entryType array Optional Filters results by entry type (certificate vs. pre-certificate). Incompatible with the tld filter/dimension.
query.entryType[] string Optional enum: ["PRECERTIFICATE","CERTIFICATE"]
query.expirationStatus array Optional Filters results by expiration status (expired vs. valid).
query.expirationStatus[] string Optional enum: ["EXPIRED","VALID"]
query.hasIps array Optional Filters results based on whether the certificates are bound to specific IP addresses.
query.hasIps[] boolean Optional
query.hasWildcards array Optional Filters results based on whether the certificates contain wildcard domains.
query.hasWildcards[] boolean Optional
query.log array Optional Filters results by certificate log. Incompatible with the tld filter/dimension.
query.log[] string Optional maxLength: 100
query.logApi array Optional Filters results by certificate log API (RFC6962 vs. static). Incompatible with the tld filter/dimension.
query.logApi[] string Optional enum: ["RFC6962","STATIC"]
query.logOperator array Optional Filters results by certificate log operator. Incompatible with the tld filter/dimension.
query.logOperator[] string Optional maxLength: 100
query.publicKeyAlgorithm array Optional Filters results by public key algorithm.
query.publicKeyAlgorithm[] string Optional enum: ["DSA","ECDSA","RSA"]
query.signatureAlgorithm array Optional Filters results by signature algorithm.
query.signatureAlgorithm[] string Optional enum: ["DSA_SHA_1","DSA_SHA_256","ECDSA_SHA_1","ECDSA_SHA_256","ECDSA_SHA_384","ECDSA_SHA_512","PSS_SHA_256","PSS_SHA_384","PSS_SHA_512","RSA_MD2","RSA_MD5","RSA_SHA_1","RSA_SHA_256","RSA_SHA_384","RSA_SHA_512"]
query.tld array Optional Filters results by top-level domain. Incompatible with the log, logApi, logOperator, and entryType filters/dimensions.
query.tld[] string Optional minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query.validationLevel array Optional Filters results by validation level.
query.validationLevel[] string Optional enum: ["DOMAIN","ORGANIZATION","EXTENDED"]
query.uniqueEntries array Optional Specifies whether to filter out duplicate certificates and pre-certificates. Set to true for unique entries only.
query.uniqueEntries[] string Optional enum: ["true","false"]
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. enum: ["RAW_VALUES","PERCENTAGE"]; default: "RAW_VALUES"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "CA"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get certificates time series — cloudflare.radar-get-ct-timeseries

Run Get certificates time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.ca array Optional Filters results by certificate authority.
query.ca[] string Optional
query.caOwner array Optional Filters results by certificate authority owner.
query.caOwner[] string Optional
query.duration array Optional Filters results by certificate duration.
query.duration[] string Optional enum: ["LTE_3D","GT_3D_LTE_7D","GT_7D_LTE_10D","GT_10D_LTE_47D","GT_47D_LTE_100D","GT_100D_LTE_200D","GT_200D"]
query.entryType array Optional Filters results by entry type (certificate vs. pre-certificate). Incompatible with the tld filter/dimension.
query.entryType[] string Optional enum: ["PRECERTIFICATE","CERTIFICATE"]
query.expirationStatus array Optional Filters results by expiration status (expired vs. valid).
query.expirationStatus[] string Optional enum: ["EXPIRED","VALID"]
query.hasIps array Optional Filters results based on whether the certificates are bound to specific IP addresses.
query.hasIps[] boolean Optional
query.hasWildcards array Optional Filters results based on whether the certificates contain wildcard domains.
query.hasWildcards[] boolean Optional
query.log array Optional Filters results by certificate log. Incompatible with the tld filter/dimension.
query.log[] string Optional maxLength: 100
query.logApi array Optional Filters results by certificate log API (RFC6962 vs. static). Incompatible with the tld filter/dimension.
query.logApi[] string Optional enum: ["RFC6962","STATIC"]
query.logOperator array Optional Filters results by certificate log operator. Incompatible with the tld filter/dimension.
query.logOperator[] string Optional maxLength: 100
query.publicKeyAlgorithm array Optional Filters results by public key algorithm.
query.publicKeyAlgorithm[] string Optional enum: ["DSA","ECDSA","RSA"]
query.signatureAlgorithm array Optional Filters results by signature algorithm.
query.signatureAlgorithm[] string Optional enum: ["DSA_SHA_1","DSA_SHA_256","ECDSA_SHA_1","ECDSA_SHA_256","ECDSA_SHA_384","ECDSA_SHA_512","PSS_SHA_256","PSS_SHA_384","PSS_SHA_512","RSA_MD2","RSA_MD5","RSA_SHA_1","RSA_SHA_256","RSA_SHA_384","RSA_SHA_512"]
query.tld array Optional Filters results by top-level domain. Incompatible with the log, logApi, logOperator, and entryType filters/dimensions.
query.tld[] string Optional minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query.validationLevel array Optional Filters results by validation level.
query.validationLevel[] string Optional enum: ["DOMAIN","ORGANIZATION","EXTENDED"]
query.uniqueEntries array Optional Specifies whether to filter out duplicate certificates and pre-certificates. Set to true for unique entries only.
query.uniqueEntries[] string Optional enum: ["true","false"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get time series of certificate distribution by dimension — cloudflare.radar-get-ct-timeseries-group

Run Get time series of certificate distribution by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the certificate attribute by which to group the results. enum: ["CA","CA_OWNER","DURATION","ENTRY_TYPE","EXPIRATION_STATUS","HAS_IPS","HAS_WILDCARDS","LOG","LOG_API","LOG_OPERATOR","PUBLIC_KEY_ALGORITHM","SIGNATURE_ALGORITHM","TLD","VALIDATION_LEVEL"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.ca array Optional Filters results by certificate authority.
query.ca[] string Optional
query.caOwner array Optional Filters results by certificate authority owner.
query.caOwner[] string Optional
query.duration array Optional Filters results by certificate duration.
query.duration[] string Optional enum: ["LTE_3D","GT_3D_LTE_7D","GT_7D_LTE_10D","GT_10D_LTE_47D","GT_47D_LTE_100D","GT_100D_LTE_200D","GT_200D"]
query.entryType array Optional Filters results by entry type (certificate vs. pre-certificate). Incompatible with the tld filter/dimension.
query.entryType[] string Optional enum: ["PRECERTIFICATE","CERTIFICATE"]
query.expirationStatus array Optional Filters results by expiration status (expired vs. valid).
query.expirationStatus[] string Optional enum: ["EXPIRED","VALID"]
query.hasIps array Optional Filters results based on whether the certificates are bound to specific IP addresses.
query.hasIps[] boolean Optional
query.hasWildcards array Optional Filters results based on whether the certificates contain wildcard domains.
query.hasWildcards[] boolean Optional
query.log array Optional Filters results by certificate log. Incompatible with the tld filter/dimension.
query.log[] string Optional maxLength: 100
query.logApi array Optional Filters results by certificate log API (RFC6962 vs. static). Incompatible with the tld filter/dimension.
query.logApi[] string Optional enum: ["RFC6962","STATIC"]
query.logOperator array Optional Filters results by certificate log operator. Incompatible with the tld filter/dimension.
query.logOperator[] string Optional maxLength: 100
query.publicKeyAlgorithm array Optional Filters results by public key algorithm.
query.publicKeyAlgorithm[] string Optional enum: ["DSA","ECDSA","RSA"]
query.signatureAlgorithm array Optional Filters results by signature algorithm.
query.signatureAlgorithm[] string Optional enum: ["DSA_SHA_1","DSA_SHA_256","ECDSA_SHA_1","ECDSA_SHA_256","ECDSA_SHA_384","ECDSA_SHA_512","PSS_SHA_256","PSS_SHA_384","PSS_SHA_512","RSA_MD2","RSA_MD5","RSA_SHA_1","RSA_SHA_256","RSA_SHA_384","RSA_SHA_512"]
query.validationLevel array Optional Filters results by validation level.
query.validationLevel[] string Optional enum: ["DOMAIN","ORGANIZATION","EXTENDED"]
query.tld array Optional Filters results by top-level domain. Incompatible with the log, logApi, logOperator, and entryType filters/dimensions.
query.tld[] string Optional minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. enum: ["RAW_VALUES","PERCENTAGE"]; default: "RAW_VALUES"
query.uniqueEntries array Optional Specifies whether to filter out duplicate certificates and pre-certificates. Set to true for unique entries only.
query.uniqueEntries[] string Optional enum: ["true","false"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "CA"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List datasets — cloudflare.radar-get-reports-datasets

Run List datasets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.datasetType string Optional Filters results by dataset type. enum: ["RANKING_BUCKET","REPORT"]; default: "RANKING_BUCKET"
query.date string Optional Filters results by the specified date. format: "date"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get dataset download URL — cloudflare.radar-post-reports-dataset-download-url

Run Get dataset download URL with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]
body object Optional
body.datasetId integer Required

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get dataset CSV stream — cloudflare.radar-get-reports-dataset-download

Run Get dataset CSV stream with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.alias string Required Dataset alias or ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "alias": "ranking_top_1000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get DNS summary by dimension — cloudflare.radar-get-dns-summary

Run Get DNS summary by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. Grouping by TLD_DNS_MAGNITUDE does not support sub-daily aggregation intervals; 15m and 1h are raised to 1d. enum: ["AS","CACHE_HIT","DNSSEC","DNSSEC_AWARE","DNSSEC_E2E","IP_VERSION","LOCATION","MATCHING_ANSWER","PROTOCOL","QUERY_TYPE","RESPONSE_CODE","RESPONSE_TTL","TLD","TLD_DNS_MAGNITUDE"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.cacheHit array Optional Filters results based on cache status.
query.cacheHit[] boolean Optional
query.nodata array Optional Specifies whether the response includes empty DNS responses (NODATA). default: ["true"]
query.nodata[] boolean Optional
query.protocol array Optional Filters results by DNS transport protocol.
query.protocol[] string Optional enum: ["UDP","TCP","HTTPS","TLS"]
query.queryType array Optional Filters results by DNS query type.
query.queryType[] string | null Optional enum: ["A","AAAA","A6","AFSDB","ANY","APL","ATMA","AXFR","CAA","CDNSKEY","CDS","CERT","CNAME","CSYNC","DHCID","DLV","DNAME","DNSKEY","DOA","DS","EID","EUI48","EUI64","GPOS","GID","HINFO","HIP","HTTPS","IPSECKEY","ISDN","IXFR","KEY","KX","L32","L64","LOC","LP","MAILA","MAILB","MB","MD","MF","MG","MINFO","MR","MX","NAPTR","NB","NBSTAT","NID","NIMLOC","NINFO","NS","NSAP","NSEC","NSEC3","NSEC3PARAM","NULL","NXT","OPENPGPKEY","OPT","PTR","PX","RKEY","RP","RRSIG","RT","SIG","SINK","SMIMEA","SOA","SPF","SRV","SSHFP","SVCB","TA","TALINK","TKEY","TLSA","TSIG","TXT","UINFO","UID","UNSPEC","URI","WKS","X25","ZONEMD"]
query.responseCode array Optional Filters results by DNS response code.
query.responseCode[] string Optional enum: ["NOERROR","FORMERR","SERVFAIL","NXDOMAIN","NOTIMP","REFUSED","YXDOMAIN","YXRRSET","NXRRSET","NOTAUTH","NOTZONE","BADSIG","BADKEY","BADTIME","BADMODE","BADNAME","BADALG","BADTRUNC","BADCOOKIE"]
query.responseTtl array Optional Filters results by DNS response TTL.
query.responseTtl[] string Optional enum: ["LTE_1M","GT_1M_LTE_5M","GT_5M_LTE_15M","GT_15M_LTE_1H","GT_1H_LTE_1D","GT_1D_LTE_1W","GT_1W"]
query.dnssec array Optional Filters results based on DNSSEC (DNS Security Extensions) support.
query.dnssec[] string Optional enum: ["INVALID","INSECURE","SECURE","OTHER"]
query.dnssecAware array Optional Filters results based on DNSSEC (DNS Security Extensions) client awareness.
query.dnssecAware[] string Optional enum: ["SUPPORTED","NOT_SUPPORTED"]
query.dnssecE2e array Optional Filters results based on DNSSEC-validated answers by end-to-end security status.
query.dnssecE2e[] boolean Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.matchingAnswer array Optional Filters results based on whether the queries have a matching answer.
query.matchingAnswer[] boolean Optional
query.tld array Optional Filters results by top-level domain. Incompatible with the ipVersion, protocol, dnssecE2e, dnssecAware, responseTtl, and cacheHit filters/dimensions; this restriction does not apply to country-code TLDs (2-letter, e.g. uk).
query.tld[] string Optional minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "AS"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get DNS queries time series — cloudflare.radar-get-dns-timeseries

Run Get DNS queries time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.cacheHit array Optional Filters results based on cache status.
query.cacheHit[] boolean Optional
query.nodata array Optional Specifies whether the response includes empty DNS responses (NODATA). default: ["true"]
query.nodata[] boolean Optional
query.protocol array Optional Filters results by DNS transport protocol.
query.protocol[] string Optional enum: ["UDP","TCP","HTTPS","TLS"]
query.queryType array Optional Filters results by DNS query type.
query.queryType[] string | null Optional enum: ["A","AAAA","A6","AFSDB","ANY","APL","ATMA","AXFR","CAA","CDNSKEY","CDS","CERT","CNAME","CSYNC","DHCID","DLV","DNAME","DNSKEY","DOA","DS","EID","EUI48","EUI64","GPOS","GID","HINFO","HIP","HTTPS","IPSECKEY","ISDN","IXFR","KEY","KX","L32","L64","LOC","LP","MAILA","MAILB","MB","MD","MF","MG","MINFO","MR","MX","NAPTR","NB","NBSTAT","NID","NIMLOC","NINFO","NS","NSAP","NSEC","NSEC3","NSEC3PARAM","NULL","NXT","OPENPGPKEY","OPT","PTR","PX","RKEY","RP","RRSIG","RT","SIG","SINK","SMIMEA","SOA","SPF","SRV","SSHFP","SVCB","TA","TALINK","TKEY","TLSA","TSIG","TXT","UINFO","UID","UNSPEC","URI","WKS","X25","ZONEMD"]
query.responseCode array Optional Filters results by DNS response code.
query.responseCode[] string Optional enum: ["NOERROR","FORMERR","SERVFAIL","NXDOMAIN","NOTIMP","REFUSED","YXDOMAIN","YXRRSET","NXRRSET","NOTAUTH","NOTZONE","BADSIG","BADKEY","BADTIME","BADMODE","BADNAME","BADALG","BADTRUNC","BADCOOKIE"]
query.responseTtl array Optional Filters results by DNS response TTL.
query.responseTtl[] string Optional enum: ["LTE_1M","GT_1M_LTE_5M","GT_5M_LTE_15M","GT_15M_LTE_1H","GT_1H_LTE_1D","GT_1D_LTE_1W","GT_1W"]
query.dnssec array Optional Filters results based on DNSSEC (DNS Security Extensions) support.
query.dnssec[] string Optional enum: ["INVALID","INSECURE","SECURE","OTHER"]
query.dnssecAware array Optional Filters results based on DNSSEC (DNS Security Extensions) client awareness.
query.dnssecAware[] string Optional enum: ["SUPPORTED","NOT_SUPPORTED"]
query.dnssecE2e array Optional Filters results based on DNSSEC-validated answers by end-to-end security status.
query.dnssecE2e[] boolean Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.matchingAnswer array Optional Filters results based on whether the queries have a matching answer.
query.matchingAnswer[] boolean Optional
query.tld array Optional Filters results by top-level domain. Incompatible with the ipVersion, protocol, dnssecE2e, dnssecAware, responseTtl, and cacheHit filters/dimensions; this restriction does not apply to country-code TLDs (2-letter, e.g. uk).
query.tld[] string Optional minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get DNS time series grouped by dimension — cloudflare.radar-get-dns-timeseries-group

Run Get DNS time series grouped by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. Grouping by TLD_DNS_MAGNITUDE does not support sub-daily aggregation intervals; 15m and 1h are raised to 1d. enum: ["AS","CACHE_HIT","DNSSEC","DNSSEC_AWARE","DNSSEC_E2E","IP_VERSION","LOCATION","MATCHING_ANSWER","PROTOCOL","QUERY_TYPE","RESPONSE_CODE","RESPONSE_TTL","TLD","TLD_DNS_MAGNITUDE"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.cacheHit array Optional Filters results based on cache status.
query.cacheHit[] boolean Optional
query.nodata array Optional Specifies whether the response includes empty DNS responses (NODATA). default: ["true"]
query.nodata[] boolean Optional
query.protocol array Optional Filters results by DNS transport protocol.
query.protocol[] string Optional enum: ["UDP","TCP","HTTPS","TLS"]
query.queryType array Optional Filters results by DNS query type.
query.queryType[] string | null Optional enum: ["A","AAAA","A6","AFSDB","ANY","APL","ATMA","AXFR","CAA","CDNSKEY","CDS","CERT","CNAME","CSYNC","DHCID","DLV","DNAME","DNSKEY","DOA","DS","EID","EUI48","EUI64","GPOS","GID","HINFO","HIP","HTTPS","IPSECKEY","ISDN","IXFR","KEY","KX","L32","L64","LOC","LP","MAILA","MAILB","MB","MD","MF","MG","MINFO","MR","MX","NAPTR","NB","NBSTAT","NID","NIMLOC","NINFO","NS","NSAP","NSEC","NSEC3","NSEC3PARAM","NULL","NXT","OPENPGPKEY","OPT","PTR","PX","RKEY","RP","RRSIG","RT","SIG","SINK","SMIMEA","SOA","SPF","SRV","SSHFP","SVCB","TA","TALINK","TKEY","TLSA","TSIG","TXT","UINFO","UID","UNSPEC","URI","WKS","X25","ZONEMD"]
query.responseCode array Optional Filters results by DNS response code.
query.responseCode[] string Optional enum: ["NOERROR","FORMERR","SERVFAIL","NXDOMAIN","NOTIMP","REFUSED","YXDOMAIN","YXRRSET","NXRRSET","NOTAUTH","NOTZONE","BADSIG","BADKEY","BADTIME","BADMODE","BADNAME","BADALG","BADTRUNC","BADCOOKIE"]
query.responseTtl array Optional Filters results by DNS response TTL.
query.responseTtl[] string Optional enum: ["LTE_1M","GT_1M_LTE_5M","GT_5M_LTE_15M","GT_15M_LTE_1H","GT_1H_LTE_1D","GT_1D_LTE_1W","GT_1W"]
query.dnssec array Optional Filters results based on DNSSEC (DNS Security Extensions) support.
query.dnssec[] string Optional enum: ["INVALID","INSECURE","SECURE","OTHER"]
query.dnssecAware array Optional Filters results based on DNSSEC (DNS Security Extensions) client awareness.
query.dnssecAware[] string Optional enum: ["SUPPORTED","NOT_SUPPORTED"]
query.dnssecE2e array Optional Filters results based on DNSSEC-validated answers by end-to-end security status.
query.dnssecE2e[] boolean Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.matchingAnswer array Optional Filters results based on whether the queries have a matching answer.
query.matchingAnswer[] boolean Optional
query.tld array Optional Filters results by top-level domain. Incompatible with the ipVersion, protocol, dnssecE2e, dnssecAware, responseTtl, and cacheHit filters/dimensions; this restriction does not apply to country-code TLDs (2-letter, e.g. uk).
query.tld[] string Optional minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. RANK is only meaningful with the TLD_DNS_MAGNITUDE dimension, where it ranks TLDs by DNS query magnitude at each timestamp; for other dimensions it has no effect. enum: ["PERCENTAGE","MIN0_MAX","RANK"]; default: "PERCENTAGE"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "AS"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by DNS queries — cloudflare.radar-get-dns-top-ases

Run Get top ASes by DNS queries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.domain array Optional Filters results by domain name. When set, no other DNS filter may be used — only date filtering (dateRange, or dateStart/dateEnd) is allowed — and the date range cannot exceed 31 days.
query.domain[] string Optional minLength: 1; maxLength: 253; pattern: "^(?:(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)\\.)+(?:[A-Za-z]{2,63})$"
query.cacheHit array Optional Filters results based on cache status.
query.cacheHit[] boolean Optional
query.nodata array Optional Specifies whether the response includes empty DNS responses (NODATA). default: ["true"]
query.nodata[] boolean Optional
query.protocol array Optional Filters results by DNS transport protocol.
query.protocol[] string Optional enum: ["UDP","TCP","HTTPS","TLS"]
query.queryType array Optional Filters results by DNS query type.
query.queryType[] string | null Optional enum: ["A","AAAA","A6","AFSDB","ANY","APL","ATMA","AXFR","CAA","CDNSKEY","CDS","CERT","CNAME","CSYNC","DHCID","DLV","DNAME","DNSKEY","DOA","DS","EID","EUI48","EUI64","GPOS","GID","HINFO","HIP","HTTPS","IPSECKEY","ISDN","IXFR","KEY","KX","L32","L64","LOC","LP","MAILA","MAILB","MB","MD","MF","MG","MINFO","MR","MX","NAPTR","NB","NBSTAT","NID","NIMLOC","NINFO","NS","NSAP","NSEC","NSEC3","NSEC3PARAM","NULL","NXT","OPENPGPKEY","OPT","PTR","PX","RKEY","RP","RRSIG","RT","SIG","SINK","SMIMEA","SOA","SPF","SRV","SSHFP","SVCB","TA","TALINK","TKEY","TLSA","TSIG","TXT","UINFO","UID","UNSPEC","URI","WKS","X25","ZONEMD"]
query.responseCode array Optional Filters results by DNS response code.
query.responseCode[] string Optional enum: ["NOERROR","FORMERR","SERVFAIL","NXDOMAIN","NOTIMP","REFUSED","YXDOMAIN","YXRRSET","NXRRSET","NOTAUTH","NOTZONE","BADSIG","BADKEY","BADTIME","BADMODE","BADNAME","BADALG","BADTRUNC","BADCOOKIE"]
query.responseTtl array Optional Filters results by DNS response TTL.
query.responseTtl[] string Optional enum: ["LTE_1M","GT_1M_LTE_5M","GT_5M_LTE_15M","GT_15M_LTE_1H","GT_1H_LTE_1D","GT_1D_LTE_1W","GT_1W"]
query.dnssec array Optional Filters results based on DNSSEC (DNS Security Extensions) support.
query.dnssec[] string Optional enum: ["INVALID","INSECURE","SECURE","OTHER"]
query.dnssecAware array Optional Filters results based on DNSSEC (DNS Security Extensions) client awareness.
query.dnssecAware[] string Optional enum: ["SUPPORTED","NOT_SUPPORTED"]
query.dnssecE2e array Optional Filters results based on DNSSEC-validated answers by end-to-end security status.
query.dnssecE2e[] boolean Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.matchingAnswer array Optional Filters results based on whether the queries have a matching answer.
query.matchingAnswer[] boolean Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by DNS queries — cloudflare.radar-get-dns-top-locations

Run Get top locations by DNS queries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.domain array Optional Filters results by domain name. When set, no other DNS filter may be used — only date filtering (dateRange, or dateStart/dateEnd) is allowed — and the date range cannot exceed 31 days.
query.domain[] string Optional minLength: 1; maxLength: 253; pattern: "^(?:(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)\\.)+(?:[A-Za-z]{2,63})$"
query.cacheHit array Optional Filters results based on cache status.
query.cacheHit[] boolean Optional
query.nodata array Optional Specifies whether the response includes empty DNS responses (NODATA). default: ["true"]
query.nodata[] boolean Optional
query.protocol array Optional Filters results by DNS transport protocol.
query.protocol[] string Optional enum: ["UDP","TCP","HTTPS","TLS"]
query.queryType array Optional Filters results by DNS query type.
query.queryType[] string | null Optional enum: ["A","AAAA","A6","AFSDB","ANY","APL","ATMA","AXFR","CAA","CDNSKEY","CDS","CERT","CNAME","CSYNC","DHCID","DLV","DNAME","DNSKEY","DOA","DS","EID","EUI48","EUI64","GPOS","GID","HINFO","HIP","HTTPS","IPSECKEY","ISDN","IXFR","KEY","KX","L32","L64","LOC","LP","MAILA","MAILB","MB","MD","MF","MG","MINFO","MR","MX","NAPTR","NB","NBSTAT","NID","NIMLOC","NINFO","NS","NSAP","NSEC","NSEC3","NSEC3PARAM","NULL","NXT","OPENPGPKEY","OPT","PTR","PX","RKEY","RP","RRSIG","RT","SIG","SINK","SMIMEA","SOA","SPF","SRV","SSHFP","SVCB","TA","TALINK","TKEY","TLSA","TSIG","TXT","UINFO","UID","UNSPEC","URI","WKS","X25","ZONEMD"]
query.responseCode array Optional Filters results by DNS response code.
query.responseCode[] string Optional enum: ["NOERROR","FORMERR","SERVFAIL","NXDOMAIN","NOTIMP","REFUSED","YXDOMAIN","YXRRSET","NXRRSET","NOTAUTH","NOTZONE","BADSIG","BADKEY","BADTIME","BADMODE","BADNAME","BADALG","BADTRUNC","BADCOOKIE"]
query.responseTtl array Optional Filters results by DNS response TTL.
query.responseTtl[] string Optional enum: ["LTE_1M","GT_1M_LTE_5M","GT_5M_LTE_15M","GT_15M_LTE_1H","GT_1H_LTE_1D","GT_1D_LTE_1W","GT_1W"]
query.dnssec array Optional Filters results based on DNSSEC (DNS Security Extensions) support.
query.dnssec[] string Optional enum: ["INVALID","INSECURE","SECURE","OTHER"]
query.dnssecAware array Optional Filters results based on DNSSEC (DNS Security Extensions) client awareness.
query.dnssecAware[] string Optional enum: ["SUPPORTED","NOT_SUPPORTED"]
query.dnssecE2e array Optional Filters results based on DNSSEC-validated answers by end-to-end security status.
query.dnssecE2e[] boolean Optional
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.matchingAnswer array Optional Filters results based on whether the queries have a matching answer.
query.matchingAnswer[] boolean Optional
query.tld array Optional Filters results by top-level domain. Incompatible with the ipVersion, protocol, dnssecE2e, dnssecAware, responseTtl, and cacheHit filters/dimensions; this restriction does not apply to country-code TLDs (2-letter, e.g. uk).
query.tld[] string Optional minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get email routing summary by dimension — cloudflare.radar-get-email-routing-summary

Run Get email routing summary by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["IP_VERSION","ENCRYPTED","ARC","DKIM","DMARC","SPF"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.arc array Optional Filters results by ARC (Authenticated Received Chain) validation.
query.arc[] string Optional enum: ["PASS","NONE","FAIL"]
query.dkim array Optional Filters results by DKIM (DomainKeys Identified Mail) validation status.
query.dkim[] string Optional enum: ["PASS","NONE","FAIL"]
query.dmarc array Optional Filters results by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation status.
query.dmarc[] string Optional enum: ["PASS","NONE","FAIL"]
query.spf array Optional Filters results by SPF (Sender Policy Framework) validation status.
query.spf[] string Optional enum: ["PASS","NONE","FAIL"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.encrypted array Optional Filters results by encryption status (encrypted vs. not-encrypted).
query.encrypted[] string Optional enum: ["ENCRYPTED","NOT_ENCRYPTED"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "IP_VERSION"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get email routing time series grouped by dimension — cloudflare.radar-get-email-routing-timeseries-group

Run Get email routing time series grouped by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["IP_VERSION","ENCRYPTED","ARC","DKIM","DMARC","SPF"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.arc array Optional Filters results by ARC (Authenticated Received Chain) validation.
query.arc[] string Optional enum: ["PASS","NONE","FAIL"]
query.dkim array Optional Filters results by DKIM (DomainKeys Identified Mail) validation status.
query.dkim[] string Optional enum: ["PASS","NONE","FAIL"]
query.dmarc array Optional Filters results by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation status.
query.dmarc[] string Optional enum: ["PASS","NONE","FAIL"]
query.spf array Optional Filters results by SPF (Sender Policy Framework) validation status.
query.spf[] string Optional enum: ["PASS","NONE","FAIL"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.encrypted array Optional Filters results by encryption status (encrypted vs. not-encrypted).
query.encrypted[] string Optional enum: ["ENCRYPTED","NOT_ENCRYPTED"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "IP_VERSION"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get email security summary by dimension — cloudflare.radar-get-email-security-summary

Run Get email security summary by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["SPAM","MALICIOUS","SPOOF","THREAT_CATEGORY","ARC","DKIM","DMARC","SPF","TLS_VERSION"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.arc array Optional Filters results by ARC (Authenticated Received Chain) validation.
query.arc[] string Optional enum: ["PASS","NONE","FAIL"]
query.dkim array Optional Filters results by DKIM (DomainKeys Identified Mail) validation status.
query.dkim[] string Optional enum: ["PASS","NONE","FAIL"]
query.dmarc array Optional Filters results by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation status.
query.dmarc[] string Optional enum: ["PASS","NONE","FAIL"]
query.spf array Optional Filters results by SPF (Sender Policy Framework) validation status.
query.spf[] string Optional enum: ["PASS","NONE","FAIL"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "SPAM"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get email security time series grouped by dimension — cloudflare.radar-get-email-security-timeseries-group

Run Get email security time series grouped by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["SPAM","MALICIOUS","SPOOF","THREAT_CATEGORY","ARC","DKIM","DMARC","SPF","TLS_VERSION"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.arc array Optional Filters results by ARC (Authenticated Received Chain) validation.
query.arc[] string Optional enum: ["PASS","NONE","FAIL"]
query.dkim array Optional Filters results by DKIM (DomainKeys Identified Mail) validation status.
query.dkim[] string Optional enum: ["PASS","NONE","FAIL"]
query.dmarc array Optional Filters results by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation status.
query.dmarc[] string Optional enum: ["PASS","NONE","FAIL"]
query.spf array Optional Filters results by SPF (Sender Policy Framework) validation status.
query.spf[] string Optional enum: ["PASS","NONE","FAIL"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "SPAM"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top TLDs by email message volume — cloudflare.radar-get-email-security-top-tlds-by-messages

Run Get top TLDs by email message volume with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.arc array Optional Filters results by ARC (Authenticated Received Chain) validation.
query.arc[] string Optional enum: ["PASS","NONE","FAIL"]
query.dkim array Optional Filters results by DKIM (DomainKeys Identified Mail) validation status.
query.dkim[] string Optional enum: ["PASS","NONE","FAIL"]
query.dmarc array Optional Filters results by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation status.
query.dmarc[] string Optional enum: ["PASS","NONE","FAIL"]
query.spf array Optional Filters results by SPF (Sender Policy Framework) validation status.
query.spf[] string Optional enum: ["PASS","NONE","FAIL"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3"]
query.tldCategory string Optional Filters results by TLD category. enum: ["CLASSIC","COUNTRY"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top TLDs by email malicious classification — cloudflare.radar-get-email-security-top-tlds-by-malicious

Run Get top TLDs by email malicious classification with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.malicious string Required Malicious classification. enum: ["MALICIOUS","NOT_MALICIOUS"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.arc array Optional Filters results by ARC (Authenticated Received Chain) validation.
query.arc[] string Optional enum: ["PASS","NONE","FAIL"]
query.dkim array Optional Filters results by DKIM (DomainKeys Identified Mail) validation status.
query.dkim[] string Optional enum: ["PASS","NONE","FAIL"]
query.dmarc array Optional Filters results by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation status.
query.dmarc[] string Optional enum: ["PASS","NONE","FAIL"]
query.spf array Optional Filters results by SPF (Sender Policy Framework) validation status.
query.spf[] string Optional enum: ["PASS","NONE","FAIL"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3"]
query.tldCategory string Optional Filters results by TLD category. enum: ["CLASSIC","COUNTRY"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "malicious": "MALICIOUS"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top TLDs by email spam classification — cloudflare.radar-get-email-security-top-tlds-by-spam

Run Get top TLDs by email spam classification with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.spam string Required Spam classification. enum: ["SPAM","NOT_SPAM"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.arc array Optional Filters results by ARC (Authenticated Received Chain) validation.
query.arc[] string Optional enum: ["PASS","NONE","FAIL"]
query.dkim array Optional Filters results by DKIM (DomainKeys Identified Mail) validation status.
query.dkim[] string Optional enum: ["PASS","NONE","FAIL"]
query.dmarc array Optional Filters results by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation status.
query.dmarc[] string Optional enum: ["PASS","NONE","FAIL"]
query.spf array Optional Filters results by SPF (Sender Policy Framework) validation status.
query.spf[] string Optional enum: ["PASS","NONE","FAIL"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3"]
query.tldCategory string Optional Filters results by TLD category. enum: ["CLASSIC","COUNTRY"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "spam": "SPAM"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top TLDs by email spoof classification — cloudflare.radar-get-email-security-top-tlds-by-spoof

Run Get top TLDs by email spoof classification with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.spoof string Required Spoof classification. enum: ["SPOOF","NOT_SPOOF"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.arc array Optional Filters results by ARC (Authenticated Received Chain) validation.
query.arc[] string Optional enum: ["PASS","NONE","FAIL"]
query.dkim array Optional Filters results by DKIM (DomainKeys Identified Mail) validation status.
query.dkim[] string Optional enum: ["PASS","NONE","FAIL"]
query.dmarc array Optional Filters results by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation status.
query.dmarc[] string Optional enum: ["PASS","NONE","FAIL"]
query.spf array Optional Filters results by SPF (Sender Policy Framework) validation status.
query.spf[] string Optional enum: ["PASS","NONE","FAIL"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3"]
query.tldCategory string Optional Filters results by TLD category. enum: ["CLASSIC","COUNTRY"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "spoof": "SPOOF"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List autonomous systems — cloudflare.radar-get-entities-asn-list

Run List autonomous systems with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.asn string Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list.
query.location string Optional Filters results by location. Specify an alpha-2 location code. minLength: 2; maxLength: 2
query.orderBy string Optional Specifies the metric to order the ASNs by. enum: ["ASN","POPULATION"]; default: "ASN"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AS rankings by botnet threat feed activity — cloudflare.radar-get-as-botnet-threat-feed

Run Get AS rankings by botnet threat feed activity with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.metric string Optional Metric to rank ASNs by. enum: ["OFFENSE_COUNT","NUMBER_OF_OFFENDING_IPS"]; default: "NUMBER_OF_OFFENDING_IPS"
query.date string Optional The date to retrieve (YYYY-MM-DD format). If not specified, returns the most recent available data. Note: This is the date the report was generated. The report is generated from information collected from the previous day (e.g., the 2026-02-23 entry contains data from 2026-02-22). format: "date"
query.compareDateRange string Optional Relative date range for rank change comparison (e.g., "1d", "7d", "30d"). pattern: "^([1-9][0-9]?|[1-9][0-9]{1,2}|3[0-5][0-9]|36[0-4])d|([1-9]|[1-4][0-9]|5[0-2])w$"
query.location string Optional Filters results by location. Specify an alpha-2 location code. minLength: 2; maxLength: 2
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.sortOrder string Optional Sort order. enum: ["ASC","DESC"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AS details by IP address — cloudflare.radar-get-entities-asn-by-ip

Run Get AS details by IP address with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Required additionalProperties: false
query.ip — Required IP address.
query.ip string Required anyOf[1]; format: "ipv4"
query.ip string Required anyOf[2]; format: "ipv6"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "query": {
    "ip": "8.8.8.8"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AS details by ASN — cloudflare.radar-get-entities-asn-by-id

Run Get AS details by ASN with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asn integer Required Single Autonomous System Number (ASN) as integer.
query object Optional additionalProperties: false
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asn": 174
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get IRR AS-SETs that an AS is a member of — cloudflare.radar-get-asns-as-set

Run Get IRR AS-SETs that an AS is a member of with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asn integer Required Retrieves all AS-SETs that the given AS is a member of.
query object Optional additionalProperties: false
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asn": 3
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get AS-level relationships by ASN — cloudflare.radar-get-asns-rel

Run Get AS-level relationships by ASN with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asn integer Required Retrieves all ASNs with provider-customer or peering relationships with the given ASN.
query object Optional additionalProperties: false
query.asn2 integer Optional Retrieves the AS relationship of ASN2 with respect to the given ASN.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asn": 3
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get IP address details — cloudflare.radar-get-entities-ip

Run Get IP address details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Required additionalProperties: false
query.ip — Required IP address.
query.ip string Required anyOf[1]; format: "ipv4"
query.ip string Required anyOf[2]; format: "ipv6"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "query": {
    "ip": "8.8.8.8"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List locations — cloudflare.radar-get-entities-locations

Run List locations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.location string Optional Filters results by location. Specify a comma-separated list of alpha-2 location codes.
query.region string Optional Filters results by region. maxLength: 100
query.subregion string Optional Filters results by subregion. maxLength: 100
query.continent string Optional Filters results by continent code. enum: ["AF","AS","EU","NA","OC","SA"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get location details — cloudflare.radar-get-entities-location-by-alpha2

Run Get location details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.location string Required Location alpha-2 code. minLength: 2; maxLength: 2
query object Optional additionalProperties: false
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "location": "US"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Geolocations — cloudflare.radar-get-geolocations

Run List Geolocations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.geoId string Optional Filters results by geolocation. Specify a comma-separated list of GeoNames IDs.
query.location string Optional Filters results by location. Specify a comma-separated list of alpha-2 location codes.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Geolocation details — cloudflare.radar-get-geolocation-details

Run Get Geolocation details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.geo_id string Required Geolocation ID. Refer to GeoNames maxLength: 100
query object Optional additionalProperties: false
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "geo_id": "3190509"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get HTTP requests summary by dimension — cloudflare.radar-get-http-summary

Run Get HTTP requests summary by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the HTTP attribute by which to group the results. enum: ["ADM1","API_TRAFFIC","AS","BOT_CLASS","BROWSER","BROWSER_FAMILY","CONTENT_TYPE","DEVICE_TYPE","HTTP_PROTOCOL","HTTP_VERSION","IP_VERSION","LOCATION","OS","POST_QUANTUM","TLS_VERSION"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.apiTraffic array Optional Filters results by API traffic classification. API traffic is identified by JSON or XML response content types on dynamic (non-cacheable) HTTP requests. Incompatible with the browserFamily, deviceType, httpProtocol, httpVersion, ipVersion, os, and tlsVersion filters/dimensions. When set, results can only be further filtered by location, continent, or Autonomous System.
query.apiTraffic[] string Optional enum: ["API","NON_API"]
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.contentType array Optional Filters results by content type category. When set, results can only be further filtered by location, continent, or Autonomous System.
query.contentType[] string Optional enum: ["HTML","IMAGES","JSON","JAVASCRIPT","CSS","PLAIN_TEXT","FONTS","XML","YAML","VIDEO","AUDIO","MARKDOWN","DOCUMENTS","BINARY","SERIALIZATION","OTHER"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "ADM1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get HTTP requests time series — cloudflare.radar-get-http-timeseries

Run Get HTTP requests time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. PERCENTAGE_CHANGE requires exactly one comparison series (e.g. a control date range). enum: ["PERCENTAGE_CHANGE","MIN0_MAX"]
query.apiTraffic array Optional Filters results by API traffic classification. API traffic is identified by JSON or XML response content types on dynamic (non-cacheable) HTTP requests. Incompatible with the browserFamily, deviceType, httpProtocol, httpVersion, ipVersion, os, and tlsVersion filters/dimensions. When set, results can only be further filtered by location, continent, or Autonomous System.
query.apiTraffic[] string Optional enum: ["API","NON_API"]
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.contentType array Optional Filters results by content type category. When set, results can only be further filtered by location, continent, or Autonomous System.
query.contentType[] string Optional enum: ["HTML","IMAGES","JSON","JAVASCRIPT","CSS","PLAIN_TEXT","FONTS","XML","YAML","VIDEO","AUDIO","MARKDOWN","DOCUMENTS","BINARY","SERIALIZATION","OTHER"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get HTTP requests time series grouped by dimension — cloudflare.radar-get-http-timeseries-group

Run Get HTTP requests time series grouped by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the HTTP attribute by which to group the results. enum: ["ADM1","API_TRAFFIC","AS","BOT_CLASS","BROWSER","BROWSER_FAMILY","CONTENT_TYPE","DEVICE_TYPE","HTTP_PROTOCOL","HTTP_VERSION","IP_VERSION","LOCATION","OS","POST_QUANTUM","TLS_VERSION"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.apiTraffic array Optional Filters results by API traffic classification. API traffic is identified by JSON or XML response content types on dynamic (non-cacheable) HTTP requests. Incompatible with the browserFamily, deviceType, httpProtocol, httpVersion, ipVersion, os, and tlsVersion filters/dimensions. When set, results can only be further filtered by location, continent, or Autonomous System.
query.apiTraffic[] string Optional enum: ["API","NON_API"]
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.contentType array Optional Filters results by content type category. When set, results can only be further filtered by location, continent, or Autonomous System.
query.contentType[] string Optional enum: ["HTML","IMAGES","JSON","JAVASCRIPT","CSS","PLAIN_TEXT","FONTS","XML","YAML","VIDEO","AUDIO","MARKDOWN","DOCUMENTS","BINARY","SERIALIZATION","OTHER"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. enum: ["PERCENTAGE","MIN0_MAX"]; default: "PERCENTAGE"
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "ADM1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by HTTP requests — cloudflare.radar-get-http-top-ases-by-http-requests

Run Get top ASes by HTTP requests with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by HTTP requests for a bot class — cloudflare.radar-get-http-top-ases-by-bot-class

Run Get top ASes by HTTP requests for a bot class with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bot_class string Required Bot class. Refer to Bot classes. enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bot_class": "LIKELY_AUTOMATED"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by HTTP requests for a browser family — cloudflare.radar-get-http-top-ases-by-browser-family

Run Get top ASes by HTTP requests for a browser family with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.browser_family string Required Browser family. enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "browser_family": "CHROME"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by HTTP requests for a device type — cloudflare.radar-get-http-top-ases-by-device-type

Run Get top ASes by HTTP requests for a device type with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.device_type string Required Device type. enum: ["DESKTOP","MOBILE","OTHER"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "device_type": "DESKTOP"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by HTTP requests for an HTTP protocol — cloudflare.radar-get-http-top-ases-by-http-protocol

Run Get top ASes by HTTP requests for an HTTP protocol with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.http_protocol string Required HTTP protocol (HTTP vs. HTTPS). enum: ["HTTP","HTTPS"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "http_protocol": "HTTP"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by HTTP requests for an HTTP version — cloudflare.radar-get-http-top-ases-by-http-version

Run Get top ASes by HTTP requests for an HTTP version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.http_version string Required HTTP version. enum: ["HTTPv1","HTTPv2","HTTPv3"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "http_version": "HTTPv1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by HTTP requests for an IP version — cloudflare.radar-get-http-top-ases-by-ip-version

Run Get top ASes by HTTP requests for an IP version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ip_version string Required IP version. enum: ["IPv4","IPv6"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ip_version": "IPv4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by HTTP requests for an OS — cloudflare.radar-get-http-top-ases-by-operating-system

Run Get top ASes by HTTP requests for an OS with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.os string Required Operating system. enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "os": "WINDOWS"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by HTTP requests for a TLS version — cloudflare.radar-get-http-top-ases-by-tls-version

Run Get top ASes by HTTP requests for a TLS version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.tls_version string Required TLS version. enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "tls_version": "TLSv1_0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by HTTP requests — cloudflare.radar-get-http-top-locations-by-http-requests

Run Get top locations by HTTP requests with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by HTTP requests for a bot class — cloudflare.radar-get-http-top-locations-by-bot-class

Run Get top locations by HTTP requests for a bot class with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bot_class string Required Bot class. Refer to Bot classes. enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bot_class": "LIKELY_AUTOMATED"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by HTTP requests for a browser family — cloudflare.radar-get-http-top-locations-by-browser-family

Run Get top locations by HTTP requests for a browser family with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.browser_family string Required Browser family. enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "browser_family": "CHROME"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by HTTP requests for a device type — cloudflare.radar-get-http-top-locations-by-device-type

Run Get top locations by HTTP requests for a device type with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.device_type string Required Device type. enum: ["DESKTOP","MOBILE","OTHER"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "device_type": "DESKTOP"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by HTTP requests for an HTTP protocol — cloudflare.radar-get-http-top-locations-by-http-protocol

Run Get top locations by HTTP requests for an HTTP protocol with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.http_protocol string Required HTTP protocol (HTTP vs. HTTPS). enum: ["HTTP","HTTPS"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "http_protocol": "HTTP"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by HTTP requests for an HTTP version — cloudflare.radar-get-http-top-locations-by-http-version

Run Get top locations by HTTP requests for an HTTP version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.http_version string Required HTTP version. enum: ["HTTPv1","HTTPv2","HTTPv3"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "http_version": "HTTPv1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by HTTP requests for an IP version — cloudflare.radar-get-http-top-locations-by-ip-version

Run Get top locations by HTTP requests for an IP version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ip_version string Required IP version. enum: ["IPv4","IPv6"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ip_version": "IPv4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by HTTP requests for an OS — cloudflare.radar-get-http-top-locations-by-operating-system

Run Get top locations by HTTP requests for an OS with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.os string Required Operating system. enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.tlsVersion array Optional Filters results by TLS version.
query.tlsVersion[] string Optional enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "os": "WINDOWS"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by HTTP requests for a TLS version — cloudflare.radar-get-http-top-locations-by-tls-version

Run Get top locations by HTTP requests for a TLS version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.tls_version string Required TLS version. enum: ["TLSv1_0","TLSv1_1","TLSv1_2","TLSv1_3","TLSvQUIC"]
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.deviceType array Optional Filters results by device type.
query.deviceType[] string Optional enum: ["DESKTOP","MOBILE","OTHER"]
query.httpProtocol array Optional Filters results by HTTP protocol (HTTP vs. HTTPS).
query.httpProtocol[] string Optional enum: ["HTTP","HTTPS"]
query.httpVersion array Optional Filters results by HTTP version.
query.httpVersion[] string Optional enum: ["HTTPv1","HTTPv2","HTTPv3"]
query.ipVersion array Optional Filters results by IP version (Ipv4 vs. IPv6).
query.ipVersion[] string Optional enum: ["IPv4","IPv6"]
query.os array Optional Filters results by operating system.
query.os[] string Optional enum: ["WINDOWS","MACOSX","IOS","ANDROID","CHROMEOS","LINUX","SMART_TV"]
query.browserFamily array Optional Filters results by browser family.
query.browserFamily[] string Optional enum: ["CHROME","EDGE","FIREFOX","SAFARI"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "tls_version": "TLSv1_0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get HTTP authentication requests distribution by dimension — cloudflare.radar-get-leaked-credential-checks-summary

Run Get HTTP authentication requests distribution by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["COMPROMISED","BOT_CLASS"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.compromised array Optional Filters results by compromised credential status (clean vs. compromised).
query.compromised[] string Optional enum: ["CLEAN","COMPROMISED"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "COMPROMISED"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get time series distribution of HTTP authentication requests by dimension. — cloudflare.radar-get-leaked-credential-checks-timeseries-group

Run Get time series distribution of HTTP authentication requests by dimension. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the attribute by which to group the results. enum: ["COMPROMISED","BOT_CLASS"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.botClass array Optional Filters results by bot class. Refer to Bot classes.
query.botClass[] string Optional enum: ["LIKELY_AUTOMATED","LIKELY_HUMAN"]
query.compromised array Optional Filters results by compromised credential status (clean vs. compromised).
query.compromised[] string Optional enum: ["CLEAN","COMPROMISED"]
query.checkResult array Optional Filters results by leaked credential check result.
query.checkResult[] string Optional enum: ["CLEAN","USERNAME_LEAKED","USERNAME_PASSWORD_SIMILAR","USERNAME_AND_PASSWORD_LEAKED","PASSWORD_LEAKED"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. PERCENTAGE_CHANGE requires exactly one comparison series (e.g. a control date range). enum: ["PERCENTAGE_CHANGE","MIN0_MAX"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "COMPROMISED"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get network traffic distribution by dimension — cloudflare.radar-get-netflows-summary

Run Get network traffic distribution by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the NetFlows attribute by which to group the results. enum: ["ADM1","AS","LOCATION","PRODUCT"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.product array Optional Filters the results by network traffic product types.
query.product[] string Optional enum: ["HTTP","ALL"]
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "ADM1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get network traffic time series — cloudflare.radar-get-netflows-timeseries

Run Get network traffic time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.product array Optional Filters the results by network traffic product types.
query.product[] string Optional enum: ["HTTP","ALL"]
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. PERCENTAGE_CHANGE requires exactly one comparison series (e.g. a control date range). enum: ["PERCENTAGE_CHANGE","MIN0_MAX"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get time series distribution of network traffic by dimension — cloudflare.radar-get-netflows-timeseries-group

Run Get time series distribution of network traffic by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the NetFlows attribute by which to group the results. enum: ["ADM1","AS","LOCATION","PRODUCT"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. PERCENTAGE_CHANGE requires exactly one comparison series (e.g. a control date range). enum: ["PERCENTAGE","MIN0_MAX","PERCENTAGE_CHANGE"]; default: "PERCENTAGE"
query.product array Optional Filters the results by network traffic product types.
query.product[] string Optional enum: ["HTTP","ALL"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "ADM1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by network traffic — cloudflare.radar-get-netflows-top-ases

Run Get top ASes by network traffic with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by network traffic — cloudflare.radar-get-netflows-top-locations

Run Get top locations by network traffic with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.geoId array Optional Filters results by Geolocation. Specify a comma-separated list of GeoNames IDs. Prefix with - to exclude geoIds from results. For example, -2267056,360689 excludes results from the 2267056 (Lisbon), but includes results from 5128638 (New York).
query.geoId[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Origins — cloudflare.radar-get-origins

Run List Origins with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get origin metrics distribution by dimension — cloudflare.radar-get-origins-summary

Run Get origin metrics distribution by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the origin attribute by which to group the results. ORIGIN groups across all providers and does not accept an origin or region. REGION requires an origin. SUCCESS_RATE and PERCENTILE require both an origin and a region and constrain the metric (SUCCESS_RATE supports only REQUESTS; PERCENTILE supports any metric except REQUESTS). limitPerGroup is only supported on the REGION dimension. enum: ["ORIGIN","REGION","SUCCESS_RATE","PERCENTILE"]
query object Required additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.origin array Optional Filters results by origin. Required for every dimension except ORIGIN; must not be set on the ORIGIN dimension, which groups across all providers.
query.origin[] string Optional Origins. enum: ["AMAZON","GOOGLE","MICROSOFT","ORACLE"]
query.metric string Required Specifies the metric to retrieve. Allowed metrics depend on the selected dimension (see the dimension path parameter). enum: ["CONNECTION_FAILURES","REQUESTS","RESPONSE_HEADER_RECEIVE_DURATION","TCP_HANDSHAKE_DURATION","TCP_RTT","TLS_HANDSHAKE_DURATION"]
query.region array Optional Filters results by origin region. Requires origin to be set and is validated against it.
query.region[] string Optional maxLength: 100
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "ORIGIN"
  },
  "query": {
    "metric": "REQUESTS"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get origin metrics time series — cloudflare.radar-get-origins-timeseries

Run Get origin metrics time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Required additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.origin array Required Filters results by origin.
query.origin[] string Optional Origins. enum: ["AMAZON","GOOGLE","MICROSOFT","ORACLE"]
query.metric string Required Specifies the metric to retrieve. Without a region, only REQUESTS or CONNECTION_FAILURES are available; specify a region to use the latency metrics. enum: ["CONNECTION_FAILURES","REQUESTS","RESPONSE_HEADER_RECEIVE_DURATION","TCP_HANDSHAKE_DURATION","TCP_RTT","TLS_HANDSHAKE_DURATION"]
query.region array Optional Filters results by origin region. Requires origin to be set and is validated against it.
query.region[] string Optional maxLength: 100
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "query": {
    "origin": [
      "AMAZON"
    ],
    "metric": "REQUESTS"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get origin metrics time series grouped by dimension — cloudflare.radar-get-origins-timeseries-group

Run Get origin metrics time series grouped by dimension with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the origin attribute by which to group the results. ORIGIN groups across all providers and does not accept an origin or region. REGION requires an origin. SUCCESS_RATE and PERCENTILE require both an origin and a region and constrain the metric (SUCCESS_RATE supports only REQUESTS; PERCENTILE supports any metric except REQUESTS). limitPerGroup is only supported on the REGION dimension. enum: ["ORIGIN","REGION","SUCCESS_RATE","PERCENTILE"]
query object Required additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.origin array Optional Filters results by origin. Required for every dimension except ORIGIN; must not be set on the ORIGIN dimension, which groups across all providers.
query.origin[] string Optional Origins. enum: ["AMAZON","GOOGLE","MICROSOFT","ORACLE"]
query.metric string Required Specifies the metric to retrieve. Allowed metrics depend on the selected dimension (see the dimension path parameter). enum: ["CONNECTION_FAILURES","REQUESTS","RESPONSE_HEADER_RECEIVE_DURATION","TCP_HANDSHAKE_DURATION","TCP_RTT","TLS_HANDSHAKE_DURATION"]
query.region array Optional Filters results by origin region. Requires origin to be set and is validated against it.
query.region[] string Optional maxLength: 100
query.normalization string Optional Normalization method applied to the results. Refer to Normalization methods. enum: ["PERCENTAGE","MIN0_MAX"]; default: "PERCENTAGE"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "ORIGIN"
  },
  "query": {
    "metric": "REQUESTS"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Origin Post-Quantum Data Summary — cloudflare.radar-get-origin-post-quantum-summary

Run Get Origin Post-Quantum Data Summary with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the origin post-quantum data dimension by which to group the results. enum: ["KEY_AGREEMENT"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "KEY_AGREEMENT"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Origin Post-Quantum Data Over Time — cloudflare.radar-get-origin-post-quantum-timeseries-groups

Run Get Origin Post-Quantum Data Over Time with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Specifies the origin post-quantum data dimension by which to group the results. enum: ["KEY_AGREEMENT"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "KEY_AGREEMENT"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check Post-Quantum TLS support — cloudflare.radar-get-post-quantum-tls-support

Run Check Post-Quantum TLS support with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Required additionalProperties: false
query.host string Required Hostname or IP address to test for Post-Quantum TLS support, optionally with port (defaults to 443). minLength: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "query": {
    "host": "cloudflare.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get speed tests histogram — cloudflare.radar-get-quality-speed-histogram

Run Get speed tests histogram with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.bucketSize integer Optional Specifies the width for every bucket in the histogram.
query.metricGroup string Optional Metrics to be returned. enum: ["BANDWIDTH","LATENCY","JITTER"]; default: "bandwidth"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get speed tests summary — cloudflare.radar-get-quality-speed-summary

Run Get speed tests summary with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top ASes by speed test results — cloudflare.radar-get-quality-speed-top-ases

Run Get top ASes by speed test results with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.orderBy string Optional Specifies the metric to order the results by. enum: ["BANDWIDTH_DOWNLOAD","BANDWIDTH_UPLOAD","LATENCY_IDLE","LATENCY_LOADED","JITTER_IDLE","JITTER_LOADED"]; default: "BANDWIDTH_DOWNLOAD"
query.reverse boolean Optional Reverses the order of results.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by speed test results — cloudflare.radar-get-quality-speed-top-locations

Run Get top locations by speed test results with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.orderBy string Optional Specifies the metric to order the results by. enum: ["BANDWIDTH_DOWNLOAD","BANDWIDTH_UPLOAD","LATENCY_IDLE","LATENCY_LOADED","JITTER_IDLE","JITTER_LOADED"]; default: "BANDWIDTH_DOWNLOAD"
query.reverse boolean Optional Reverses the order of results.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get domain rank details — cloudflare.radar-get-ranking-domain-details

Run Get domain rank details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.domain string Required Domain name. pattern: "^(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][a-zA-Z0-9-]*[A-Za-z0-9])$"
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.rankingType string Optional The ranking type. enum: ["POPULAR","TRENDING_RISE","TRENDING_STEADY"]; default: "POPULAR"
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.includeTopLocations boolean Optional Includes top locations in the response.
query.date array Optional Filters results by the specified array of dates.
query.date[] string Optional format: "date"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "domain": "google.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Internet services categories — cloudflare.radar-get-ranking-internet-services-categories

Run List Internet services categories with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response.
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.date array Optional Filters results by the specified array of dates.
query.date[] string Optional format: "date"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Internet services rank time series — cloudflare.radar-get-ranking-internet-services-timeseries

Run Get Internet services rank time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.serviceCategory array Optional Filters results by Internet service category.
query.serviceCategory[] string Optional maxLength: 100
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top Internet services — cloudflare.radar-get-ranking-top-internet-services

Run Get top Internet services with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.serviceCategory array Optional Filters results by Internet service category.
query.serviceCategory[] string Optional maxLength: 100
query.limit integer Optional Limits the number of objects returned in the response.
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.date array Optional Filters results by the specified array of dates.
query.date[] string Optional format: "date"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get domains rank time series — cloudflare.radar-get-ranking-domain-timeseries

Run Get domains rank time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.rankingType string Optional The ranking type. enum: ["POPULAR","TRENDING_RISE","TRENDING_STEADY"]; default: "POPULAR"
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 location codes.
query.location[] string Optional
query.domains array Optional Filters results by domain name. Specify a comma-separated list of domain names.
query.domains[] string Optional minLength: 1; maxLength: 253; pattern: "^(?:(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)\\.)+(?:[A-Za-z]{2,63})$"
query.domainCategory array Optional Filters results by domain category.
query.domainCategory[] string Optional maxLength: 100
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top or trending domains — cloudflare.radar-get-ranking-top-domains

Run Get top or trending domains with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response.
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 location codes.
query.location[] string Optional
query.domainCategory array Optional Filters results by domain category.
query.domainCategory[] string Optional maxLength: 100
query.date array Optional Filters results by the specified array of dates.
query.date[] string Optional format: "date"
query.rankingType string Optional The ranking type. enum: ["POPULAR","TRENDING_RISE","TRENDING_STEADY"]; default: "POPULAR"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top domain categories by robots.txt files parsed — cloudflare.radar-get-robots-txt-top-domain-categories-by-files-parsed

Run Get top domain categories by robots.txt files parsed with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.userAgentCategory string Optional Filters results by user agent category. enum: ["AI"]; default: "AI"
query.date array Optional Filters results by the specified array of dates.
query.date[] string Optional format: "date"
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top user agents on robots.txt files — cloudflare.radar-get-robots-txt-top-user-agents-by-directive

Run Get top user agents on robots.txt files with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.userAgentCategory string Optional Filters results by user agent category. enum: ["AI"]; default: "AI"
query.date array Optional Filters results by the specified array of dates.
query.date[] string Optional format: "date"
query.domainCategory array Optional Filters results by domain category.
query.domainCategory[] string Optional maxLength: 100
query.directive string Optional Filters results by robots.txt directive. enum: ["ALLOW","DISALLOW"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Search for locations, ASes, reports, and more — cloudflare.radar-get-search-global

Run Search for locations, ASes, reports, and more with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Required additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.limitPerGroup number Optional Limits the number of objects per search category.
query.query string Required String used to perform the search operation.
query.include array Optional Search types included in results.
query.include[] string Optional enum: ["ADM1S","ASNS","BOTS","CERTIFICATE_AUTHORITIES","CERTIFICATE_LOGS","ORIGINS","ORIGIN_REGIONS","INDUSTRIES","LOCATIONS","NOTEBOOKS","TLDS","VERTICALS"]
query.exclude array Optional Search types excluded from results.
query.exclude[] string Optional enum: ["ADM1S","ASNS","BOTS","CERTIFICATE_AUTHORITIES","CERTIFICATE_LOGS","ORIGINS","ORIGIN_REGIONS","INDUSTRIES","LOCATIONS","NOTEBOOKS","TLDS","VERTICALS"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "query": {
    "query": "United"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get TCP resets and timeouts summary — cloudflare.radar-get-tcp-resets-timeouts-summary

Run Get TCP resets and timeouts summary with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get TCP resets and timeouts time series — cloudflare.radar-get-tcp-resets-timeouts-timeseries-group

Run Get TCP resets and timeouts time series with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.asn array Optional Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.
query.asn[] string Optional
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List TLDs — cloudflare.radar-get-tlds

Run List TLDs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.tldManager string Optional Filters results by TLD manager. maxLength: 100
query.tldType string Optional Filters results by TLD type. GENERIC_RESTRICTED and SPONSORED are deprecated and return no results, as IANA consolidated them into GENERIC. INFRASTRUCTURE is deprecated, as IANA reclassified .arpa as SPECIAL_USE. enum: ["GENERIC","COUNTRY_CODE","SPECIAL_USE","GENERIC_RESTRICTED","INFRASTRUCTURE","SPONSORED"]
query.tld string Optional Filters results by top-level domain. Specify a comma-separated list of TLDs.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get TLD Performance Summary — cloudflare.radar-get-tlds-performance-summary

Run Get TLD Performance Summary with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Dimension to summarize TLD nameserver latency by. enum: ["LATENCY","NAMESERVER_LATENCY","LOCATION_LATENCY"]
query object Optional additionalProperties: false
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.tld array Optional Filters results by top-level domain.
query.tld[] string Optional minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query.nameserver string Optional Filters results by nameserver hostname. minLength: 1; maxLength: 253; pattern: "^(?:(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)\\.)+(?:[A-Za-z]{2,63})$"
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "LATENCY"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get TLD Performance Over Time — cloudflare.radar-get-tlds-performance-timeseries-groups

Run Get TLD Performance Over Time with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dimension string Required Dimension for the TLD nameserver latency timeseries. enum: ["LATENCY","NAMESERVER_LATENCY","LOCATION_LATENCY"]
query object Optional additionalProperties: false
query.aggInterval string Optional Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected. enum: ["15m","1h","1d","1w"]
query.name array Optional Array of names used to label the series in the response.
query.name[] string Optional
query.dateRange array Optional Filters results by relative date range ending at the current time, with each value producing a separate series. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).
query.dateRange[] string Optional pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart array Optional Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateStart[] string Optional format: "date-time"
query.dateEnd array Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.
query.dateEnd[] string Optional format: "date-time"
query.location array Optional Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.
query.location[] string Optional
query.continent array Optional Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.
query.continent[] string Optional
query.tld array Optional Filters results by top-level domain.
query.tld[] string Optional minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query.nameserver string Optional Filters results by nameserver hostname. minLength: 1; maxLength: 253; pattern: "^(?:(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)\\.)+(?:[A-Za-z]{2,63})$"
query.limitPerGroup integer Optional Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dimension": "LATENCY"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get TLD details — cloudflare.radar-get-tld-details

Run Get TLD details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.tld string Required Top-level domain. minLength: 2; maxLength: 63; pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])$"
query object Optional additionalProperties: false
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "tld": "com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get latest Internet traffic anomalies — cloudflare.radar-get-traffic-anomalies

Run Get latest Internet traffic anomalies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.offset integer Optional Skips the specified number of objects before fetching the results. minimum: 0
query.dateRange string Optional Filters results by a relative date range ending at the current time. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w), e.g. 7d. Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 3dcontrol covers days -10 to -7, 7dcontrol covers days -14 to -7, 28dcontrol covers days -56 to -28, and 10dcontrol covers days -24 to -14). Mutually exclusive with dateStart/dateEnd. pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart string Optional Start of the date range (inclusive). Alternative to dateRange; provide together with dateEnd. format: "date-time"
query.dateEnd string Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. format: "date-time"
query.status string Optional enum: ["VERIFIED","UNVERIFIED"]
query.type array Optional Filters results by entity type (LOCATION, AS, or ORIGIN).
query.type[] string Optional enum: ["LOCATION","AS","ORIGIN"]
query.dataSource string Optional Filters results by data source. enum: ["ALL","AI_BOTS","AI_GATEWAY","BGP","BOTS","CONNECTION_ANOMALY","CT","DNS","DNS_MAGNITUDE","DNS_AS112","DOS","EMAIL_ROUTING","EMAIL_SECURITY","FW","FW_PG","HTTP","HTTP_CONTROL","HTTP_CRAWLER_REFERER","HTTP_ORIGINS","IQI","LEAKED_CREDENTIALS","NET","ROBOTS_TXT","SPEED","WORKERS_AI"]
query.asn integer Optional Filters results by Autonomous System. Specify a single Autonomous System Number (ASN) as integer.
query.location string Optional Filters results by location. Specify an alpha-2 location code. minLength: 2; maxLength: 2
query.origin string Optional Filters results by origin. maxLength: 100
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get top locations by total traffic anomalies — cloudflare.radar-get-traffic-anomalies-top

Run Get top locations by total traffic anomalies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.limit integer Optional Limits the number of objects returned in the response. default: 5; exclusiveMinimum: 0
query.dateRange string Optional Filters results by a relative date range ending at the current time. Use &lt;n&gt;d for days (up to 364d) or &lt;n&gt;w for weeks (up to 52w), e.g. 7d. Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 3dcontrol covers days -10 to -7, 7dcontrol covers days -14 to -7, 28dcontrol covers days -56 to -28, and 10dcontrol covers days -24 to -14). Mutually exclusive with dateStart/dateEnd. pattern: "^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$"
query.dateStart string Optional Start of the date range (inclusive). Alternative to dateRange; provide together with dateEnd. format: "date-time"
query.dateEnd string Optional End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. format: "date-time"
query.status string Optional enum: ["VERIFIED","UNVERIFIED"]
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get traffic anomaly by UUID — cloudflare.radar-get-traffic-anomaly-by-uuid

Run Get traffic anomaly by UUID with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.uuid string Required Traffic anomaly UUID. pattern: "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$"
query object Optional additionalProperties: false
query.format string Optional Format in which results will be returned. enum: ["JSON","CSV"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "uuid": "b1bcd2c3-4cf0-4dad-b90f-719388bf6460"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tenant accounts — cloudflare.tenants_listaccounts

Run List tenant accounts with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.tenant_id string Required The ID of the tenant whose accounts to list.
query object Optional additionalProperties: false
query.account_pubname string Optional (case-sensitive) Filter the list of accounts to where the account_pubname is equal to a particular string.
query.account_pubname.startsWith string Optional (case-insensitive) Filter the list of accounts to where the account_pubname starts with a particular string.
query.account_pubname.endsWith string Optional (case-insensitive) Filter the list of accounts to where the account_pubname ends with a particular string.
query.account_pubname.contains string Optional (case-insensitive) Filter the list of accounts to where the account_pubname contains a particular string.
query.name string Optional (case-sensitive) Filter the list of accounts to where the name is equal to a particular string. At most one of name, name.startsWith, name.endsWith, or name.contains may be supplied per request.
query.name.startsWith string Optional (case-insensitive) Filter the list of accounts to where the name starts with a particular string.
query.name.endsWith string Optional (case-insensitive) Filter the list of accounts to where the name ends with a particular string.
query.name.contains string Optional (case-insensitive) Filter the list of accounts to where the name contains a particular string.
query.status string Optional Filter accounts by lifecycle status. Defaults to active. enum: ["active","deleted"]
query.order_by string Optional Field to order results by. Currently supported values: account_name. enum: ["account_name"]
query.direction string Optional Sort direction for the order_by field. Valid values: asc, desc. Defaults to asc when order_by is specified. enum: ["asc","desc"]
query.include_total boolean Optional Whether to calculate and return the exact result_info.total_size for cursor pagination. Defaults to true. When false, total_size is omitted. Legacy page/per_page requests always calculate total_count. default: true
query.page integer Optional Legacy offset page number. Must be provided with per_page. Values below 1 are treated as 1. Cursor pagination takes precedence when requested.
query.per_page integer Optional Legacy offset page size. Must be provided with page. Values are clamped to the range 1-100. Cursor pagination takes precedence when requested.
query.page_token string Optional An opaque token returned from the last list response that when provided will retrieve the next page. Parameters used to filter the retrieved list must remain in subsequent requests with a page token.
query.page_size integer Optional The amount of items to return. Defaults to 10. minimum: 0; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "tenant_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Tenant Custom Nameservers — cloudflare.tenant-level-custom-nameservers-list-tenant-custom-nameservers

Run List Tenant Custom Nameservers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.tenant_id — Required $ref: "#/definitions/dns-custom-nameservers_identifier-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "tenant_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add Tenant Custom Nameserver — cloudflare.tenant-level-custom-nameservers-add-tenant-custom-nameserver

Run Add Tenant Custom Nameserver with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.tenant_id — Required $ref: "#/definitions/dns-custom-nameservers_identifier-3"
body — Required $ref: "#/definitions/dns-custom-nameservers_CustomNSInput"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "tenant_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "ns_name": "ns1.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Tenant Custom Nameserver — cloudflare.tenant-level-custom-nameservers-delete-tenant-custom-nameserver

Run Delete Tenant Custom Nameserver with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_ns_id — Required $ref: "#/definitions/dns-custom-nameservers_ns_name"
path.tenant_id — Required $ref: "#/definitions/dns-custom-nameservers_identifier-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_ns_id": "ns1.example.com",
    "tenant_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

User Details — cloudflare.user-user-details

Run User Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

This tool has no input parameters.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit User — cloudflare.user-edit-user

Run Edit User with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body object Required
body.country — Optional $ref: "#/definitions/iam_country"
body.first_name — Optional $ref: "#/definitions/iam_first_name"
body.last_name — Optional $ref: "#/definitions/iam_last_name"
body.telephone — Optional $ref: "#/definitions/iam_telephone"
body.zipcode — Optional $ref: "#/definitions/iam_zipcode"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get count of zones with Argo Smart Routing enabled for user — cloudflare.argo-smart-routing-get-count-zones-enabled-for-user

Run Get count of zones with Argo Smart Routing enabled for user with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

This tool has no input parameters.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get user audit logs — cloudflare.audit-logs-get-user-audit-logs

Run Get user audit logs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.id string Optional Finds a specific log by its ID.
query.export boolean Optional Indicates that this request is an export of logs in CSV format.
query.action.type string Optional Filters by the action type.
query.actor.ip string Optional Filters by the IP address of the request that made the change by specific IP address or valid CIDR Range.
query.actor.email string Optional Filters by the email address of the actor that made the change. format: "email"
query.since — Optional
query.since string Optional Limits the returned results to logs newer than the specified date. A full-date that conforms to RFC3339. oneOf[1]; format: "date"
query.since string Optional Limits the returned results to logs newer than the specified date. A date-time that conforms to RFC3339. oneOf[2]; format: "date-time"
query.before — Optional
query.before string Optional Limits the returned results to logs older than the specified date. A full-date that conforms to RFC3339. oneOf[1]; format: "date"
query.before string Optional Limits the returned results to logs older than the specified date. A date-time that conforms to RFC3339. oneOf[2]; format: "date-time"
query.zone.name string Optional Filters by the name of the zone associated to the change.
query.direction string Optional Changes the direction of the chronological sorting. enum: ["desc","asc"]; default: "desc"
query.per_page number Optional Sets the number of results to return per page. default: 100; minimum: 1; maximum: 1000
query.page number Optional Defines which page of results to return. default: 1; minimum: 1
query.hide_user_logs boolean Optional Indicates whether or not to hide user level audit logs. default: false

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get communication preferences — cloudflare.user-communication-preferences-get

Run Get communication preferences with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

This tool has no input parameters.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update communication preferences — cloudflare.user-communication-preferences-update

Run Update communication preferences with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body — Required $ref: "#/definitions/cps_update_communication_preferences_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List IP Access rules — cloudflare.ip-access-rules-for-a-user-list-ip-access-rules

Run List IP Access rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.mode — Optional $ref: "#/definitions/firewall_schemas-mode"
query.configuration.target string Optional Defines the target to search in existing rules. enum: ["ip","ip_range","asn","country"]
query.configuration.value string Optional Defines the target value to search for in existing rules: an IP address, an IP address range, or a country code, depending on the provided configuration.target. Notes: You can search for a single IPv4 address, an IP address range with a subnet of '/16' or '/24', or a two-letter ISO-3166-1 alpha-2 country code.
query.notes string Optional Defines the string to search for in the notes of existing IP Access rules. Notes: For example, the string 'attack' would match IP Access rules with notes 'Attack 26/02' and 'Attack 27/02'. The search is case insensitive.
query.match string Optional Defines the search requirements. When set to all, all the search requirements must match. When set to any, only one of the search requirements has to match. enum: ["any","all"]; default: "all"
query.page number Optional Defines the requested page within paginated list of results.
query.per_page number Optional Defines the maximum number of results requested.
query.order string Optional Defines the field used to sort returned rules. enum: ["configuration.target","configuration.value","mode"]
query.direction string Optional Defines the direction used to sort returned rules. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an IP Access rule — cloudflare.ip-access-rules-for-a-user-delete-an-ip-access-rule

Run Delete an IP Access rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/firewall_rule_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an IP Access rule — cloudflare.ip-access-rules-for-a-user-get-an-ip-access-rule

Run Get an IP Access rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/firewall_rule_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an IP Access rule — cloudflare.ip-access-rules-for-a-user-update-an-ip-access-rule

Run Update an IP Access rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/firewall_rule_identifier"
body object Required
body.mode — Optional
body.mode — Optional allOf[1]; $ref: "#/definitions/firewall_schemas-mode"
body.notes — Optional $ref: "#/definitions/firewall_notes"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Invitations — cloudflare.user--s-invites-list-invitations

Run List Invitations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

This tool has no input parameters.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Invitation Details — cloudflare.user--s-invites-invitation-details

Run Invitation Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.invite_id — Required $ref: "#/definitions/iam_invite_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "invite_id": "4f5f0c14a2a41d5063dd301b2f829f04"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Respond to Invitation — cloudflare.user--s-invites-respond-to-invitation

Run Respond to Invitation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.invite_id — Required $ref: "#/definitions/iam_invite_components-schemas-identifier"
body object Required
body.status string Required Status of your response to the invitation (rejected or accepted). enum: ["accepted","rejected"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "invite_id": "4f5f0c14a2a41d5063dd301b2f829f04"
  },
  "body": {
    "status": "accepted"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Monitors — cloudflare.load-balancer-monitors-list-monitors

Run List Monitors with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

This tool has no input parameters.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Monitor — cloudflare.load-balancer-monitors-create-monitor

Run Create Monitor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body — Required
body — Required allOf[1]; $ref: "#/definitions/load-balancing_monitor-editable"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Monitor — cloudflare.load-balancer-monitors-delete-monitor

Run Delete Monitor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Monitor Details — cloudflare.load-balancer-monitors-monitor-details

Run Monitor Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Monitor — cloudflare.load-balancer-monitors-patch-monitor

Run Patch Monitor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/load-balancing_monitor-editable"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Monitor — cloudflare.load-balancer-monitors-update-monitor

Run Update Monitor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/load-balancing_monitor-editable"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Preview Monitor — cloudflare.load-balancer-monitors-preview-monitor

Run Preview Monitor with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/load-balancing_monitor-editable"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Monitor References — cloudflare.load-balancer-monitors-list-monitor-references

Run List Monitor References with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.monitor_id — Required $ref: "#/definitions/load-balancing_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "monitor_id": "f1aba936b94213e5b8dca0c0dbf1f9cc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Pools — cloudflare.load-balancer-pools-list-pools

Run List Pools with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.monitor string Optional The ID of the Monitor to use for checking the health of origins within this pool.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Pools — cloudflare.load-balancer-pools-patch-pools

Run Patch Pools with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body object Required
body.notification_email — Optional $ref: "#/definitions/load-balancing_patch_pools_notification_email"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Pool — cloudflare.load-balancer-pools-create-pool

Run Create Pool with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body object Required
body.check_regions — Optional $ref: "#/definitions/load-balancing_check_regions"
body.description — Optional $ref: "#/definitions/load-balancing_schemas-description"
body.enabled — Optional $ref: "#/definitions/load-balancing_enabled"
body.health_sources — Optional $ref: "#/definitions/load-balancing_health_sources"
body.latitude — Optional $ref: "#/definitions/load-balancing_latitude"
body.load_shedding — Optional $ref: "#/definitions/load-balancing_load_shedding"
body.longitude — Optional $ref: "#/definitions/load-balancing_longitude"
body.minimum_origins — Optional $ref: "#/definitions/load-balancing_minimum_origins"
body.monitor — Optional $ref: "#/definitions/load-balancing_monitor_id"
body.monitor_group — Optional $ref: "#/definitions/load-balancing_monitor_group_id"
body.name — Required $ref: "#/definitions/load-balancing_name"
body.networks — Optional $ref: "#/definitions/load-balancing_networks"
body.notification_email — Optional $ref: "#/definitions/load-balancing_notification_email"
body.notification_filter — Optional $ref: "#/definitions/load-balancing_notification_filter"
body.origin_steering — Optional $ref: "#/definitions/load-balancing_origin_steering"
body.origins — Required $ref: "#/definitions/load-balancing_origins"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {
    "origins": [],
    "name": "primary-dc-1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Pool — cloudflare.load-balancer-pools-delete-pool

Run Delete Pool with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Pool Details — cloudflare.load-balancer-pools-pool-details

Run Pool Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Pool — cloudflare.load-balancer-pools-patch-pool

Run Patch Pool with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
body object Required
body.check_regions — Optional $ref: "#/definitions/load-balancing_check_regions"
body.description — Optional $ref: "#/definitions/load-balancing_schemas-description"
body.disabled_at — Optional $ref: "#/definitions/load-balancing_schemas-disabled_at"
body.enabled — Optional $ref: "#/definitions/load-balancing_enabled"
body.health_sources — Optional $ref: "#/definitions/load-balancing_health_sources"
body.latitude — Optional $ref: "#/definitions/load-balancing_latitude"
body.load_shedding — Optional $ref: "#/definitions/load-balancing_load_shedding"
body.longitude — Optional $ref: "#/definitions/load-balancing_longitude"
body.minimum_origins — Optional $ref: "#/definitions/load-balancing_minimum_origins"
body.monitor — Optional $ref: "#/definitions/load-balancing_monitor_id"
body.monitor_group — Optional $ref: "#/definitions/load-balancing_monitor_group_id"
body.name — Optional $ref: "#/definitions/load-balancing_name"
body.notification_email — Optional $ref: "#/definitions/load-balancing_notification_email"
body.notification_filter — Optional $ref: "#/definitions/load-balancing_notification_filter"
body.origin_steering — Optional $ref: "#/definitions/load-balancing_origin_steering"
body.origins — Optional $ref: "#/definitions/load-balancing_origins"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Pool — cloudflare.load-balancer-pools-update-pool

Run Update Pool with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
body object Required
body.check_regions — Optional $ref: "#/definitions/load-balancing_check_regions"
body.description — Optional $ref: "#/definitions/load-balancing_schemas-description"
body.disabled_at — Optional $ref: "#/definitions/load-balancing_schemas-disabled_at"
body.enabled — Optional $ref: "#/definitions/load-balancing_enabled"
body.health_sources — Optional $ref: "#/definitions/load-balancing_health_sources"
body.latitude — Optional $ref: "#/definitions/load-balancing_latitude"
body.load_shedding — Optional $ref: "#/definitions/load-balancing_load_shedding"
body.longitude — Optional $ref: "#/definitions/load-balancing_longitude"
body.minimum_origins — Optional $ref: "#/definitions/load-balancing_minimum_origins"
body.monitor — Optional $ref: "#/definitions/load-balancing_monitor_id"
body.monitor_group — Optional $ref: "#/definitions/load-balancing_monitor_group_id"
body.name — Required $ref: "#/definitions/load-balancing_name"
body.networks — Optional $ref: "#/definitions/load-balancing_networks"
body.notification_email — Optional $ref: "#/definitions/load-balancing_notification_email"
body.notification_filter — Optional $ref: "#/definitions/load-balancing_notification_filter"
body.origin_steering — Optional $ref: "#/definitions/load-balancing_origin_steering"
body.origins — Required $ref: "#/definitions/load-balancing_origins"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4"
  },
  "body": {
    "origins": [],
    "name": "primary-dc-1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Pool Health Details — cloudflare.load-balancer-pools-pool-health-details

Run Pool Health Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Preview Pool — cloudflare.load-balancer-pools-preview-pool

Run Preview Pool with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"
body — Required
body — Required allOf[1]; $ref: "#/definitions/load-balancing_monitor-editable"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Pool References — cloudflare.load-balancer-pools-list-pool-references

Run List Pool References with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pool_id — Required $ref: "#/definitions/load-balancing_schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pool_id": "17b5962d775c646f3f9725cbc7a53df4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Preview Result — cloudflare.load-balancer-monitors-preview-result

Run Preview Result with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.preview_id — Required $ref: "#/definitions/load-balancing_preview_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "preview_id": "f1aba936b94213e5b8dca0c0dbf1f9cc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Regions — cloudflare.user-load-balancer-regions-list-regions

Run List Regions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.subdivision_code — Optional $ref: "#/definitions/load-balancing_subdivision_code_a2"
query.country_code string Optional Two-letter alpha-2 country code as defined in ISO 3166-1.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Healthcheck Events — cloudflare.load-balancer-healthcheck-events-list-healthcheck-events

Run List Healthcheck Events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.until — Optional $ref: "#/definitions/load-balancing_until"
query.pool_name — Optional $ref: "#/definitions/load-balancing_pool_name"
query.origin_healthy — Optional $ref: "#/definitions/load-balancing_origin_healthy"
query.pool_id — Optional $ref: "#/definitions/load-balancing_schemas-identifier"
query.since string Optional Start date and time of requesting data period in the ISO8601 format. format: "date-time"
query.origin_name string Optional The name for the origin to filter.
query.pool_healthy boolean Optional If true, filter events where the pool status is healthy. If false, filter events where the pool status is unhealthy. default: true

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get User Membership — cloudflare.user-memberships-get

Run Get User Membership with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.membership_id — Required $ref: "#/definitions/iam_membership_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "membership_id": "4536bcfad5faccb111b47003c79917fa"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get zones bandwidth report — cloudflare.spectrum-analytics-get-zones-report

Run Get zones bandwidth report with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.since — Optional $ref: "#/definitions/spectrum-analytics_since"
query.until — Optional $ref: "#/definitions/spectrum-analytics_until"
query.cdn_traffic boolean Optional Include CDN traffic in the bandwidth aggregation. default: true

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get User Subscriptions — cloudflare.user-subscription-get-user-subscriptions

Run Get User Subscriptions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

This tool has no input parameters.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create User Subscription — cloudflare.user-subscription-create-user-subscription

Run Create User Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body — Required $ref: "#/definitions/bill-subs-api_subscription-v2"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete User Subscription — cloudflare.user-subscription-delete-user-subscription

Run Delete User Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/bill-subs-api_schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "506e3185e9c882d175a2d0cb0093d9f2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update User Subscription — cloudflare.user-subscription-update-user-subscription

Run Update User Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/bill-subs-api_schemas-identifier"
body — Required $ref: "#/definitions/bill-subs-api_subscription-v2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "506e3185e9c882d175a2d0cb0093d9f2"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List user tenants — cloudflare.user_listusertenants

Run List user tenants with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

This tool has no input parameters.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Tokens — cloudflare.user-api-tokens-list-tokens

Run List Tokens with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.direction string Optional Direction to order results. enum: ["asc","desc"]
query.include_expired boolean Optional When true, includes recently-expired tokens in the response. default: false

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Token — cloudflare.user-api-tokens-create-token

Run Create Token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body — Required $ref: "#/definitions/iam_create_payload"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {
    "name": "readonly token",
    "policies": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Token Permission Groups — cloudflare.permission-groups-list-permission-groups

Run List Token Permission Groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.name string Optional Filter by the name of the permission group. The value must be URL-encoded.
query.scope string Optional Filter by the scope of the permission group. The value must be URL-encoded.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Verify Token — cloudflare.user-api-tokens-verify-token

Run Verify Token with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

This tool has no input parameters.

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Token — cloudflare.user-api-tokens-delete-token

Run Delete Token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.token_id — Required $ref: "#/definitions/iam_token_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "token_id": "ed17574386854bf78a67040be0a770b0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Token Details — cloudflare.user-api-tokens-token-details

Run Token Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.token_id — Required $ref: "#/definitions/iam_token_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "token_id": "ed17574386854bf78a67040be0a770b0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Roll Token — cloudflare.user-api-tokens-roll-token

Run Roll Token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.token_id — Required $ref: "#/definitions/iam_token_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "token_id": "ed17574386854bf78a67040be0a770b0"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Request domain connect validation — cloudflare.postverify

Run Request domain connect validation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body — Required $ref: "#/definitions/domain-connect_PostData"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Serve a provider template — cloudflare.getprovidertemplate

Run Serve a provider template with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.provider string Required Provider name.
path.service string Required Service name.
query object Optional additionalProperties: false
query.dump string Optional Dump raw template.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "provider": "example",
    "service": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Serve a provider configuration — cloudflare.getproviderconfiguration

Run Serve a provider configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.provider string Required Provider ID.
path.service string Required Service ID.
path.account string Required Account ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "provider": "example",
    "service": "example",
    "account": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Provide settings if domain is served by Cloudflare — cloudflare.getdomainsettings

Run Provide settings if domain is served by Cloudflare with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.domain string Required Domain name.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "domain": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger deploy hook — cloudflare.triggerdeployhook

Run Trigger deploy hook with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.deploy_hook_uuid — Required Deploy hook UUID $ref: "#/definitions/builds_deploy_hook_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "deploy_hook_uuid": "00000000-0000-4000-8000-000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Zones — cloudflare.zones-get

Run List Zones with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.name string Optional A domain name. Optional filter operators can be provided to extend refine the search: * equal (default) * not_equal * starts_with * ends_with * contains * starts_with_case_sensitive * ends_with_case_sensitive * contains_case_sensitive maxLength: 253
query.status string Optional Specify a zone status to filter by. enum: ["initializing","pending","active","moved"]
query.type array Optional Zone types to filter by. Multiple types can be specified as a comma-separated list (e.g., ?type=full,partial,secondary). When this parameter is not provided, zones with type "internal" are excluded from the results.
query.type[] string Optional enum: ["full","partial","secondary","internal"]
query.account.id string Optional Filter by an account ID.
query.account.name string Optional An account Name. Optional filter operators can be provided to extend refine the search: * equal (default) * not_equal * starts_with * ends_with * contains * starts_with_case_sensitive * ends_with_case_sensitive * contains_case_sensitive maxLength: 253
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of zones per page. default: 20; minimum: 5; maximum: 50
query.order string Optional Field to order zones by. enum: ["name","status","account.id","account.name","plan.id"]
query.direction string Optional Direction to order zones. enum: ["asc","desc"]
query.match string Optional Whether to match all search requirements or at least one (any). enum: ["any","all"]; default: "all"

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Zone — cloudflare.zones-post

Run Create Zone with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
body object Required
body.account object Required
body.account.id — Optional $ref: "#/definitions/zones_identifier"
body.name — Required $ref: "#/definitions/zones_name"
body.type — Optional $ref: "#/definitions/zones_type"

Full JSON Schema

Full JSON Schema

Example input

{
  "body": {
    "name": "example.com",
    "account": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Zone — cloudflare.zones-0-delete

Run Delete Zone with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zones_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Zone Details — cloudflare.zones-0-get

Run Zone Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zones_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit Zone — cloudflare.zones-0-patch

Run Edit Zone with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zones_identifier"
body object Required
body.paused — Optional $ref: "#/definitions/zones_paused"
body.plan object Optional (Deprecated) Please use the /zones/{zone_id}/subscription API to update a zone's plan. Changing this value will create/cancel associated subscriptions. To view available plans for this zone, see Zone Plans.
body.plan.id — Optional $ref: "#/definitions/zones_identifier"
body.type string Optional A full zone implies that DNS is hosted with Cloudflare. A partial zone is typically a partner-hosted zone or a CNAME setup. This parameter is only available to Enterprise customers or if it has been explicitly enabled on a zone. enum: ["full","partial","secondary","internal"]
body.vanity_name_servers — Optional $ref: "#/definitions/zones_vanity_name_servers"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "paused": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Access Applications — cloudflare.zone-level-access-applications-list-access-applications

Run List Access Applications with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add an Access application — cloudflare.zone-level-access-applications-add-a-bookmark-application

Run Add an Access application with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_apps"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "type": "self_hosted",
    "domain": "test.example.com/admin"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List short-lived certificate CAs — cloudflare.zone-level-access-short-lived-certificate-c-as-list-short--22caea06d1

Run List short-lived certificate CAs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a short-lived certificate CA — cloudflare.zone-level-access-short-lived-certificate-c-as-delete-a-sh-a8831aa1dd

Run Delete a short-lived certificate CA with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a short-lived certificate CA — cloudflare.zone-level-access-short-lived-certificate-c-as-get-a-short-eaf60afb56

Run Get a short-lived certificate CA with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a short-lived certificate CA — cloudflare.zone-level-access-short-lived-certificate-c-as-create-a-sh-7a27acdb55

Run Create a short-lived certificate CA with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Access policies — cloudflare.zone-level-access-policies-list-access-policies

Run List Access policies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an Access policy — cloudflare.zone-level-access-policies-create-an-access-policy

Run Create an Access policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.approval_groups — Optional $ref: "#/definitions/access_approval_groups-2"
body.approval_required — Optional $ref: "#/definitions/access_approval_required-2"
body.decision — Required $ref: "#/definitions/access_decision-2"
body.exclude — Optional $ref: "#/definitions/access_exclude-3"
body.include — Required $ref: "#/definitions/access_include"
body.isolation_required — Optional $ref: "#/definitions/access_isolation_required-2"
body.name — Required $ref: "#/definitions/access_name-9"
body.precedence — Optional $ref: "#/definitions/access_precedence-2"
body.purpose_justification_prompt — Optional $ref: "#/definitions/access_purpose_justification_prompt"
body.purpose_justification_required — Optional $ref: "#/definitions/access_purpose_justification_required-2"
body.require — Optional $ref: "#/definitions/access_require-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allow devs",
    "decision": "allow",
    "include": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an Access policy — cloudflare.zone-level-access-policies-delete-an-access-policy

Run Delete an Access policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/access_uuid"
path.app_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an Access policy — cloudflare.zone-level-access-policies-get-an-access-policy

Run Get an Access policy with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/access_uuid"
path.app_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an Access policy — cloudflare.zone-level-access-policies-update-an-access-policy

Run Update an Access policy with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.policy_id — Required $ref: "#/definitions/access_uuid"
path.app_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.approval_groups — Optional $ref: "#/definitions/access_approval_groups-2"
body.approval_required — Optional $ref: "#/definitions/access_approval_required-2"
body.decision — Required $ref: "#/definitions/access_decision-2"
body.exclude — Optional $ref: "#/definitions/access_exclude-3"
body.include — Required $ref: "#/definitions/access_include"
body.isolation_required — Optional $ref: "#/definitions/access_isolation_required-2"
body.name — Required $ref: "#/definitions/access_name-9"
body.precedence — Optional $ref: "#/definitions/access_precedence-2"
body.purpose_justification_prompt — Optional $ref: "#/definitions/access_purpose_justification_prompt"
body.purpose_justification_required — Optional $ref: "#/definitions/access_purpose_justification_required-2"
body.require — Optional $ref: "#/definitions/access_require-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "app_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allow devs",
    "decision": "allow",
    "include": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List mTLS certificates — cloudflare.zone-level-access-mtls-authentication-list-mtls-certificates

Run List mTLS certificates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add an mTLS certificate — cloudflare.zone-level-access-mtls-authentication-add-an-mtls-certificate

Run Add an mTLS certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.associated_hostnames — Optional $ref: "#/definitions/access_associated_hostnames-2"
body.certificate string Required The certificate content.
body.name — Required $ref: "#/definitions/access_name-18"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allow devs",
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIGAjCCA+qgAwIBAgIJAI7kymlF7CWT...N4RI7KKB7nikiuUf8vhULKy5IX10\nDrUtmu/B\n-----END CERTIFICATE-----"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all mTLS hostname settings — cloudflare.zone-level-access-mtls-authentication-list-mtls-certificat-ae09802d86

Run List all mTLS hostname settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an mTLS certificate's hostname settings — cloudflare.zone-level-access-mtls-authentication-update-an-mtls-certi-9ab3745f97

Run Update an mTLS certificate's hostname settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.settings array Required
body.settings[] — Optional $ref: "#/definitions/access_settings-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "settings": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an mTLS certificate — cloudflare.zone-level-access-mtls-authentication-delete-an-mtls-certificate

Run Delete an mTLS certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an mTLS certificate — cloudflare.zone-level-access-mtls-authentication-get-an-mtls-certificate

Run Get an mTLS certificate with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an mTLS certificate — cloudflare.zone-level-access-mtls-authentication-update-an-mtls-certificate

Run Update an mTLS certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.associated_hostnames — Required $ref: "#/definitions/access_associated_hostnames-2"
body.name — Optional $ref: "#/definitions/access_name-18"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "associated_hostnames": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Access groups — cloudflare.zone-level-access-groups-list-access-groups

Run List Access groups with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an Access group — cloudflare.zone-level-access-groups-create-an-access-group

Run Create an Access group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.exclude — Optional $ref: "#/definitions/access_exclude"
body.include — Required $ref: "#/definitions/access_include"
body.name — Required $ref: "#/definitions/access_name-16"
body.require — Optional $ref: "#/definitions/access_require"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allow devs",
    "include": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an Access group — cloudflare.zone-level-access-groups-delete-an-access-group

Run Delete an Access group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an Access group — cloudflare.zone-level-access-groups-get-an-access-group

Run Get an Access group with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an Access group — cloudflare.zone-level-access-groups-update-an-access-group

Run Update an Access group with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.exclude — Optional $ref: "#/definitions/access_exclude"
body.include — Required $ref: "#/definitions/access_include"
body.name — Required $ref: "#/definitions/access_name-16"
body.require — Optional $ref: "#/definitions/access_require"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Allow devs",
    "include": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Access identity providers — cloudflare.zone-level-access-identity-providers-list-access-identity-providers

Run List Access identity providers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Add an Access identity provider — cloudflare.zone-level-access-identity-providers-add-an-access-identity-provider

Run Add an Access identity provider with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_identity-providers-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Widget Corps IDP",
    "type": "onetimepin",
    "config": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an Access identity provider — cloudflare.zone-level-access-identity-providers-delete-an-access-iden-a86f257052

Run Delete an Access identity provider with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an Access identity provider — cloudflare.zone-level-access-identity-providers-get-an-access-identity-provider

Run Get an Access identity provider with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an Access identity provider — cloudflare.zone-level-access-identity-providers-update-an-access-iden-dc7a3c4e9e

Run Update an Access identity provider with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identity_provider_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"
body — Required $ref: "#/definitions/access_identity-providers-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identity_provider_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "Widget Corps IDP",
    "type": "onetimepin",
    "config": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get your Zero Trust organization — cloudflare.zone-level-zero-trust-organization-get-your-zero-trust-organization

Run Get your Zero Trust organization with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier-4"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create your Zero Trust organization — cloudflare.zone-level-zero-trust-organization-create-your-zero-trust--370c6afab3

Run Create your Zero Trust organization with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier-4"
body object Required
body.auth_domain — Optional $ref: "#/definitions/access_auth_domain-2"
body.is_ui_read_only — Optional $ref: "#/definitions/access_is_ui_read_only-2"
body.login_design — Optional $ref: "#/definitions/access_login_design"
body.name — Optional $ref: "#/definitions/access_name-15"
body.strict_service_token_auth — Optional $ref: "#/definitions/access_strict_service_token_auth"
body.ui_read_only_toggle_reason — Optional $ref: "#/definitions/access_ui_read_only_toggle_reason"
body.user_seat_expiration_inactive_time — Optional $ref: "#/definitions/access_user_seat_expiration_inactive_time-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update your Zero Trust organization — cloudflare.zone-level-zero-trust-organization-update-your-zero-trust--4e6f7216d2

Run Update your Zero Trust organization with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier-4"
body object Required
body.auth_domain — Optional $ref: "#/definitions/access_auth_domain-2"
body.is_ui_read_only — Optional $ref: "#/definitions/access_is_ui_read_only-2"
body.login_design — Optional $ref: "#/definitions/access_login_design"
body.name — Optional $ref: "#/definitions/access_name-15"
body.strict_service_token_auth — Optional $ref: "#/definitions/access_strict_service_token_auth"
body.ui_read_only_toggle_reason — Optional $ref: "#/definitions/access_ui_read_only_toggle_reason"
body.user_seat_expiration_inactive_time — Optional $ref: "#/definitions/access_user_seat_expiration_inactive_time-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revoke all Access tokens for a user — cloudflare.zone-level-zero-trust-organization-revoke-all-access-token-daef55cb0e

Run Revoke all Access tokens for a user with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier-4"
body object Required
body.email string Required The email of the user to revoke.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "email": "test@example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List service tokens — cloudflare.zone-level-access-service-tokens-list-service-tokens

Run List service tokens with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a service token — cloudflare.zone-level-access-service-tokens-create-a-service-token

Run Create a service token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.client_secret_version — Optional $ref: "#/definitions/access_client_secret_version"
body.duration — Optional $ref: "#/definitions/access_duration-2"
body.enabled — Optional $ref: "#/definitions/access_enabled"
body.name — Required $ref: "#/definitions/access_name-17"
body.previous_client_secret_expires_at — Optional $ref: "#/definitions/access_previous_client_secret_expires_at"
body.tags — Optional $ref: "#/definitions/access_tags"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "CI/CD token"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a service token — cloudflare.zone-level-access-service-tokens-delete-a-service-token

Run Delete a service token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.service_token_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "service_token_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a service token — cloudflare.zone-level-access-service-tokens-get-a-service-token

Run Get a service token with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.service_token_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "service_token_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a service token — cloudflare.zone-level-access-service-tokens-update-a-service-token

Run Update a service token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.service_token_id — Required $ref: "#/definitions/access_uuid"
path.zone_id — Required $ref: "#/definitions/access_identifier"
body object Required
body.client_secret_version — Optional $ref: "#/definitions/access_client_secret_version"
body.duration — Optional $ref: "#/definitions/access_duration-2"
body.enabled — Optional $ref: "#/definitions/access_enabled"
body.name — Optional $ref: "#/definitions/access_name-17"
body.previous_client_secret_expires_at — Optional $ref: "#/definitions/access_previous_client_secret_expires_at"
body.tags — Optional $ref: "#/definitions/access_tags"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "service_token_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Custom Origin Trust Store Details — cloudflare.custom-origin-trust-store-list-details

Run List Custom Origin Trust Store Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of records per page. default: 20; minimum: 5; maximum: 50
query.limit integer Optional Limit to the number of records returned.
query.offset integer Optional Offset the results.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Upload Custom Origin Trust Store — cloudflare.custom-origin-trust-store-create

Run Upload Custom Origin Trust Store with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.certificate — Required $ref: "#/definitions/tls-certificates-and-hostnames_certificate-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIDdjCCAl6gAwIBAgIJAPnMg0Fs+/B0MA0GCSqGSIb3DQEBCwUAMFsx...\n-----END CERTIFICATE-----\n"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Custom Origin Trust Store — cloudflare.custom-origin-trust-store-delete

Run Delete Custom Origin Trust Store with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_origin_trust_store_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_trust_store_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_origin_trust_store_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Custom Origin Trust Store Details — cloudflare.custom-origin-trust-store-details

Run Custom Origin Trust Store Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_origin_trust_store_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_trust_store_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_origin_trust_store_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Total TLS Settings Details — cloudflare.total-tls-total-tls-settings-details

Run Total TLS Settings Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Enable or Disable Total TLS — cloudflare.total-tls-enable-or-disable-total-tls

Run Enable or Disable Total TLS with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.certificate_authority — Optional $ref: "#/definitions/tls-certificates-and-hostnames_certificate_authority-3"
body.enabled — Required $ref: "#/definitions/tls-certificates-and-hostnames_enabled-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rerun the Activation Check — cloudflare.put-zones-zone_id-activation_check

Run Rerun the Activation Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Zone ID $ref: "#/definitions/zone-activation_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Regional Hostnames — cloudflare.dls-zone-regional-hostnames-list

Run List Regional Hostnames with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dls_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Regional Hostname — cloudflare.dls-zone-regional-hostnames-create

Run Create Regional Hostname with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dls_identifier"
body object Optional
body.hostname — Required $ref: "#/definitions/dls_hostname"
body.region_key — Required $ref: "#/definitions/dls_region_key"
body.routing — Optional $ref: "#/definitions/dls_routing"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Regional Hostname — cloudflare.dls-zone-regional-hostnames-delete

Run Delete Regional Hostname with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dls_identifier"
path.hostname — Required $ref: "#/definitions/dls_hostname"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "hostname": "foo.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fetch Regional Hostname — cloudflare.dls-zone-regional-hostnames-fetch

Run Fetch Regional Hostname with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dls_identifier"
path.hostname — Required $ref: "#/definitions/dls_hostname"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "hostname": "foo.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Regional Hostname — cloudflare.dls-zone-regional-hostnames-patch

Run Update Regional Hostname with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dls_identifier"
path.hostname — Required $ref: "#/definitions/dls_hostname"
body object Optional
body.region_key — Required $ref: "#/definitions/dls_region_key"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "hostname": "foo.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get robots.txt rules — cloudflare.ai-audit-get-robots

Run Get robots.txt rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Identifier of the zone.
query object Optional additionalProperties: false
query.subdomain string Optional Optional subdomain to fetch robots.txt for. If omitted, fetches robots.txt for the zone apex domain.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Bulk get robots.txt rules — cloudflare.ai-audit-bulk-get-robots

Run Bulk get robots.txt rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Identifier of the zone.
body array Required Array of domain hostnames to fetch robots.txt for. Each domain must end with the zone name. Maximum 25 domains per request. maxItems: 25
body[] string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  },
  "body": [
    "example.com",
    "blog.example.com"
  ]
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the AI Security for Apps custom topics of a zone. — cloudflare.ai-security-custom-topics-get

Run Get the AI Security for Apps custom topics of a zone. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_zone_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the AI Security for Apps custom topics of a zone. — cloudflare.ai-security-custom-topics-put

Run Update the AI Security for Apps custom topics of a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_zone_id"
body — Required $ref: "#/definitions/waf-product-api-bundle_custom-topics"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the AI Security for Apps status for a zone. — cloudflare.ai-security-settings-get

Run Get the AI Security for Apps status for a zone. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_zone_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the AI Security for Apps status for a zone. — cloudflare.ai-security-settings-put

Run Update the AI Security for Apps status for a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_zone_id"
body — Required $ref: "#/definitions/waf-product-api-bundle_settings"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Argo Analytics for a zone — cloudflare.argo-analytics-for-zone-argo-analytics-for-a-zone

Run Argo Analytics for a zone with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/argo-analytics_identifier"
query object Optional additionalProperties: false
query.bins string Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Argo Analytics for a zone at different PoPs — cloudflare.argo-analytics-for-geolocation-argo-analytics-for-a-zone-a-1002d24562

Run Argo Analytics for a zone at different PoPs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/argo-analytics_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get session identifier settings — cloudflare.api-shield-settings-retrieve-information-about-specific-co-4672584b9d

Run Get session identifier settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.normalize boolean Optional Ensures that the configuration is written or retrieved in normalized fashion

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update session identifier settings — cloudflare.api-shield-settings-set-configuration-properties

Run Update session identifier settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.normalize boolean Optional Ensures that the configuration is written or retrieved in normalized fashion
body — Required $ref: "#/definitions/api-shield_configuration"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "auth_id_characteristics": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Export discovered API operations as OpenAPI schemas — cloudflare.api-shield-api-discovery-retrieve-discovered-operations-on-da306fd4a9

Run Export discovered API operations as OpenAPI schemas with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List discovered web and API operations — cloudflare.api-shield-api-discovery-retrieve-discovered-operations-on-a-zone

Run List discovered web and API operations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.host array Optional Filter results to only include the specified hosts. uniqueItems: true
query.host[] string Optional
query.method array Optional Filter results to only include the specified HTTP methods. uniqueItems: true
query.method[] string Optional
query.endpoint string Optional Filter results to only include endpoints containing this pattern.
query.direction string Optional Direction to order results. enum: ["asc","desc"]
query.order string Optional Field to order by enum: ["host","method","endpoint","traffic_stats.requests","traffic_stats.last_updated"]
query.diff boolean Optional When true, only return API Discovery results that are not saved into API Shield Endpoint Management
query.origin — Optional Filter results to only include discovery results sourced from a particular discovery engine * ML - Discovered operations that were sourced using ML API Discovery * SessionIdentifier - Discovered operations that were sourced using Session Identifier API Discovery $ref: "#/definitions/api-shield_api_discovery_origin"
query.state — Optional Filter results to only include discovery results in a particular state. States are as follows * review - Discovered operations that are not saved into API Shield Endpoint Management * saved - Discovered operations that are already saved into API Shield Endpoint Management * ignored - Discovered operations that have been marked as ignored $ref: "#/definitions/api-shield_api_discovery_state"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit discovered web and API operations — cloudflare.api-shield-api-patch-discovered-operations

Run Edit discovered web and API operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body — Required $ref: "#/definitions/api-shield_api_discovery_patch_multiple_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "3818d821-5901-4147-a474-f5f5aec1d54e": {
      "state": "ignored"
    },
    "b17c8043-99a0-4202-b7d9-8f7cdbee02cd": {
      "state": "review"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a discovered web or API operation — cloudflare.api-shield-api-discovery-retrieve-discovered-operation-by-id

Run Get a discovered web or API operation with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.discovery_id — Required Discovery ID of a discovered operation $ref: "#/definitions/api-shield_uuid-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "discovery_id": "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit a discovered web or API operation — cloudflare.api-shield-api-patch-discovered-operation

Run Edit a discovered web or API operation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.discovery_id — Required Discovery ID of a discovered operation $ref: "#/definitions/api-shield_uuid-2"
body object Required
body.state — Optional
body.state — Optional allOf[1]; $ref: "#/definitions/api-shield_api_discovery_state_patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "discovery_id": "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List operation labels — cloudflare.api-shield-labels-get-labels

Run List operation labels with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.order string Optional Field to order by enum: ["name","description","created_at","last_updated","mapped_resources.operations"]
query.direction string Optional Direction to order results. enum: ["asc","desc"]
query.source — Optional Filter for labels with source $ref: "#/definitions/api-shield_label_source"
query.filter string Optional Filter for labels where the name or description matches using substring match
query.with_mapped_resource_counts boolean Optional Include mapped_resources for each label default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a managed operation label — cloudflare.api-shield-labels-get-managed-label

Run Get a managed operation label with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.name — Required The label name $ref: "#/definitions/api-shield_label_name"
query object Optional additionalProperties: false
query.with_mapped_resource_counts boolean Optional Include mapped_resources for each label default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "name": "login"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace operations attached to a managed label — cloudflare.api-shield-labels-replace-operations-attached-to-managed-label

Run Replace operations attached to a managed label with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.name — Required The label name $ref: "#/definitions/api-shield_label_name"
body — Required $ref: "#/definitions/api-shield_replace_operations_attached_to_label_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "name": "login"
  },
  "body": {
    "selector": {
      "include": {
        "operation_ids": [
          "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
        ]
      }
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete user-defined operation labels — cloudflare.api-shield-labels-delete-user-labels

Run Delete user-defined operation labels with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body array Required
body[] — Optional $ref: "#/definitions/api-shield_label_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create user-defined operation labels — cloudflare.api-shield-labels-create-user-labels

Run Create user-defined operation labels with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body array Required
body[] — Optional $ref: "#/definitions/api-shield_label_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a user-defined operation label — cloudflare.api-shield-delete-user-label

Run Delete a user-defined operation label with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.name — Required The label name $ref: "#/definitions/api-shield_label_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "name": "login"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a user-defined operation label — cloudflare.api-shield-labels-get-user-label

Run Get a user-defined operation label with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.name — Required The label name $ref: "#/definitions/api-shield_label_name"
query object Optional additionalProperties: false
query.with_mapped_resource_counts boolean Optional Include mapped_resources for each label default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "name": "login"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit a user-defined operation label — cloudflare.api-shield-patch-user-label

Run Edit a user-defined operation label with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.name — Required The label name $ref: "#/definitions/api-shield_label_name"
body — Required $ref: "#/definitions/api-shield_patch_label_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "name": "login"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a user-defined operation label — cloudflare.api-shield-put-user-label

Run Update a user-defined operation label with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.name — Required The label name $ref: "#/definitions/api-shield_label_name"
body — Required $ref: "#/definitions/api-shield_put_label_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "name": "login"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace operations attached to a user-defined label — cloudflare.api-shield-labels-replace-operations-attached-to-user-label

Run Replace operations attached to a user-defined label with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.name — Required The label name $ref: "#/definitions/api-shield_label_name"
body — Required $ref: "#/definitions/api-shield_replace_operations_attached_to_label_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "name": "login"
  },
  "body": {
    "selector": {
      "include": {
        "operation_ids": [
          "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
        ]
      }
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete web or API operations — cloudflare.api-shield-endpoint-management-delete-multiple-operations

Run Delete web or API operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body array Required uniqueItems: true
body[] — Optional $ref: "#/definitions/api-shield_object-with-operation-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": [
    {
      "operation_id": "b17c8043-99a0-4202-b7d9-8f7cdbee02cd"
    },
    {
      "operation_id": "3818d821-5901-4147-a474-f5f5aec1d54e"
    }
  ]
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List web and API operations — cloudflare.api-shield-endpoint-management-retrieve-information-about--6722bf7447

Run List web and API operations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.order string Optional Field to order by. When requesting a feature, the feature keys are available for ordering as well, e.g., thresholds.suggested_threshold. enum: ["method","host","endpoint","thresholds.$key"]
query.direction string Optional Direction to order results. enum: ["asc","desc"]
query.host array Optional Filter results to only include the specified hosts. uniqueItems: true
query.host[] string Optional
query.method array Optional Filter results to only include the specified HTTP methods. uniqueItems: true
query.method[] string Optional
query.endpoint string Optional Filter results to only include endpoints containing this pattern.
query.feature array Optional Add feature(s) to the results. The feature name that is given here corresponds to the resulting feature object. Have a look at the top-level object description for more details on the specific meaning. uniqueItems: true
query.feature[] string Optional enum: ["thresholds","parameter_schemas","schema_info","confidence_intervals"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create web or API operations — cloudflare.api-shield-endpoint-management-add-operations-to-a-zone

Run Create web or API operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body array Required
body[] — Optional $ref: "#/definitions/api-shield_basic_operation"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a web or API operation — cloudflare.api-shield-endpoint-management-add-operation-to-a-zone

Run Create a web or API operation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body — Required $ref: "#/definitions/api-shield_basic_operation"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "method": "GET",
    "host": "www.example.com",
    "endpoint": "/api/v1/users/{var1}"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove labels from web or API operations — cloudflare.api-shield-operations-bulk-delete-labels-to-operations

Run Remove labels from web or API operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body — Required $ref: "#/definitions/api-shield_bulk_delete_labels_on_operation_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "selector": {
      "include": {
        "operation_ids": [
          "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
        ]
      }
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Attach labels to web or API operations — cloudflare.api-shield-operations-bulk-post-labels-to-operations

Run Attach labels to web or API operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body — Required $ref: "#/definitions/api-shield_bulk_post_labels_on_operation_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "selector": {
      "include": {
        "operation_ids": [
          "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
        ]
      }
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace labels on web or API operations — cloudflare.api-shield-operations-bulk-put-labels-to-operations

Run Replace labels on web or API operations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body — Required $ref: "#/definitions/api-shield_bulk_put_labels_on_operation_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "selector": {
      "include": {
        "operation_ids": [
          "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
        ]
      }
    },
    "user": {
      "labels": []
    },
    "managed": {
      "labels": []
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a web or API operation — cloudflare.api-shield-endpoint-management-delete-an-operation

Run Delete a web or API operation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.operation_id — Required Identifier for the operation $ref: "#/definitions/api-shield_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "operation_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a web or API operation — cloudflare.api-shield-endpoint-management-retrieve-information-about--43cd9e45f3

Run Get a web or API operation with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.operation_id — Required Identifier for the operation $ref: "#/definitions/api-shield_uuid"
query object Optional additionalProperties: false
query.feature array Optional Add feature(s) to the results. The feature name that is given here corresponds to the resulting feature object. Have a look at the top-level object description for more details on the specific meaning. uniqueItems: true
query.feature[] string Optional enum: ["thresholds","parameter_schemas","schema_info","confidence_intervals"]
query.with_schemas boolean Optional When true, includes OpenAPI schemas (both uploaded and learned) for the operation in the response. Due to the conversion overhead, this parameter is only supported on single-operation retrieval. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "operation_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove labels from a web or API operation — cloudflare.api-shield-operations-delete-labels-from-operation

Run Remove labels from a web or API operation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.operation_id — Required Identifier for the operation $ref: "#/definitions/api-shield_uuid"
body — Required $ref: "#/definitions/api-shield_delete_labels_on_operation_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "operation_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Attach labels to a web or API operation — cloudflare.api-shield-operations-post-labels-to-operation

Run Attach labels to a web or API operation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.operation_id — Required Identifier for the operation $ref: "#/definitions/api-shield_uuid"
body — Required $ref: "#/definitions/api-shield_post_labels_on_operation_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "operation_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace labels on a web or API operation — cloudflare.api-shield-operations-put-labels-to-operation

Run Replace labels on a web or API operation with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.operation_id — Required Identifier for the operation $ref: "#/definitions/api-shield_uuid"
body — Required $ref: "#/definitions/api-shield_put_labels_on_operation_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "operation_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Export web and API operations as OpenAPI schemas — cloudflare.api-shield-endpoint-management-retrieve-operations-and-fea-7969eb7eff

Run Export web and API operations as OpenAPI schemas with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.host array Optional Receive schema only for the given host(s). uniqueItems: true
query.host[] string Optional
query.feature array Optional Add feature(s) to the results. The feature name that is given here corresponds to the resulting feature object. Have a look at the top-level object description for more details on the specific meaning. uniqueItems: true
query.feature[] string Optional enum: ["thresholds","parameter_schemas","schema_info","confidence_intervals"]
query.include_schema_kind array Optional Schema kinds to include in exported OpenAPI schemas. uniqueItems: true
query.include_schema_kind[] string Optional enum: ["learned"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Argo Smart Routing setting — cloudflare.argo-smart-routing-get-argo-smart-routing-setting

Run Get Argo Smart Routing setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/argo-config_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Argo Smart Routing setting — cloudflare.argo-smart-routing-patch-argo-smart-routing-setting

Run Patch Argo Smart Routing setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/argo-config_identifier"
body — Required $ref: "#/definitions/argo-config_patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "on"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Tiered Cache — cloudflare.tiered-caching-get-tiered-caching-setting

Run Get Tiered Cache with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Tiered Cache — cloudflare.tiered-caching-patch-tiered-caching-setting

Run Update Tiered Cache with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body — Required $ref: "#/definitions/cache-settings_patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "on"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Available Plans — cloudflare.zone-rate-plan-list-available-plans

Run List Available Plans with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Available Plan Details — cloudflare.zone-rate-plan-available-plan-details

Run Available Plan Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.plan_identifier — Required $ref: "#/definitions/bill-subs-api_identifier"
path.zone_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "plan_identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Available Rate Plans — cloudflare.zone-rate-plan-list-available-rate-plans

Run List Available Rate Plans with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zone Bot Management Config — cloudflare.bot-management-for-a-zone-get-config

Run Get Zone Bot Management Config with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bot-management_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List zone feedback reports — cloudflare.bot-management-zone-feedback-list

Run List zone feedback reports with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bot-management_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Submit a feedback report — cloudflare.bot-management-zone-feedback-create

Run Submit a feedback report with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bot-management_identifier"
body — Required $ref: "#/definitions/bot-management_feedback_report"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "type": "false_positive",
    "description": "example",
    "expression": "example",
    "first_request_seen_at": "2026-01-01T00:00:00Z",
    "last_request_seen_at": "2026-01-01T00:00:00Z",
    "requests": 1,
    "requests_by_score": {},
    "requests_by_score_src": {},
    "requests_by_attribute": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Cache Reserve setting — cloudflare.zone-cache-settings-get-cache-reserve-setting

Run Get Cache Reserve setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Cache Reserve setting — cloudflare.zone-cache-settings-change-cache-reserve-setting

Run Change Cache Reserve setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body object Required
body.value — Required $ref: "#/definitions/cache-settings_cache_reserve_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "off"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Cache Reserve Clear — cloudflare.zone-cache-settings-get-cache-reserve-clear

Run Get Cache Reserve Clear with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start Cache Reserve Clear — cloudflare.zone-cache-settings-start-cache-reserve-clear

Run Start Cache Reserve Clear with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Regional Tiered Cache setting — cloudflare.zone-cache-settings-get-regional-tiered-cache-setting

Run Get Regional Tiered Cache setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Regional Tiered Cache setting — cloudflare.zone-cache-settings-change-regional-tiered-cache-setting

Run Change Regional Tiered Cache setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body object Required
body.value — Required $ref: "#/definitions/cache-settings_regional_tiered_cache_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "off"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Smart Tiered Cache setting — cloudflare.smart-tiered-cache-delete-smart-tiered-cache-setting

Run Delete Smart Tiered Cache setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Smart Tiered Cache setting — cloudflare.smart-tiered-cache-get-smart-tiered-cache-setting

Run Get Smart Tiered Cache setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Smart Tiered Cache setting — cloudflare.smart-tiered-cache-patch-smart-tiered-cache-setting

Run Patch Smart Tiered Cache setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body — Required $ref: "#/definitions/cache-settings_smart_tiered_cache_patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "on"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Smart Tiered Cache setting — cloudflare.smart-tiered-cache-create-smart-tiered-cache-setting

Run Create Smart Tiered Cache setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body — Required $ref: "#/definitions/cache-settings_smart_tiered_cache_patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "on"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete variants setting — cloudflare.zone-cache-settings-delete-variants-setting

Run Delete variants setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get variants setting — cloudflare.zone-cache-settings-get-variants-setting

Run Get variants setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change variants setting — cloudflare.zone-cache-settings-change-variants-setting

Run Change variants setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body object Required
body.value — Required $ref: "#/definitions/cache-settings_variants_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Hostname Associations — cloudflare.client-certificate-for-a-zone-list-hostname-associations

Run List Hostname Associations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query object Optional additionalProperties: false
query.mtls_certificate_id string Optional The UUID to match against for a certificate that was uploaded to the mTLS Certificate Management endpoint. If no mtls_certificate_id is given, the results will be the hostnames associated to your active Cloudflare Managed CA. minLength: 36; maxLength: 36

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace Hostname Associations — cloudflare.client-certificate-for-a-zone-put-hostname-associations

Run Replace Hostname Associations with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body — Required $ref: "#/definitions/tls-certificates-and-hostnames_hostname_association"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Client Certificates — cloudflare.client-certificate-for-a-zone-list-client-certificates

Run List Client Certificates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query object Optional additionalProperties: false
query.status string Optional Client Certitifcate Status to filter results by. enum: ["all","active","pending_reactivation","pending_revocation","revoked"]
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of records per page. default: 20; minimum: 5; maximum: 50
query.limit integer Optional Limit to the number of records returned.
query.offset integer Optional Offset the results.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Client Certificate — cloudflare.client-certificate-for-a-zone-create-client-certificate

Run Create Client Certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.csr — Required $ref: "#/definitions/tls-certificates-and-hostnames_csr-2"
body.validity_days — Required $ref: "#/definitions/tls-certificates-and-hostnames_validity_days-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIICY....\n-----END CERTIFICATE REQUEST-----",
    "validity_days": 3650
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revoke Client Certificate — cloudflare.client-certificate-for-a-zone-delete-client-certificate

Run Revoke Client Certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
path.client_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_client_certificate_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "client_certificate_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Client Certificate Details — cloudflare.client-certificate-for-a-zone-client-certificate-details

Run Client Certificate Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
path.client_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_client_certificate_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "client_certificate_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Reactivate Client Certificate — cloudflare.client-certificate-for-a-zone-edit-client-certificate

Run Reactivate Client Certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
path.client_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_client_certificate_identifier"
body object Required
body.reactivate boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "client_certificate_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Rules — cloudflare.zone-cloud-connector-rules

Run Rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cloud-connector_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Put Rules — cloudflare.zone-cloud-conenctor-rules-put

Run Put Rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cloud-connector_identifier"
body array Required
body[] — Optional $ref: "#/definitions/cloud-connector_rule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Disable Content Scanning for a zone. — cloudflare.waf-content-scanning-disable

Run Disable Content Scanning for a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Enable Content Scanning for a zone. — cloudflare.waf-content-scanning-enable

Run Enable Content Scanning for a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List the Content Scanning custom expressions of a zone. — cloudflare.waf-content-scanning-list-custom-scan-expressions

Run List the Content Scanning custom expressions of a zone. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Content Scanning custom expressions for a zone. — cloudflare.waf-content-scanning-add-custom-scan-expressions

Run Create Content Scanning custom expressions for a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"
body array Required
body[] object Optional
body[].payload — Required $ref: "#/definitions/waf-product-api-bundle_custom-scan-payload"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Content Scanning custom expression from a zone. — cloudflare.waf-content-scanning-delete-custom-scan-expressions

Run Delete a Content Scanning custom expression from a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"
path.expression_id — Required $ref: "#/definitions/waf-product-api-bundle_custom-scan-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "expression_id": "a350a054caa840c9becd89c3b4f0195b"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Content Scanning custom expression for a zone. — cloudflare.waf-content-scanning-update-custom-scan-expression

Run Update a Content Scanning custom expression for a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"
path.expression_id — Required $ref: "#/definitions/waf-product-api-bundle_custom-scan-id"
body object Required
body.payload — Required $ref: "#/definitions/waf-product-api-bundle_custom-scan-payload"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "expression_id": "a350a054caa840c9becd89c3b4f0195b"
  },
  "body": {
    "payload": "lookup_json_string(http.request.body.raw, \"file\")"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Content Scanning status for a zone. — cloudflare.waf-content-scanning-get-status

Run Get the Content Scanning status for a zone. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the Content Scanning status for a zone. — cloudflare.waf-content-scanning-update-settings

Run Update the Content Scanning status for a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"
body object Required
body.value string Required The status value for Content Scanning. enum: ["enabled","disabled"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "enabled"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get CT Alerting Subscription — cloudflare.ct-alerting-get-subscription

Run Get CT Alerting Subscription with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update CT Alerting Subscription — cloudflare.ct-alerting-update-subscription

Run Update CT Alerting Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body — Required $ref: "#/definitions/tls-certificates-and-hostnames_ct_alerting_subscription_update"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List SSL Configurations — cloudflare.custom-ssl-for-a-zone-list-ssl-configurations

Run List SSL Configurations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of zones per page. default: 20; minimum: 5; maximum: 50
query.match string Optional Whether to match all search requirements or at least one (any). enum: ["any","all"]; default: "all"
query.status string Optional Status of the zone's custom SSL. enum: ["active","expired","deleted","pending","initializing"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create SSL Configuration — cloudflare.custom-ssl-for-a-zone-create-ssl-configuration

Run Create SSL Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.bundle_method — Optional $ref: "#/definitions/tls-certificates-and-hostnames_bundle_method"
body.certificate — Required $ref: "#/definitions/tls-certificates-and-hostnames_certificate"
body.custom_csr_id — Optional $ref: "#/definitions/tls-certificates-and-hostnames_custom_csr_id"
body.deploy — Optional $ref: "#/definitions/tls-certificates-and-hostnames_deploy"
body.geo_restrictions — Optional $ref: "#/definitions/tls-certificates-and-hostnames_geo_restrictions"
body.policy — Optional $ref: "#/definitions/tls-certificates-and-hostnames_policy"
body.private_key — Optional $ref: "#/definitions/tls-certificates-and-hostnames_private_key"
body.type — Optional $ref: "#/definitions/tls-certificates-and-hostnames_type"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "certificate": "-----BEGIN CERTIFICATE-----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\nYbjM2rxXiyLGxB4Bol7QTv4zHif7Zt89FReT/NBy4rzaskDJY5L6xmY=\n-----END CERTIFICATE-----\n"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Re-prioritize SSL Certificates — cloudflare.custom-ssl-for-a-zone-re-prioritize-ssl-certificates

Run Re-prioritize SSL Certificates with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.certificates array Required Array of ordered certificates.
body.certificates[] object Optional
body.certificates[].id — Optional $ref: "#/definitions/tls-certificates-and-hostnames_custom_certificate_identifier"
body.certificates[].priority — Optional $ref: "#/definitions/tls-certificates-and-hostnames_priority"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "certificates": [
      {
        "id": "5a7805061c76ada191ed06f989cc3dac",
        "priority": 2
      },
      {
        "id": "9a7806061c88ada191ed06f989cc3dac",
        "priority": 1
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete SSL Configuration — cloudflare.custom-ssl-for-a-zone-delete-ssl-configuration

Run Delete SSL Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_certificate_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_certificate_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

SSL Configuration Details — cloudflare.custom-ssl-for-a-zone-ssl-configuration-details

Run SSL Configuration Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_certificate_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_certificate_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit SSL Configuration — cloudflare.custom-ssl-for-a-zone-edit-ssl-configuration

Run Edit SSL Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_certificate_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.bundle_method — Optional $ref: "#/definitions/tls-certificates-and-hostnames_bundle_method"
body.certificate — Optional $ref: "#/definitions/tls-certificates-and-hostnames_certificate"
body.custom_csr_id — Optional $ref: "#/definitions/tls-certificates-and-hostnames_custom_csr_id"
body.deploy — Optional $ref: "#/definitions/tls-certificates-and-hostnames_deploy"
body.geo_restrictions — Optional $ref: "#/definitions/tls-certificates-and-hostnames_geo_restrictions"
body.policy — Optional $ref: "#/definitions/tls-certificates-and-hostnames_policy"
body.private_key — Optional $ref: "#/definitions/tls-certificates-and-hostnames_private_key"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_certificate_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Custom CSRs — cloudflare.custom-csrs-for-a-zone-list-custom-csrs

Run List Custom CSRs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of custom CSRs per page. default: 20; minimum: 5; maximum: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Custom CSR — cloudflare.custom-csrs-for-a-zone-create-custom-csr

Run Create Custom CSR with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_csr_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "country": "US",
    "state": "California",
    "locality": "San Francisco",
    "organization": "Cloudflare, Inc.",
    "common_name": "example.com",
    "sans": [
      "example.com",
      "www.example.com"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Custom CSR — cloudflare.custom-csrs-for-a-zone-delete-custom-csr

Run Delete Custom CSR with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_csr_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_csr_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_csr_id": "7b163417-1d2b-4c84-a38a-2fb7a0cd7752",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Custom CSR Details — cloudflare.custom-csrs-for-a-zone-custom-csr-details

Run Custom CSR Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_csr_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_csr_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_csr_id": "7b163417-1d2b-4c84-a38a-2fb7a0cd7752",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Custom Hostnames — cloudflare.custom-hostname-for-a-zone-list-custom-hostnames

Run List Custom Hostnames with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query object Optional additionalProperties: false
query.hostname string Optional Fully qualified domain name to match against. This parameter cannot be used with the 'id', 'hostname.exact', 'hostname.contain', or 'hostname.startsWith' parameters. maxLength: 255
query.hostname.exact string Optional Fully qualified domain name to match against. This parameter cannot be used with the 'id', 'hostname', 'hostname.contain', or 'hostname.startsWith' parameters. maxLength: 255
query.hostname.startsWith string Optional Filters hostnames by a prefix match on the hostname value. This parameter cannot be used with the 'id', 'hostname', 'hostname.exact', or 'hostname.contain' parameters. maxLength: 255
query.hostname.contain string Optional Filters hostnames by a substring match on the hostname value. This parameter cannot be used with the 'id', 'hostname', 'hostname.exact', or 'hostname.startsWith' parameters. maxLength: 255
query.id string Optional Hostname ID to match against. This ID was generated and returned during the initial custom_hostname creation. This parameter cannot be used with the 'hostname', 'hostname.exact', 'hostname.contain', or 'hostname.startsWith' parameters. minLength: 36; maxLength: 36
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of hostnames per page. default: 20; minimum: 5; maximum: 1000
query.order string Optional Field to order hostnames by. enum: ["ssl","ssl_status"]; default: "ssl"
query.direction string Optional Direction to order hostnames. enum: ["asc","desc"]
query.ssl_status string Optional Filter by SSL certificate status. enum: ["initializing","pending_validation","deleted","pending_issuance","pending_deployment","pending_deletion","pending_expiration","expired","active","initializing_timed_out","validation_timed_out","issuance_timed_out","deployment_timed_out","deletion_timed_out","pending_cleanup","staging_deployment","staging_active","deactivating","inactive","backup_issued","holding_deployment"]
query.hostname_status string Optional Filter by the hostname's activation status. enum: ["active","pending","active_redeploying","moved","pending_deletion","deleted","pending_blocked","pending_migration","pending_provisioned","test_pending","test_active","test_active_apex","test_blocked","test_failed","provisioned","blocked"]
query.certificate_authority string Optional Filter by the certificate authority that issued the SSL certificate. enum: ["google","lets_encrypt","ssl_com"]
query.wildcard boolean Optional Filter by whether the custom hostname is a wildcard hostname.
query.custom_origin_server string Optional Filter by custom origin server name.
query.ssl integer Optional Whether to filter hostnames based on if they have SSL enabled. enum: [0,1]; default: 0

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Custom Hostname — cloudflare.custom-hostname-for-a-zone-create-custom-hostname

Run Create Custom Hostname with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.custom_metadata — Optional $ref: "#/definitions/tls-certificates-and-hostnames_custom_metadata"
body.custom_origin_server — Optional $ref: "#/definitions/tls-certificates-and-hostnames_custom_origin_server"
body.custom_origin_sni — Optional $ref: "#/definitions/tls-certificates-and-hostnames_custom_origin_sni"
body.hostname — Required $ref: "#/definitions/tls-certificates-and-hostnames_hostname_post"
body.ssl — Optional $ref: "#/definitions/tls-certificates-and-hostnames_sslpost"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "hostname": "app.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Fallback Origin for Custom Hostnames — cloudflare.custom-hostname-fallback-origin-for-a-zone-delete-fallback-a74258cd43

Run Delete Fallback Origin for Custom Hostnames with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Fallback Origin for Custom Hostnames — cloudflare.custom-hostname-fallback-origin-for-a-zone-get-fallback-or-c9aa7aaff5

Run Get Fallback Origin for Custom Hostnames with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Fallback Origin for Custom Hostnames — cloudflare.custom-hostname-fallback-origin-for-a-zone-update-fallback-3465fb829a

Run Update Fallback Origin for Custom Hostnames with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.origin — Required $ref: "#/definitions/tls-certificates-and-hostnames_origin"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "origin": "fallback.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Custom Hostname Quota — cloudflare.custom-hostname-for-a-zone-get-custom-hostname-quota

Run Get Custom Hostname Quota with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Custom Hostname (and any issued SSL certificates) — cloudflare.custom-hostname-for-a-zone-delete-custom-hostname---and-an-be27c53402

Run Delete Custom Hostname (and any issued SSL certificates) with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_hostname_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_hostname_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_hostname_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Custom Hostname Details — cloudflare.custom-hostname-for-a-zone-custom-hostname-details

Run Custom Hostname Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_hostname_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_hostname_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_hostname_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit Custom Hostname — cloudflare.custom-hostname-for-a-zone-edit-custom-hostname

Run Edit Custom Hostname with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_hostname_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_hostname_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.custom_metadata — Optional $ref: "#/definitions/tls-certificates-and-hostnames_custom_metadata"
body.custom_origin_server — Optional $ref: "#/definitions/tls-certificates-and-hostnames_custom_origin_server"
body.custom_origin_sni — Optional $ref: "#/definitions/tls-certificates-and-hostnames_custom_origin_sni"
body.ssl — Optional $ref: "#/definitions/tls-certificates-and-hostnames_sslpost"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_hostname_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Single Certificate And Key For Custom Hostname — cloudflare.custom-hostname-for-a-zone-delete_single_certificate_and_k-57ef29945b

Run Delete Single Certificate And Key For Custom Hostname with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_hostname_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_hostname_identifier"
path.certificate_pack_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_hostname_identifier"
path.certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_hostname_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_hostname_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9",
    "certificate_pack_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9",
    "certificate_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace Custom Certificate and Custom Key In Custom Hostname — cloudflare.custom-hostname-for-a-zone-edit-custom-certificate-custom-hostname

Run Replace Custom Certificate and Custom Key In Custom Hostname with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.custom_hostname_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_hostname_identifier"
path.certificate_pack_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_hostname_identifier"
path.certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_hostname_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body — Required $ref: "#/definitions/tls-certificates-and-hostnames_custom_cert_and_key"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "custom_hostname_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9",
    "certificate_pack_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9",
    "certificate_id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "custom_certificate": "-----BEGIN CERTIFICATE-----\nMIIDdjCCAl6gAwIBAgIJAPnMg0Fs+/B0MA0GCSqGSIb3DQEBCwUAMFsx...\n-----END CERTIFICATE-----\n",
    "custom_key": "-----BEGIN PRIVATE KEY-----\nMIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC/SCB5...\n-----END PRIVATE KEY-----\n"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List custom pages — cloudflare.custom-pages-for-a-zone-list-custom-pages

Run List custom pages with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Identifier of the Cloudflare zone. $ref: "#/definitions/custom-pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List custom assets — cloudflare.custom-assets-for-a-zone-list-custom-assets

Run List custom assets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Identifier of the Cloudflare zone. $ref: "#/definitions/custom-pages_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Number of custom assets per page. default: 20; minimum: 1; maximum: 200

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a custom asset — cloudflare.custom-assets-for-a-zone-create-a-custom-asset

Run Create a custom asset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Identifier of the Cloudflare zone. $ref: "#/definitions/custom-pages_identifier"
body object Required
body.description — Required $ref: "#/definitions/custom-pages_asset_description"
body.name — Required $ref: "#/definitions/custom-pages_asset_name"
body.url — Required $ref: "#/definitions/custom-pages_asset_url"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "my_custom_error_page",
    "description": "Custom 500 error page",
    "url": "https://example.com/error.html"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a custom asset — cloudflare.custom-assets-for-a-zone-delete-a-custom-asset

Run Delete a custom asset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asset_name — Required $ref: "#/definitions/custom-pages_asset_name"
path.zone_id — Required Identifier of the Cloudflare zone. $ref: "#/definitions/custom-pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asset_name": "my_custom_error_page",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a custom asset — cloudflare.custom-assets-for-a-zone-get-a-custom-asset

Run Get a custom asset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asset_name — Required $ref: "#/definitions/custom-pages_asset_name"
path.zone_id — Required Identifier of the Cloudflare zone. $ref: "#/definitions/custom-pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asset_name": "my_custom_error_page",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a custom asset — cloudflare.custom-assets-for-a-zone-update-a-custom-asset

Run Update a custom asset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.asset_name — Required $ref: "#/definitions/custom-pages_asset_name"
path.zone_id — Required Identifier of the Cloudflare zone. $ref: "#/definitions/custom-pages_identifier"
body object Required
body.description — Required $ref: "#/definitions/custom-pages_asset_description"
body.url — Required $ref: "#/definitions/custom-pages_asset_url"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "asset_name": "my_custom_error_page",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "description": "Custom 500 error page",
    "url": "https://example.com/error.html"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a preview token — cloudflare.custom-pages-for-a-zone-create-preview-token

Run Create a preview token with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Identifier of the Cloudflare zone. $ref: "#/definitions/custom-pages_identifier"
body — Required $ref: "#/definitions/custom-pages_preview_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "act": "preview",
    "target": "block:waf",
    "url": "https://example.com/error.html"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a custom page — cloudflare.custom-pages-for-a-zone-get-a-custom-page

Run Get a custom page with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/custom-pages_error_page_type"
path.zone_id — Required Identifier of the Cloudflare zone. $ref: "#/definitions/custom-pages_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ratelimit_block",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a custom page — cloudflare.custom-pages-for-a-zone-update-a-custom-page

Run Update a custom page with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/custom-pages_error_page_type"
path.zone_id — Required Identifier of the Cloudflare zone. $ref: "#/definitions/custom-pages_identifier"
body object Required
body.state — Required $ref: "#/definitions/custom-pages_state"
body.url — Required $ref: "#/definitions/custom-pages_url"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "ratelimit_block",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "url": "http://www.example.com",
    "state": "default"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve the DCV Delegation unique identifier. — cloudflare.dcv-delegation-uuid-get

Run Retrieve the DCV Delegation unique identifier. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get device certificate provisioning status — cloudflare.devices-get-policy-certificates

Run Get device certificate provisioning status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/teams-devices_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update device certificate provisioning status — cloudflare.devices-update-policy-certificates

Run Update device certificate provisioning status with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/teams-devices_identifier"
body — Required $ref: "#/definitions/teams-devices_devices_policy_certificates"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List DNS Records — cloudflare.dns-records-for-a-zone-list-dns-records

Run List DNS Records with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dns-records_identifier"
query object Optional additionalProperties: false
query.name string Optional Exact value of the DNS record name. This is a convenience alias for name.exact.
query.name.exact string Optional Exact value of the DNS record name. Name filters are case-insensitive.
query.name.contains string Optional Substring of the DNS record name. Name filters are case-insensitive.
query.name.startswith string Optional Prefix of the DNS record name. Name filters are case-insensitive.
query.name.endswith string Optional Suffix of the DNS record name. Name filters are case-insensitive.
query.type — Optional $ref: "#/definitions/dns-records_type"
query.content string Optional Exact value of the DNS record content. This is a convenience alias for content.exact.
query.content.exact string Optional Exact value of the DNS record content. Content filters are case-insensitive.
query.content.contains string Optional Substring of the DNS record content. Content filters are case-insensitive.
query.content.startswith string Optional Prefix of the DNS record content. Content filters are case-insensitive.
query.content.endswith string Optional Suffix of the DNS record content. Content filters are case-insensitive.
query.proxied — Optional $ref: "#/definitions/dns-records_proxied"
query.match — Optional $ref: "#/definitions/dns-records_match"
query.comment string Optional Exact value of the DNS record comment. This is a convenience alias for comment.exact.
query.comment.present string Optional If this parameter is present, only records with a comment are returned.
query.comment.absent string Optional If this parameter is present, only records without a comment are returned.
query.comment.exact string Optional Exact value of the DNS record comment. Comment filters are case-insensitive.
query.comment.contains string Optional Substring of the DNS record comment. Comment filters are case-insensitive.
query.comment.startswith string Optional Prefix of the DNS record comment. Comment filters are case-insensitive.
query.comment.endswith string Optional Suffix of the DNS record comment. Comment filters are case-insensitive.
query.tag string Optional Condition on the DNS record tag. Parameter values can be of the form &lt;tag-name&gt;:&lt;tag-value&gt; to search for an exact name:value pair, or just &lt;tag-name&gt; to search for records with a specific tag name regardless of its value. This is a convenience shorthand for the more powerful tag.&lt;predicate&gt; parameters. Examples: - tag=important is equivalent to tag.present=important - tag=team:DNS is equivalent to tag.exact=team:DNS
query.tag.present string Optional Name of a tag which must be present on the DNS record. Tag filters are case-insensitive.
query.tag.absent string Optional Name of a tag which must not be present on the DNS record. Tag filters are case-insensitive.
query.tag.exact string Optional A tag and value, of the form &lt;tag-name&gt;:&lt;tag-value&gt;. The API will only return DNS records that have a tag named &lt;tag-name&gt; whose value is &lt;tag-value&gt;. Tag filters are case-insensitive.
query.tag.contains string Optional A tag and value, of the form &lt;tag-name&gt;:&lt;tag-value&gt;. The API will only return DNS records that have a tag named &lt;tag-name&gt; whose value contains &lt;tag-value&gt;. Tag filters are case-insensitive.
query.tag.startswith string Optional A tag and value, of the form &lt;tag-name&gt;:&lt;tag-value&gt;. The API will only return DNS records that have a tag named &lt;tag-name&gt; whose value starts with &lt;tag-value&gt;. Tag filters are case-insensitive.
query.tag.endswith string Optional A tag and value, of the form &lt;tag-name&gt;:&lt;tag-value&gt;. The API will only return DNS records that have a tag named &lt;tag-name&gt; whose value ends with &lt;tag-value&gt;. Tag filters are case-insensitive.
query.search — Optional $ref: "#/definitions/dns-records_search"
query.tag_match — Optional $ref: "#/definitions/dns-records_tag_match"
query.page — Optional $ref: "#/definitions/dns-records_page"
query.per_page — Optional $ref: "#/definitions/dns-records_per_page"
query.order — Optional $ref: "#/definitions/dns-records_order"
query.direction — Optional $ref: "#/definitions/dns-records_direction"
query.include_shadow_metadata boolean Optional Whether to include shadow metadata in the meta field of each record in the response. See Shadowed records. default: false
query.shadowed_by_name string Optional Filters the response to records at or below the specified NS delegation name. NS, DS, and NSEC records at the delegation name are excluded because they are not shadowed by that delegation. Those record types are included only when they exist below the delegation. The value must be a non-apex subdomain of the zone. Requires include_shadow_metadata=true. See Shadowed records.
query.shadowing_name string Optional Returns NS records that shadow the given name, searching at the name itself and each of its ancestor names within the zone, excluding the zone apex. The value must be a subdomain of the zone; the zone apex is not accepted. See Shadowed records.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch DNS Records — cloudflare.dns-records-for-a-zone-batch-dns-records

Run Batch DNS Records with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dns-records_identifier"
query object Optional additionalProperties: false
query.include_shadow_metadata boolean Optional Whether to include shadow metadata in the meta field of each record in the response. See Shadowed records. default: false
body — Required $ref: "#/definitions/dns-records_dns-request-batch-object"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Export DNS Records — cloudflare.dns-records-for-a-zone-export-dns-records

Run Export DNS Records with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dns-records_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Scanned DNS Records — cloudflare.dns-records-for-a-zone-review-dns-scan

Run List Scanned DNS Records with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dns-records_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Review Scanned DNS Records — cloudflare.dns-records-for-a-zone-apply-dns-scan-results

Run Review Scanned DNS Records with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dns-records_identifier"
body — Required $ref: "#/definitions/dns-records_dns-request-review-scan-object"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Trigger DNS Record Scan — cloudflare.dns-records-for-a-zone-trigger-dns-scan

Run Trigger DNS Record Scan with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dns-records_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get DNS Record Usage — cloudflare.dns-records-for-a-zone-get-usage

Run Get DNS Record Usage with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dns-records_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete DNS Record — cloudflare.dns-records-for-a-zone-delete-dns-record

Run Delete DNS Record with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dns_record_id — Required $ref: "#/definitions/dns-records_identifier"
path.zone_id — Required $ref: "#/definitions/dns-records_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dns_record_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

DNS Record Details — cloudflare.dns-records-for-a-zone-dns-record-details

Run DNS Record Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dns_record_id — Required $ref: "#/definitions/dns-records_identifier"
path.zone_id — Required $ref: "#/definitions/dns-records_identifier"
query object Optional additionalProperties: false
query.include_shadow_metadata boolean Optional Whether to include shadow metadata in the meta field of each record in the response. See Shadowed records. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dns_record_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Show DNS Settings — cloudflare.dns-settings-for-a-zone-list-dns-settings

Run Show DNS Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dns-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update DNS Settings — cloudflare.dns-settings-for-a-zone-update-dns-settings

Run Update DNS Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dns-settings_identifier"
body — Required $ref: "#/definitions/dns-settings_dns-settings-zone-patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete DNSSEC records — cloudflare.dnssec-delete-dnssec-records

Run Delete DNSSEC records with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dnssec_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

DNSSEC Details — cloudflare.dnssec-dnssec-details

Run DNSSEC Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dnssec_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit DNSSEC Status — cloudflare.dnssec-edit-dnssec-status

Run Edit DNSSEC Status with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dnssec_identifier"
body object Required
body.dnssec_multi_signer — Optional $ref: "#/definitions/dnssec_dnssec_multi_signer"
body.dnssec_presigned — Optional $ref: "#/definitions/dnssec_dnssec_presigned"
body.dnssec_use_nsec3 — Optional $ref: "#/definitions/dnssec_dnssec_use_nsec3"
body.status string Optional Status of DNSSEC, based on user-desired state and presence of necessary records. enum: ["active","disabled"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List DNSSEC ZSKs — cloudflare.dnssec-list-dnssec-zsks

Run List DNSSEC ZSKs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/dnssec_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get DMARC Report Status — cloudflare.get_dmarc_reports_status

Run Get DMARC Report Status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Zone identifier. $ref: "#/definitions/email-auth_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Configure DMARC Reports — cloudflare.configure_dmarc_reports

Run Configure DMARC Reports with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Zone identifier. $ref: "#/definitions/email-auth_identifier"
body — Required $ref: "#/definitions/email-auth_ConfigureDmarcReportsRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Inspect SPF Record — cloudflare.inspect_spf

Run Inspect SPF Record with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Zone identifier. $ref: "#/definitions/email-auth_identifier"
query object Required additionalProperties: false
query.id string Required DNS record ID (rec_tag) to inspect pattern: "^[a-zA-Z0-9-]{1,64}$"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "id": "e5bb46707a802688812d5d1c9f7977d4"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Email Routing settings — cloudflare.email-routing-settings-get-email-routing-settings

Run Get Email Routing settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Email Routing settings — cloudflare.email-routing-settings-update-email-routing-settings

Run Update Email Routing settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_update_email_routing_settings_properties"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Apply Email Routing settings — cloudflare.email-routing-settings-replace-email-routing-settings

Run Apply Email Routing settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_update_email_routing_settings_properties"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Disable Email Routing — cloudflare.email-routing-settings-disable-email-routing-dns

Run Disable Email Routing with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"
body — Optional $ref: "#/definitions/email_email_setting_dns_request_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Email Routing - DNS settings — cloudflare.email-routing-settings-email-routing-dns-settings

Run Email Routing - DNS settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"
query object Optional additionalProperties: false
query.subdomain — Optional Deprecated. When supplied, the response shape differs from the documented default and is not modeled in generated SDKs. Do not rely on this parameter. $ref: "#/definitions/email_email_setting_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Unlock Email Routing DNS records — cloudflare.email-routing-settings-unlock-email-routing-dns

Run Unlock Email Routing DNS records with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"
body — Optional $ref: "#/definitions/email_email_setting_dns_request_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Enable Email Routing — cloudflare.email-routing-settings-enable-email-routing-dns

Run Enable Email Routing with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"
body — Optional $ref: "#/definitions/email_email_setting_dns_request_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List routing rules — cloudflare.email-routing-routing-rules-list-routing-rules

Run List routing rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.enabled boolean Optional Filter by enabled routing rules. enum: [true,false]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create routing rule — cloudflare.email-routing-routing-rules-create-routing-rule

Run Create routing rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_create_rule_properties"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "actions": [
      {
        "type": "forward"
      }
    ],
    "matchers": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get catch-all rule — cloudflare.email-routing-routing-rules-get-catch-all-rule

Run Get catch-all rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update catch-all rule — cloudflare.email-routing-routing-rules-update-catch-all-rule

Run Update catch-all rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_update_catch_all_rule_properties"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "actions": [
      {
        "type": "forward"
      }
    ],
    "matchers": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete routing rule — cloudflare.email-routing-routing-rules-delete-routing-rule

Run Delete routing rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_identifier — Required $ref: "#/definitions/email_rule_identifier"
path.zone_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_identifier": "a7e6fb77503c41d8a7f3113c6918f10c",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get routing rule — cloudflare.email-routing-routing-rules-get-routing-rule

Run Get routing rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_identifier — Required $ref: "#/definitions/email_rule_identifier"
path.zone_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_identifier": "a7e6fb77503c41d8a7f3113c6918f10c",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update routing rule — cloudflare.email-routing-routing-rules-update-routing-rule

Run Update routing rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_identifier — Required $ref: "#/definitions/email_rule_identifier"
path.zone_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_update_rule_properties"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_identifier": "a7e6fb77503c41d8a7f3113c6918f10c",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "actions": [
      {
        "type": "forward"
      }
    ],
    "matchers": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List sending subdomains — cloudflare.email-sending-subdomains-list-sending-subdomains

Run List sending subdomains with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a sending subdomain — cloudflare.email-sending-subdomains-create-sending-subdomain

Run Create a sending subdomain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_create_sending_subdomain_properties"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "sub.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Preview sending subdomain DNS — cloudflare.email-sending-subdomains-preview-sending-subdomain

Run Preview sending subdomain DNS with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_create_sending_subdomain_properties"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "sub.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a sending subdomain — cloudflare.email-sending-subdomains-delete-sending-subdomain

Run Delete a sending subdomain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subdomain_id — Required $ref: "#/definitions/email_sending_subdomain_identifier"
path.zone_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subdomain_id": "aabbccdd11223344aabbccdd11223344",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a sending subdomain — cloudflare.email-sending-subdomains-get-sending-subdomain

Run Get a sending subdomain with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subdomain_id — Required $ref: "#/definitions/email_sending_subdomain_identifier"
path.zone_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subdomain_id": "aabbccdd11223344aabbccdd11223344",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a sending subdomain — cloudflare.email-sending-subdomains-update-sending-subdomain

Run Update a sending subdomain with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subdomain_id — Required $ref: "#/definitions/email_sending_subdomain_identifier"
path.zone_id — Required $ref: "#/definitions/email_identifier"
body — Required $ref: "#/definitions/email_update_sending_subdomain_properties"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subdomain_id": "aabbccdd11223344aabbccdd11223344",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "preview_enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get sending subdomain DNS records — cloudflare.email-sending-subdomains-get-sending-subdomain-dns

Run Get sending subdomain DNS records with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subdomain_id — Required $ref: "#/definitions/email_sending_subdomain_identifier"
path.zone_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subdomain_id": "aabbccdd11223344aabbccdd11223344",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Fix sending subdomain DNS records — cloudflare.email-sending-subdomains-fix-sending-subdomain-dns

Run Fix sending subdomain DNS records with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subdomain_id — Required $ref: "#/definitions/email_sending_subdomain_identifier"
path.zone_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subdomain_id": "aabbccdd11223344aabbccdd11223344",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get sending subdomain DNS status — cloudflare.email-sending-subdomains-get-sending-subdomain-dns-status

Run Get sending subdomain DNS status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subdomain_id — Required $ref: "#/definitions/email_sending_subdomain_identifier"
path.zone_id — Required $ref: "#/definitions/email_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subdomain_id": "aabbccdd11223344aabbccdd11223344",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get sending subdomain complaint count — cloudflare.email-sending-subdomains-get-sending-subdomain-reputation-complaints

Run Get sending subdomain complaint count with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.subdomain_id — Required $ref: "#/definitions/email_sending_subdomain_identifier"
path.zone_id — Required $ref: "#/definitions/email_identifier"
query object Required additionalProperties: false
query.start_at string Required format: "date-time"
query.end_at string Required format: "date-time"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "subdomain_id": "aabbccdd11223344aabbccdd11223344",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "start_at": "2026-01-01T00:00:00Z",
    "end_at": "2026-01-01T00:00:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zone Entitlements — cloudflare.entitlements-get-zone-entitlements

Run Get Zone Entitlements with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Identifier of the zone. $ref: "#/definitions/entitlements_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List zone environments — cloudflare.zonesenvironmentslist

Run List zone environments with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Identifier of the zone.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Partially update zone environments — cloudflare.zonesenvironmentsedit

Run Partially update zone environments with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Identifier of the zone.
body — Required $ref: "#/definitions/kamino_environments_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  },
  "body": {
    "environments": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create zone environments — cloudflare.zonesenvironmentscreate

Run Create zone environments with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Identifier of the zone.
body — Required $ref: "#/definitions/kamino_environments_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  },
  "body": {
    "environments": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Upsert zone environments — cloudflare.zonesenvironmentsupdate

Run Upsert zone environments with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Identifier of the zone.
body — Required $ref: "#/definitions/kamino_environments_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  },
  "body": {
    "environments": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete zone environment — cloudflare.zonesenvironmentsdelete

Run Delete zone environment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Identifier of the zone.
path.environment_id string Required Reference identifier for the environment.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example",
    "environment_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Invalidate Cached Content by Environment — cloudflare.zone-environment-invalidate

Run Invalidate Cached Content by Environment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required The zone ID. $ref: "#/definitions/cache-purge_identifier"
path.environment_id — Required The environment ID, from Version Management. $ref: "#/definitions/cache-purge_identifier"
body — Required
body — Required anyOf[1]; $ref: "#/definitions/cache-purge_FlexPurgeByTags"
body — Required anyOf[2]; $ref: "#/definitions/cache-purge_FlexPurgeByHostnames"
body — Required anyOf[3]; $ref: "#/definitions/cache-purge_FlexPurgeByPrefixes"
body — Required anyOf[4]; $ref: "#/definitions/cache-purge_Everything"
body — Required anyOf[5]; $ref: "#/definitions/cache-purge_SingleFile"
body — Required anyOf[6]; $ref: "#/definitions/cache-purge_SingleFileWithUrlAndHeaders"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "environment_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "tags": [
      "product-1234",
      "homepage"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Purge Cached Content by Environment — cloudflare.zone-environment-purge

Run Purge Cached Content by Environment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required The zone ID. $ref: "#/definitions/cache-purge_identifier"
path.environment_id — Required The environment ID, from Version Management. $ref: "#/definitions/cache-purge_identifier"
body — Required
body — Required anyOf[1]; $ref: "#/definitions/cache-purge_FlexPurgeByTags"
body — Required anyOf[2]; $ref: "#/definitions/cache-purge_FlexPurgeByHostnames"
body — Required anyOf[3]; $ref: "#/definitions/cache-purge_FlexPurgeByPrefixes"
body — Required anyOf[4]; $ref: "#/definitions/cache-purge_Everything"
body — Required anyOf[5]; $ref: "#/definitions/cache-purge_SingleFile"
body — Required anyOf[6]; $ref: "#/definitions/cache-purge_SingleFileWithUrlAndHeaders"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "environment_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "tags": [
      "product-1234",
      "homepage"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Roll back zone environment — cloudflare.zonesenvironmentsrollback

Run Roll back zone environment with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Identifier of the zone.
path.environment_id string Required Reference identifier for the environment.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example",
    "environment_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List IP Access rules — cloudflare.ip-access-rules-for-a-zone-list-ip-access-rules

Run List IP Access rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/firewall_identifier"
query object Optional additionalProperties: false
query.mode — Optional $ref: "#/definitions/firewall_schemas-mode"
query.configuration.target string Optional The target to search in existing rules. enum: ["ip","ip_range","asn","country"]
query.configuration.value string Optional The target value to search for in existing rules: an IP address, an IP address range, or a country code, depending on the provided configuration.target. Notes: You can search for a single IPv4 address, an IP address range with a subnet of '/16' or '/24', or a two-letter ISO-3166-1 alpha-2 country code.
query.notes string Optional The string to search for in the notes of existing IP Access rules. Notes: For example, the string 'attack' would match IP Access rules with notes 'Attack 26/02' and 'Attack 27/02'. The search is case insensitive.
query.match string Optional When set to all, all the search requirements must match. When set to any, only one of the search requirements has to match. enum: ["any","all"]; default: "all"
query.page number Optional Requested page within paginated list of results.
query.per_page number Optional Maximum number of results requested.
query.order string Optional The field used to sort returned rules. enum: ["configuration.target","configuration.value","mode"]
query.direction string Optional The direction used to sort returned rules. enum: ["asc","desc"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an IP Access rule — cloudflare.ip-access-rules-for-a-zone-delete-an-ip-access-rule

Run Delete an IP Access rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/firewall_identifier"
path.rule_id — Required $ref: "#/definitions/firewall_rule_identifier"
body object Required
body.cascade string Optional The level to attempt to delete similar rules defined for other zones with the same owner. The default value is none, which will only delete the current rule. Using basic will delete rules that match the same action (mode) and configuration, while using aggressive will delete rules that match the same configuration. enum: ["none","basic","aggressive"]; default: "none"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an IP Access rule — cloudflare.ip-access-rules-for-a-zone-update-an-ip-access-rule

Run Update an IP Access rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/firewall_identifier"
path.rule_id — Required $ref: "#/definitions/firewall_rule_identifier"
body object Required
body.mode — Optional
body.mode — Optional allOf[1]; $ref: "#/definitions/firewall_schemas-mode"
body.notes — Optional $ref: "#/definitions/firewall_notes"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Zone Lockdown rules — cloudflare.zone-lockdown-list-zone-lockdown-rules

Run List Zone Lockdown rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/firewall_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.description — Optional
query.description — Optional allOf[1]; $ref: "#/definitions/firewall_schemas-description_search"
query.modified_on — Optional
query.modified_on — Optional allOf[1]; $ref: "#/definitions/firewall_modified_on"
query.ip — Optional
query.ip — Optional allOf[1]; $ref: "#/definitions/firewall_ip_search"
query.priority — Optional
query.priority — Optional allOf[1]; $ref: "#/definitions/firewall_schemas-priority"
query.uri_search — Optional
query.uri_search — Optional allOf[1]; $ref: "#/definitions/firewall_uri_search"
query.ip_range_search — Optional
query.ip_range_search — Optional allOf[1]; $ref: "#/definitions/firewall_ip_range_search"
query.per_page number Optional The maximum number of results per page. You can only set the value to 1 or to a multiple of 5 such as 5, 10, 15, or 20. default: 20; minimum: 1; maximum: 1000
query.created_on string Optional The timestamp of when the rule was created. format: "date-time"
query.description_search string Optional A string to search for in the description of existing rules.
query.ip_search string Optional A single IP address to search for in existing rules.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Zone Lockdown rule — cloudflare.zone-lockdown-create-a-zone-lockdown-rule

Run Create a Zone Lockdown rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/firewall_identifier"
body object Required
body.configurations — Required $ref: "#/definitions/firewall_configurations"
body.description — Optional $ref: "#/definitions/firewall_description"
body.paused — Optional $ref: "#/definitions/firewall_schemas-paused"
body.priority — Optional $ref: "#/definitions/firewall_schemas-priority"
body.urls — Required $ref: "#/definitions/firewall_urls"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "urls": [],
    "configurations": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Zone Lockdown rule — cloudflare.zone-lockdown-delete-a-zone-lockdown-rule

Run Delete a Zone Lockdown rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.lock_downs_id — Required $ref: "#/definitions/firewall_lockdowns_components-schemas-id"
path.zone_id — Required $ref: "#/definitions/firewall_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "lock_downs_id": "372e67954025e0ba6aaa6d586b9e0b59",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Zone Lockdown rule — cloudflare.zone-lockdown-get-a-zone-lockdown-rule

Run Get a Zone Lockdown rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.lock_downs_id — Required $ref: "#/definitions/firewall_lockdowns_components-schemas-id"
path.zone_id — Required $ref: "#/definitions/firewall_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "lock_downs_id": "372e67954025e0ba6aaa6d586b9e0b59",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Zone Lockdown rule — cloudflare.zone-lockdown-update-a-zone-lockdown-rule

Run Update a Zone Lockdown rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.lock_downs_id — Required $ref: "#/definitions/firewall_lockdowns_components-schemas-id"
path.zone_id — Required $ref: "#/definitions/firewall_identifier"
body object Required
body.configurations — Required $ref: "#/definitions/firewall_configurations"
body.urls — Required $ref: "#/definitions/firewall_urls"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "lock_downs_id": "372e67954025e0ba6aaa6d586b9e0b59",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "urls": [],
    "configurations": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete the payload logging key — cloudflare.payload-logging-keys-for-a-zone-delete-the-payload-logging-key

Run Delete the payload logging key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/firewall_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the payload logging key — cloudflare.payload-logging-keys-for-a-zone-get-the-payload-logging-key

Run Get the payload logging key with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/firewall_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set the payload logging key — cloudflare.payload-logging-keys-for-a-zone-set-the-payload-logging-key

Run Set the payload logging key with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/firewall_identifier"
body — Required $ref: "#/definitions/firewall_payload_logging_key"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "public_key": "Ycig/Zr/pZmklmFUN99nr+taURlYItL91g+NcHGYpB8="
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List User Agent Blocking rules — cloudflare.user-agent-blocking-rules-list-user-agent-blocking-rules

Run List User Agent Blocking rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/firewall_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.description — Optional
query.description — Optional allOf[1]; $ref: "#/definitions/firewall_description_search"
query.per_page number Optional The maximum number of results per page. You can only set the value to 1 or to a multiple of 5 such as 5, 10, 15, or 20. default: 20; minimum: 1; maximum: 1000
query.user_agent string Optional A string to search for in the user agent values of existing rules.
query.paused boolean Optional When true, indicates that the rule is currently paused.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a User Agent Blocking rule — cloudflare.user-agent-blocking-rules-create-a-user-agent-blocking-rule

Run Create a User Agent Blocking rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/firewall_identifier"
body object Required
body.configuration — Required $ref: "#/definitions/firewall_ua_configuration"
body.description — Optional $ref: "#/definitions/firewall_description"
body.mode — Required
body.mode — Required allOf[1]; $ref: "#/definitions/firewall_schemas-mode"
body.paused — Optional $ref: "#/definitions/firewall_schemas-paused"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "mode": "challenge",
    "configuration": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a User Agent Blocking rule — cloudflare.user-agent-blocking-rules-delete-a-user-agent-blocking-rule

Run Delete a User Agent Blocking rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ua_rule_id — Required $ref: "#/definitions/firewall_components-ua-rule-id"
path.zone_id — Required $ref: "#/definitions/firewall_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ua_rule_id": "372e67954025e0ba6aaa6d586b9e0b59",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a User Agent Blocking rule — cloudflare.user-agent-blocking-rules-get-a-user-agent-blocking-rule

Run Get a User Agent Blocking rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ua_rule_id — Required $ref: "#/definitions/firewall_components-ua-rule-id"
path.zone_id — Required $ref: "#/definitions/firewall_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ua_rule_id": "372e67954025e0ba6aaa6d586b9e0b59",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Fraud Detection Settings — cloudflare.fraud-detection-zone-get-settings

Run Get Fraud Detection Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/fraud_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Fraud Detection Settings — cloudflare.fraud-detection-zone-update-settings

Run Update Fraud Detection Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/fraud_identifier"
body — Required $ref: "#/definitions/fraud_fraud_settings"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Health Checks — cloudflare.health-checks-list-health-checks

Run List Health Checks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/healthchecks_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. Must be a multiple of 5. default: 25; minimum: 5; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Health Check — cloudflare.health-checks-create-health-check

Run Create Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/healthchecks_identifier"
body — Required $ref: "#/definitions/healthchecks_query_healthcheck"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "server-1",
    "address": "www.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Preview Health Check — cloudflare.health-checks-create-preview-health-check

Run Create Preview Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/healthchecks_identifier"
body — Required $ref: "#/definitions/healthchecks_query_healthcheck"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "server-1",
    "address": "www.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Preview Health Check — cloudflare.health-checks-delete-preview-health-check

Run Delete Preview Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.healthcheck_id — Required $ref: "#/definitions/healthchecks_identifier"
path.zone_id — Required $ref: "#/definitions/healthchecks_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "healthcheck_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Health Check Preview Details — cloudflare.health-checks-health-check-preview-details

Run Health Check Preview Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.healthcheck_id — Required $ref: "#/definitions/healthchecks_identifier"
path.zone_id — Required $ref: "#/definitions/healthchecks_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "healthcheck_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Health Check — cloudflare.health-checks-delete-health-check

Run Delete Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.healthcheck_id — Required $ref: "#/definitions/healthchecks_identifier"
path.zone_id — Required $ref: "#/definitions/healthchecks_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "healthcheck_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Health Check Details — cloudflare.health-checks-health-check-details

Run Health Check Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.healthcheck_id — Required $ref: "#/definitions/healthchecks_identifier"
path.zone_id — Required $ref: "#/definitions/healthchecks_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "healthcheck_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Health Check — cloudflare.health-checks-patch-health-check

Run Patch Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.healthcheck_id — Required $ref: "#/definitions/healthchecks_identifier"
path.zone_id — Required $ref: "#/definitions/healthchecks_identifier"
body — Required $ref: "#/definitions/healthchecks_query_healthcheck"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "healthcheck_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "server-1",
    "address": "www.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Health Check — cloudflare.health-checks-update-health-check

Run Update Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.healthcheck_id — Required $ref: "#/definitions/healthchecks_identifier"
path.zone_id — Required $ref: "#/definitions/healthchecks_identifier"
body — Required $ref: "#/definitions/healthchecks_query_healthcheck"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "healthcheck_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "server-1",
    "address": "www.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove Zone Hold — cloudflare.zones-0-hold-delete

Run Remove Zone Hold with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Zone ID $ref: "#/definitions/zones_identifier-2"
query object Optional additionalProperties: false
query.hold_after string Optional If hold_after is provided, the hold will be temporarily disabled, then automatically re-enabled by the system at the time specified in this RFC3339-formatted timestamp. Otherwise, the hold will be disabled indefinitely. hold_after cannot be provided for CDN-only zones.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zone Hold — cloudflare.zones-0-hold-get

Run Get Zone Hold with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Zone ID $ref: "#/definitions/zones_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Zone Hold — cloudflare.zones-0-hold-patch

Run Update Zone Hold with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Zone ID $ref: "#/definitions/zones_identifier-2"
body object Required
body.hold_after string | null Optional If hold_after is provided and future-dated, the hold will be temporarily disabled, then automatically re-enabled by the system at the time specified in this RFC3339-formatted timestamp. A past-dated hold_after value will have no effect on an existing, enabled hold. Providing an empty string will set its value to the current time. Providing null will disable the hold indefinitely. default: ""
body.include_subdomains boolean Optional If true, the zone hold will extend to block any subdomain of the given zone, as well as SSL4SaaS Custom Hostnames. For example, a zone hold on a zone with the hostname 'example.com' and include_subdomains=true will block 'example.com', 'staging.example.com', 'api.staging.example.com', etc. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Zone Hold — cloudflare.zones-0-hold-post

Run Create Zone Hold with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Zone ID $ref: "#/definitions/zones_identifier-2"
query object Optional additionalProperties: false
query.include_subdomains boolean Optional If provided, the zone hold will extend to block any subdomain of the given zone, as well as SSL4SaaS Custom Hostnames. For example, a zone hold on a zone with the hostname 'example.com' and include_subdomains=true will block 'example.com', 'staging.example.com', 'api.staging.example.com', etc.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List TLS setting for hostnames — cloudflare.per-hostname-tls-settings-list

Run List TLS setting for hostnames with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
path.setting_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_setting_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "setting_id": "ciphers"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete TLS setting for hostname — cloudflare.per-hostname-tls-settings-delete

Run Delete TLS setting for hostname with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
path.setting_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_setting_id"
path.hostname — Required $ref: "#/definitions/tls-certificates-and-hostnames_hostname-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "setting_id": "ciphers",
    "hostname": "app.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get TLS setting for hostname — cloudflare.per-hostname-tls-settings-get

Run Get TLS setting for hostname with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
path.setting_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_setting_id"
path.hostname — Required $ref: "#/definitions/tls-certificates-and-hostnames_hostname-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "setting_id": "ciphers",
    "hostname": "app.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit TLS setting for hostname — cloudflare.per-hostname-tls-settings-put

Run Edit TLS setting for hostname with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
path.setting_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_setting_id"
path.hostname — Required $ref: "#/definitions/tls-certificates-and-hostnames_hostname-3"
body object Required
body.value — Required $ref: "#/definitions/tls-certificates-and-hostnames_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "setting_id": "ciphers",
    "hostname": "app.example.com"
  },
  "body": {
    "value": [
      "ECDHE-RSA-AES128-GCM-SHA256",
      "AES128-GCM-SHA256"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get transformation flows — cloudflare.get_flowsget

Run Get transformation flows with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Zone identifier.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update transformation flows — cloudflare.put_flowsupdate

Run Update transformation flows with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Zone identifier.
body object Optional
body.etag string Optional
body.flows array Required maxItems: 10
body.flows[] — Optional
body.flows[] object Optional oneOf[1]
body.flows[].enabled boolean Required oneOf[1]
body.flows[].provider string Required oneOf[1]; enum: ["fastly"]
body.flows[].type string Required oneOf[1]; enum: ["provider"]
body.flows[].version number Required oneOf[1]
body.flows[] object Optional oneOf[2]
body.flows[].enabled boolean Required oneOf[2]
body.flows[].name string Required oneOf[2]
body.flows[].transformations array Required oneOf[2]
body.flows[].transformations[] object Optional oneOf[2]
body.flows[].transformations[].key string Required oneOf[2]
body.flows[].transformations[].value string Required oneOf[2]
body.flows[].trigger — Required oneOf[2]
body.flows[].trigger object Required oneOf[2]; oneOf[1]
body.flows[].trigger.triggers array Required oneOf[2]; oneOf[1]; minItems: 1
body.flows[].trigger.triggers[] object Optional oneOf[2]; oneOf[1]
body.flows[].trigger.type string Required oneOf[2]; oneOf[1]; enum: ["and"]
body.flows[].trigger object Required oneOf[2]; oneOf[2]
body.flows[].trigger.triggers array Required oneOf[2]; oneOf[2]; minItems: 1
body.flows[].trigger.triggers[] object Optional oneOf[2]; oneOf[2]
body.flows[].trigger.type string Required oneOf[2]; oneOf[2]; enum: ["or"]
body.flows[].trigger object Required oneOf[2]; oneOf[3]
body.flows[].trigger.paths array Required oneOf[2]; oneOf[3]
body.flows[].trigger.paths[] string Optional oneOf[2]; oneOf[3]
body.flows[].trigger.type string Required oneOf[2]; oneOf[3]; enum: ["path"]
body.flows[].trigger object Required oneOf[2]; oneOf[4]
body.flows[].trigger.extensions array Required oneOf[2]; oneOf[4]
body.flows[].trigger.extensions[] string Optional oneOf[2]; oneOf[4]
body.flows[].trigger.type string Required oneOf[2]; oneOf[4]; enum: ["extension"]
body.flows[].trigger object Required oneOf[2]; oneOf[5]
body.flows[].trigger.params array Required oneOf[2]; oneOf[5]
body.flows[].trigger.params[] object Optional oneOf[2]; oneOf[5]
body.flows[].trigger.params[].key string Required oneOf[2]; oneOf[5]
body.flows[].trigger.params[].value string Required oneOf[2]; oneOf[5]
body.flows[].trigger.type string Required oneOf[2]; oneOf[5]; enum: ["query-param"]
body.flows[].type string Required oneOf[2]; enum: ["custom"]
body.version number Required enum: [2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create an ingress rule — cloudflare.sinkhole-config-create-ingress

Run Create an ingress rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required The unique identifier for the Cloudflare zone. $ref: "#/definitions/intel-sinkholes_identifier"
path.sinkhole_id string Required The unique identifier for the sinkhole.
body — Required $ref: "#/definitions/intel-sinkholes_ingress_create_params"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sinkhole_id": "93defa6e909e464e8c89a85859f36d3c"
  },
  "body": {
    "cidr": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an ingress rule — cloudflare.sinkhole-config-delete-ingress

Run Delete an ingress rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required The unique identifier for the Cloudflare zone. $ref: "#/definitions/intel-sinkholes_identifier"
path.sinkhole_id string Required The unique identifier for the sinkhole.
path.ingress_id string Required The unique identifier for the ingress rule.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sinkhole_id": "93defa6e909e464e8c89a85859f36d3c",
    "ingress_id": "de32ae5203724ed08dcc26e971a4d22f"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an ingress rule — cloudflare.sinkhole-config-get-ingress

Run Get an ingress rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required The unique identifier for the Cloudflare zone. $ref: "#/definitions/intel-sinkholes_identifier"
path.sinkhole_id string Required The unique identifier for the sinkhole.
path.ingress_id string Required The unique identifier for the ingress rule.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sinkhole_id": "93defa6e909e464e8c89a85859f36d3c",
    "ingress_id": "de32ae5203724ed08dcc26e971a4d22f"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update an ingress rule — cloudflare.sinkhole-config-update-ingress

Run Update an ingress rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required The unique identifier for the Cloudflare zone. $ref: "#/definitions/intel-sinkholes_identifier"
path.sinkhole_id string Required The unique identifier for the sinkhole.
path.ingress_id string Required The unique identifier for the ingress rule.
body — Required $ref: "#/definitions/intel-sinkholes_ingress_create_params"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "sinkhole_id": "93defa6e909e464e8c89a85859f36d3c",
    "ingress_id": "de32ae5203724ed08dcc26e971a4d22f"
  },
  "body": {
    "cidr": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Invalidate Cached Content — cloudflare.zone-invalidate

Run Invalidate Cached Content with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required The zone ID. $ref: "#/definitions/cache-purge_identifier"
body — Required
body — Required anyOf[1]; $ref: "#/definitions/cache-purge_FlexPurgeByTags"
body — Required anyOf[2]; $ref: "#/definitions/cache-purge_FlexPurgeByHostnames"
body — Required anyOf[3]; $ref: "#/definitions/cache-purge_FlexPurgeByPrefixes"
body — Required anyOf[4]; $ref: "#/definitions/cache-purge_Everything"
body — Required anyOf[5]; $ref: "#/definitions/cache-purge_SingleFile"
body — Required anyOf[6]; $ref: "#/definitions/cache-purge_SingleFileWithUrlAndHeaders"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "tags": [
      "product-1234",
      "homepage"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Keyless SSL Configurations — cloudflare.keyless-ssl-for-a-zone-list-keyless-ssl-configurations

Run List Keyless SSL Configurations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Keyless SSL Configuration — cloudflare.keyless-ssl-for-a-zone-create-keyless-ssl-configuration

Run Create Keyless SSL Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.bundle_method — Optional $ref: "#/definitions/tls-certificates-and-hostnames_bundle_method"
body.certificate — Required $ref: "#/definitions/tls-certificates-and-hostnames_certificate-2"
body.host — Required $ref: "#/definitions/tls-certificates-and-hostnames_host"
body.name — Optional $ref: "#/definitions/tls-certificates-and-hostnames_name_write"
body.port — Required $ref: "#/definitions/tls-certificates-and-hostnames_port"
body.tunnel — Optional $ref: "#/definitions/tls-certificates-and-hostnames_keyless_tunnel"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "host": "example.com",
    "port": 24008,
    "certificate": "-----BEGIN CERTIFICATE-----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\n/cBzejUobNCjjHFbtkAL/SjxZOLW+pNkZwfeYdM8iPkD54Uua1v2tdw=\n-----END CERTIFICATE-----"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Keyless SSL Configuration — cloudflare.keyless-ssl-for-a-zone-delete-keyless-ssl-configuration

Run Delete Keyless SSL Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.keyless_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_keyless_certificate_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "keyless_certificate_id": "4d2844d2ce78891c34d0b6c0535a291e",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Keyless SSL Configuration — cloudflare.keyless-ssl-for-a-zone-get-keyless-ssl-configuration

Run Get Keyless SSL Configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.keyless_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_keyless_certificate_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "keyless_certificate_id": "4d2844d2ce78891c34d0b6c0535a291e",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit Keyless SSL Configuration — cloudflare.keyless-ssl-for-a-zone-edit-keyless-ssl-configuration

Run Edit Keyless SSL Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.keyless_certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_keyless_certificate_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.enabled — Optional $ref: "#/definitions/tls-certificates-and-hostnames_enabled_write"
body.host — Optional $ref: "#/definitions/tls-certificates-and-hostnames_host"
body.name — Optional $ref: "#/definitions/tls-certificates-and-hostnames_name_write"
body.port — Optional $ref: "#/definitions/tls-certificates-and-hostnames_port"
body.tunnel — Optional $ref: "#/definitions/tls-certificates-and-hostnames_keyless_tunnel"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "keyless_certificate_id": "4d2844d2ce78891c34d0b6c0535a291e",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Leaked Credential Checks status for a zone. — cloudflare.waf-product-api-leaked-credentials-get-status

Run Get the Leaked Credential Checks status for a zone. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the Leaked Credential Checks status for a zone. — cloudflare.waf-product-api-leaked-credentials-set-status

Run Update the Leaked Credential Checks status for a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"
body — Required $ref: "#/definitions/waf-product-api-bundle_status"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List the custom detection locations of a zone. — cloudflare.waf-product-api-leaked-credentials-list-detections

Run List the custom detection locations of a zone. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a custom detection location for a zone. — cloudflare.waf-product-api-leaked-credentials-create-detection

Run Create a custom detection location for a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"
body — Required $ref: "#/definitions/waf-product-api-bundle_custom-detection"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a custom detection location from a zone. — cloudflare.waf-product-api-leaked-credentials-delete-detection

Run Delete a custom detection location from a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"
path.detection_id — Required $ref: "#/definitions/waf-product-api-bundle_detection-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "detection_id": "18a14bafaa8eb1df04ce683ec18c765e"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a custom detection location of a zone. — cloudflare.waf-product-api-leaked-credentials-get-detection

Run Get a custom detection location of a zone. with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"
path.detection_id — Required $ref: "#/definitions/waf-product-api-bundle_detection-id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "detection_id": "18a14bafaa8eb1df04ce683ec18c765e"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a custom detection location of a zone. — cloudflare.waf-product-api-leaked-credentials-update-detection

Run Update a custom detection location of a zone. with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waf-product-api-bundle_identifier"
path.detection_id — Required $ref: "#/definitions/waf-product-api-bundle_detection-id"
body — Required $ref: "#/definitions/waf-product-api-bundle_custom-detection"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "detection_id": "18a14bafaa8eb1df04ce683ec18c765e"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Load Balancers — cloudflare.load-balancers-list-load-balancers

Run List Load Balancers with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Load Balancer — cloudflare.load-balancers-create-load-balancer

Run Create Load Balancer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"
body object Required
body.adaptive_routing — Optional $ref: "#/definitions/load-balancing_adaptive_routing"
body.country_pools — Optional $ref: "#/definitions/load-balancing_country_pools"
body.default_pools — Required $ref: "#/definitions/load-balancing_default_pools"
body.description — Optional $ref: "#/definitions/load-balancing_components-schemas-description"
body.fallback_pool — Required $ref: "#/definitions/load-balancing_fallback_pool"
body.location_strategy — Optional $ref: "#/definitions/load-balancing_location_strategy"
body.name — Required $ref: "#/definitions/load-balancing_components-schemas-name"
body.networks — Optional $ref: "#/definitions/load-balancing_networks"
body.pop_pools — Optional $ref: "#/definitions/load-balancing_pop_pools"
body.proxied — Optional $ref: "#/definitions/load-balancing_proxied"
body.random_steering — Optional $ref: "#/definitions/load-balancing_random_steering"
body.region_pools — Optional $ref: "#/definitions/load-balancing_region_pools"
body.rules — Optional $ref: "#/definitions/load-balancing_rules"
body.session_affinity — Optional $ref: "#/definitions/load-balancing_session_affinity"
body.session_affinity_attributes — Optional $ref: "#/definitions/load-balancing_session_affinity_attributes"
body.session_affinity_ttl — Optional $ref: "#/definitions/load-balancing_session_affinity_ttl"
body.steering_policy — Optional $ref: "#/definitions/load-balancing_steering_policy"
body.ttl — Optional $ref: "#/definitions/load-balancing_ttl"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "www.example.com",
    "default_pools": [
      "17b5962d775c646f3f9725cbc7a53df4",
      "9290f38c5d07c2e2f4df57b1f61d4196",
      "00920f38ce07c2e2f4df50b1f61d4194"
    ],
    "fallback_pool": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Load Balancer — cloudflare.load-balancers-delete-load-balancer

Run Delete Load Balancer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"
path.load_balancer_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252",
    "load_balancer_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Load Balancer Details — cloudflare.load-balancers-load-balancer-details

Run Load Balancer Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"
path.load_balancer_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252",
    "load_balancer_id": "699d98642c564d2e855e9661899b7252"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Load Balancer — cloudflare.load-balancers-patch-load-balancer

Run Patch Load Balancer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"
path.load_balancer_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"
body object Required
body.adaptive_routing — Optional $ref: "#/definitions/load-balancing_adaptive_routing"
body.country_pools — Optional $ref: "#/definitions/load-balancing_country_pools"
body.default_pools — Optional $ref: "#/definitions/load-balancing_default_pools"
body.description — Optional $ref: "#/definitions/load-balancing_components-schemas-description"
body.enabled — Optional $ref: "#/definitions/load-balancing_components-schemas-enabled"
body.fallback_pool — Optional $ref: "#/definitions/load-balancing_fallback_pool"
body.location_strategy — Optional $ref: "#/definitions/load-balancing_location_strategy"
body.name — Optional $ref: "#/definitions/load-balancing_components-schemas-name"
body.pop_pools — Optional $ref: "#/definitions/load-balancing_pop_pools"
body.proxied — Optional $ref: "#/definitions/load-balancing_proxied"
body.random_steering — Optional $ref: "#/definitions/load-balancing_random_steering"
body.region_pools — Optional $ref: "#/definitions/load-balancing_region_pools"
body.rules — Optional $ref: "#/definitions/load-balancing_rules"
body.session_affinity — Optional $ref: "#/definitions/load-balancing_session_affinity"
body.session_affinity_attributes — Optional $ref: "#/definitions/load-balancing_session_affinity_attributes"
body.session_affinity_ttl — Optional $ref: "#/definitions/load-balancing_session_affinity_ttl"
body.steering_policy — Optional $ref: "#/definitions/load-balancing_steering_policy"
body.ttl — Optional $ref: "#/definitions/load-balancing_ttl"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252",
    "load_balancer_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Load Balancer — cloudflare.load-balancers-update-load-balancer

Run Update Load Balancer with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"
path.load_balancer_id — Required $ref: "#/definitions/load-balancing_load-balancer_components-schemas-identifier"
body object Required
body.adaptive_routing — Optional $ref: "#/definitions/load-balancing_adaptive_routing"
body.country_pools — Optional $ref: "#/definitions/load-balancing_country_pools"
body.default_pools — Required $ref: "#/definitions/load-balancing_default_pools"
body.description — Optional $ref: "#/definitions/load-balancing_components-schemas-description"
body.enabled — Optional $ref: "#/definitions/load-balancing_components-schemas-enabled"
body.fallback_pool — Required $ref: "#/definitions/load-balancing_fallback_pool"
body.location_strategy — Optional $ref: "#/definitions/load-balancing_location_strategy"
body.name — Required $ref: "#/definitions/load-balancing_components-schemas-name"
body.networks — Optional $ref: "#/definitions/load-balancing_networks"
body.pop_pools — Optional $ref: "#/definitions/load-balancing_pop_pools"
body.proxied — Optional $ref: "#/definitions/load-balancing_proxied"
body.random_steering — Optional $ref: "#/definitions/load-balancing_random_steering"
body.region_pools — Optional $ref: "#/definitions/load-balancing_region_pools"
body.rules — Optional $ref: "#/definitions/load-balancing_rules"
body.session_affinity — Optional $ref: "#/definitions/load-balancing_session_affinity"
body.session_affinity_attributes — Optional $ref: "#/definitions/load-balancing_session_affinity_attributes"
body.session_affinity_ttl — Optional $ref: "#/definitions/load-balancing_session_affinity_ttl"
body.steering_policy — Optional $ref: "#/definitions/load-balancing_steering_policy"
body.ttl — Optional $ref: "#/definitions/load-balancing_ttl"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "699d98642c564d2e855e9661899b7252",
    "load_balancer_id": "699d98642c564d2e855e9661899b7252"
  },
  "body": {
    "name": "www.example.com",
    "default_pools": [
      "17b5962d775c646f3f9725cbc7a53df4",
      "9290f38c5d07c2e2f4df57b1f61d4196",
      "00920f38ce07c2e2f4df50b1f61d4194"
    ],
    "fallback_pool": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List fields — cloudflare.get-zones-zone_id-logpush-datasets-dataset_id-fields

Run List fields with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dataset_id — Required $ref: "#/definitions/logpush_dataset"
path.zone_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dataset_id": "http_requests",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Logpush jobs for a dataset — cloudflare.get-zones-zone_id-logpush-datasets-dataset_id-jobs

Run List Logpush jobs for a dataset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.dataset_id — Required $ref: "#/definitions/logpush_dataset"
path.zone_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "dataset_id": "http_requests",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Instant Logs jobs — cloudflare.get-zones-zone_id-logpush-edge-jobs

Run List Instant Logs jobs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Instant Logs job — cloudflare.post-zones-zone_id-logpush-edge-jobs

Run Create Instant Logs job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.fields — Optional $ref: "#/definitions/logpush_fields"
body.filter — Optional $ref: "#/definitions/logpush_filter-2"
body.sample — Optional $ref: "#/definitions/logpush_sample"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Logpush jobs — cloudflare.get-zones-zone_id-logpush-jobs

Run List Logpush jobs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Logpush job — cloudflare.post-zones-zone_id-logpush-jobs

Run Create Logpush job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.dataset — Optional $ref: "#/definitions/logpush_dataset"
body.destination_conf — Required $ref: "#/definitions/logpush_destination_conf"
body.enabled — Optional $ref: "#/definitions/logpush_enabled"
body.filter — Optional $ref: "#/definitions/logpush_filter"
body.filter_attack_traffic — Optional $ref: "#/definitions/logpush_filter_attack_traffic"
body.frequency — Optional $ref: "#/definitions/logpush_frequency"
body.kind — Optional $ref: "#/definitions/logpush_kind"
body.logpull_options — Optional $ref: "#/definitions/logpush_logpull_options"
body.max_upload_bytes — Optional $ref: "#/definitions/logpush_max_upload_bytes"
body.max_upload_interval_seconds — Optional $ref: "#/definitions/logpush_max_upload_interval_seconds"
body.max_upload_records — Optional $ref: "#/definitions/logpush_max_upload_records"
body.name — Optional $ref: "#/definitions/logpush_name"
body.output_options — Optional $ref: "#/definitions/logpush_output_options"
body.ownership_challenge — Optional $ref: "#/definitions/logpush_ownership_challenge"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "dataset": "http_requests",
    "destination_conf": "s3://mybucket/logs?region=us-west-2",
    "enabled": false,
    "filter": "{\"where\":{\"and\":[{\"key\":\"ClientRequestPath\",\"operator\":\"contains\",\"value\":\"/static\"},{\"key\":\"ClientRequestHost\",\"operator\":\"eq\",\"value\":\"example.com\"}]}}",
    "kind": "",
    "max_upload_bytes": 5000000,
    "max_upload_interval_seconds": 30,
    "max_upload_records": 1000,
    "name": "example.com",
    "output_options": {
      "CVE-2021-44228": false,
      "batch_prefix": "",
      "batch_suffix": "",
      "field_delimiter": ",",
      "field_names": [
        "RayID",
        "ClientIP",
        "EdgeStartTimestamp"
      ],
      "output_type": "ndjson",
      "record_delimiter": "",
      "record_prefix": "{",
      "record_suffix": "}\n",
      "sample_rate": 1,
      "timestamp_format": "unixnano"
    },
    "ownership_challenge": "00000000000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Logpush job — cloudflare.delete-zones-zone_id-logpush-jobs-job_id

Run Delete Logpush job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.job_id — Required $ref: "#/definitions/logpush_id"
path.zone_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "job_id": 1,
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Logpush job details — cloudflare.get-zones-zone_id-logpush-jobs-job_id

Run Get Logpush job details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.job_id — Required $ref: "#/definitions/logpush_id"
path.zone_id — Required $ref: "#/definitions/logpush_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "job_id": 1,
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Logpush job — cloudflare.put-zones-zone_id-logpush-jobs-job_id

Run Update Logpush job with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.job_id — Required $ref: "#/definitions/logpush_id"
path.zone_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.destination_conf — Optional $ref: "#/definitions/logpush_destination_conf"
body.enabled — Optional $ref: "#/definitions/logpush_enabled"
body.filter — Optional $ref: "#/definitions/logpush_filter"
body.filter_attack_traffic — Optional $ref: "#/definitions/logpush_filter_attack_traffic"
body.frequency — Optional $ref: "#/definitions/logpush_frequency"
body.kind — Optional $ref: "#/definitions/logpush_kind"
body.logpull_options — Optional $ref: "#/definitions/logpush_logpull_options"
body.max_upload_bytes — Optional $ref: "#/definitions/logpush_max_upload_bytes"
body.max_upload_interval_seconds — Optional $ref: "#/definitions/logpush_max_upload_interval_seconds"
body.max_upload_records — Optional $ref: "#/definitions/logpush_max_upload_records"
body.name — Optional $ref: "#/definitions/logpush_name"
body.output_options — Optional $ref: "#/definitions/logpush_output_options"
body.ownership_challenge — Optional $ref: "#/definitions/logpush_ownership_challenge"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "job_id": 1,
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://mybucket/logs?region=us-west-2",
    "enabled": false,
    "filter": "{\"where\":{\"and\":[{\"key\":\"ClientRequestPath\",\"operator\":\"contains\",\"value\":\"/static\"},{\"key\":\"ClientRequestHost\",\"operator\":\"eq\",\"value\":\"example.com\"}]}}",
    "kind": "",
    "max_upload_bytes": 5000000,
    "max_upload_interval_seconds": 30,
    "max_upload_records": 1000,
    "output_options": {
      "CVE-2021-44228": false,
      "batch_prefix": "",
      "batch_suffix": "",
      "field_delimiter": ",",
      "field_names": [
        "RayID",
        "ClientIP",
        "EdgeStartTimestamp"
      ],
      "output_type": "ndjson",
      "record_delimiter": "",
      "record_prefix": "{",
      "record_suffix": "}\n",
      "sample_rate": 1,
      "timestamp_format": "unixnano"
    },
    "ownership_challenge": "00000000000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get ownership challenge — cloudflare.post-zones-zone_id-logpush-ownership

Run Get ownership challenge with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.destination_conf — Required $ref: "#/definitions/logpush_destination_conf"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://mybucket/logs?region=us-west-2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate ownership challenge — cloudflare.post-zones-zone_id-logpush-ownership-validate

Run Validate ownership challenge with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.destination_conf — Required $ref: "#/definitions/logpush_destination_conf"
body.ownership_challenge — Required $ref: "#/definitions/logpush_ownership_challenge"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://mybucket/logs?region=us-west-2",
    "ownership_challenge": "00000000000000000000"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate destination — cloudflare.post-zones-zone_id-logpush-validate-destination

Run Validate destination with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.destination_conf — Required $ref: "#/definitions/logpush_destination_conf"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://mybucket/logs?region=us-west-2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check destination exists — cloudflare.post-zones-zone_id-logpush-validate-destination-exists

Run Check destination exists with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.destination_conf — Required $ref: "#/definitions/logpush_destination_conf"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "destination_conf": "s3://mybucket/logs?region=us-west-2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Validate origin — cloudflare.post-zones-zone_id-logpush-validate-origin

Run Validate origin with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logpush_identifier"
body object Required
body.logpull_options — Required $ref: "#/definitions/logpush_logpull_options"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "logpull_options": "fields=RayID,ClientIP,EdgeStartTimestamp&timestamps=rfc3339"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get log retention flag — cloudflare.get-zones-zone_id-logs-control-retention-flag

Run Get log retention flag with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logcontrol_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update log retention flag — cloudflare.post-zones-zone_id-logs-control-retention-flag

Run Update log retention flag with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logcontrol_identifier"
body — Required $ref: "#/definitions/logcontrol_retention_flag"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get logs RayIDs — cloudflare.get-zones-zone_id-logs-rayids-ray_id

Run Get logs RayIDs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logshare_zone_identifier"
path.ray_id — Required $ref: "#/definitions/logshare_ray_identifier"
query object Optional additionalProperties: false
query.fields — Optional $ref: "#/definitions/logshare_fields"
query.timestamps — Optional $ref: "#/definitions/logshare_timestamps"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "ray_id": "41ddf1740f67442d"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get logs received — cloudflare.get-zones-zone_id-logs-received

Run Get logs received with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logshare_zone_identifier"
query object Required additionalProperties: false
query.start — Optional $ref: "#/definitions/logshare_start"
query.end — Required $ref: "#/definitions/logshare_end"
query.fields — Optional $ref: "#/definitions/logshare_fields"
query.sample — Optional $ref: "#/definitions/logshare_sample"
query.count — Optional $ref: "#/definitions/logshare_count"
query.timestamps — Optional $ref: "#/definitions/logshare_timestamps"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "end": "2018-05-20T10:01:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List fields — cloudflare.get-zones-zone_id-logs-received-fields

Run List fields with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/logshare_zone_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Managed Transforms — cloudflare.deletemanagedtransforms

Run Delete Managed Transforms with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Managed Transforms — cloudflare.listmanagedtransforms

Run List Managed Transforms with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Managed Transforms — cloudflare.updatemanagedtransforms

Run Update Managed Transforms with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"
body — Required $ref: "#/definitions/rulesets_ManagedTransformsPatch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get zone Media usage — cloudflare.usage-analytics-get-zone-media-usage

Run Get zone Media usage with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Standard Cloudflare hex zone identifier. The API gateway resolves this to the owning account and translates it to an internal numeric ID before forwarding to the backend service. $ref: "#/definitions/usage-analytics_identifier"
query object Optional additionalProperties: false
query.metrics string Optional Comma-separated list of metrics to include in the response. Available metrics depend on the endpoint. Billing usage supports: streamMinutesViewed, rateLimitingRequestsAllowed, loadBalancingQueries, argoAcceleratedBytes, workersRequests, workersKVReads, imageResizingRequests, spectrumBytesTransferred, mediaUniqueTransformations. Stream/media usage supports: streamMinutesViewed.
query.since string Optional Start of the time range for the query (inclusive). ISO 8601 timestamp. Defaults to 6 hours before the current time. format: "date-time"
query.until string Optional End of the time range for the query (inclusive). ISO 8601 timestamp. Defaults to the current time. format: "date-time"
query.time_delta string Optional Time unit to aggregate usage observations into. Data retention is approximately 18 months. The effective number of data points returned depends on the time range and granularity selected. For example, requesting hourly granularity over 18 months could produce up to ~13,000 data points; use the limit parameter to cap results and be aware that responses may be truncated. enum: ["hour","day","week","month","quarter","year"]; default: "hour"
query.limit integer Optional Maximum number of data points to return. The actual number of results depends on the interaction between the time range (since/until) and time_delta granularity. Results are truncated to this limit without error if the time range produces more data points than the limit allows. default: 100; minimum: 1; maximum: 10000
query.filters string Optional Filter expressions to apply to the query. Format: field==value. Multiple filters can be combined.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get zone monetization eligibility — cloudflare.monetization-get-zone-eligibility

Run Get zone monetization eligibility with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/monetization_zone-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Check zone monetization eligibility — cloudflare.monetization-check-zone-eligibility

Run Check zone monetization eligibility with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/monetization_zone-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete all payment rules — cloudflare.monetization-delete-ruleset

Run Delete all payment rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/monetization_zone-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List payment rules — cloudflare.monetization-list-rules

Run List payment rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/monetization_zone-identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Deploy payment ruleset — cloudflare.monetization-deploy-ruleset

Run Deploy payment ruleset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/monetization_zone-identifier"
body — Required $ref: "#/definitions/monetization_monetization-ruleset-input"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  },
  "body": {
    "rules": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a payment rule — cloudflare.monetization-delete-rule

Run Delete a payment rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/monetization_zone-identifier"
path.rule_id — Required The unique ID of the payment rule. $ref: "#/definitions/monetization_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074",
    "rule_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a payment rule — cloudflare.monetization-get-rule

Run Get a payment rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/monetization_zone-identifier"
path.rule_id — Required The unique ID of the payment rule. $ref: "#/definitions/monetization_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074",
    "rule_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a payment rule — cloudflare.monetization-patch-rule

Run Update a payment rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/monetization_zone-identifier"
path.rule_id — Required The unique ID of the payment rule. $ref: "#/definitions/monetization_identifier"
body — Required $ref: "#/definitions/monetization_monetization-rule-patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074",
    "rule_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete zone trace rules — cloudflare.zone.observability.tracing.rules.delete

Run Delete zone trace rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Specify the zone ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

View zone trace rules — cloudflare.zone.observability.tracing.rules.get

Run View zone trace rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Specify the zone ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace zone trace rules — cloudflare.zone.observability.tracing.rules.update

Run Replace zone trace rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Specify the zone ID.
body object Required
body.rules array Required Trace rules in evaluation order. maxItems: 1000
body.rules[] object Optional additionalProperties: false
body.rules[].action string Required enum: ["set_trace_settings"]
body.rules[].action_parameters object Required additionalProperties: false
body.rules[].action_parameters.sampling_ratio number Required The ratio of requests sampled for tracing, from 0 to 1. minimum: 0; maximum: 1
body.rules[].description string Required maxLength: 1000
body.rules[].enabled boolean Required
body.rules[].expression string Required A Rules language expression that selects requests. minLength: 1; maxLength: 4096

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  },
  "body": {
    "rules": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Reset zone tracing settings — cloudflare.zone.observability.tracing.settings.delete

Run Reset zone tracing settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Specify the zone ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

View zone tracing settings — cloudflare.zone.observability.tracing.settings.get

Run View zone tracing settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required Specify the zone ID.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List origin cloud region mappings — cloudflare.origin-cloud-regions-v2-list

Run List origin cloud region mappings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Number of items per page. default: 20; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch delete origin cloud region mappings — cloudflare.origin-cloud-regions-v2-batch-delete

Run Batch delete origin cloud region mappings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body array Required maxItems: 100
body[] string Optional Origin IP address to delete.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Batch create or replace origin cloud region mappings — cloudflare.origin-cloud-regions-v2-batch-upsert

Run Batch create or replace origin cloud region mappings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body array Required maxItems: 100
body[] — Optional $ref: "#/definitions/cache-settings_origin_cloud_region_v2_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List supported cloud vendors and regions — cloudflare.origin-cloud-regions-v2-supported-regions

Run List supported cloud vendors and regions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an origin cloud region mapping — cloudflare.origin-cloud-regions-v2-delete

Run Delete an origin cloud region mapping with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
path.origin_ip string Required Origin IP address whose mapping should be deleted.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "origin_ip": "192.0.2.1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get an origin cloud region mapping — cloudflare.origin-cloud-regions-v2-get

Run Get an origin cloud region mapping with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
path.origin_ip string Required Origin IP address to look up. IPv4 and IPv6 are supported.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "origin_ip": "192.0.2.1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create or replace an origin cloud region mapping — cloudflare.origin-cloud-regions-v2-upsert

Run Create or replace an origin cloud region mapping with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
path.origin_ip string Required Origin IP address to create or replace.
body — Required $ref: "#/definitions/cache-settings_origin_cloud_region_v2_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "origin_ip": "192.0.2.1"
  },
  "body": {
    "origin_ip": "192.0.2.1",
    "vendor": "aws",
    "region": "us-east-1"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Certificates — cloudflare.zone-level-authenticated-origin-pulls-list-certificates

Run List Certificates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Upload Certificate — cloudflare.zone-level-authenticated-origin-pulls-upload-certificate

Run Upload Certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.certificate — Required $ref: "#/definitions/tls-certificates-and-hostnames_certificate-5"
body.private_key — Required $ref: "#/definitions/tls-certificates-and-hostnames_private_key-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "certificate": "-----BEGIN CERTIFICATE-----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\nYbjM2rxXiyLGxB4Bol7QTv4zHif7Zt89FReT/NBy4rzaskDJY5L6xmY=\n-----END CERTIFICATE-----\n",
    "private_key": "-----BEGIN RSA PRIVATE KEY-----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\nlv6XTQaMyf6n1yjzL+fzDrH3qXMxHMO/b13EePXpDMpY7HQpoLDi\n-----END RSA PRIVATE KEY-----\n"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Hostname Associations — cloudflare.per-hostname-authenticated-origin-pull-list-hostname-associations

Run List Hostname Associations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of associations per page. default: 50; minimum: 1; maximum: 1000
query.status string Optional Filter associations by status. Use comma-separated values to filter by multiple statuses, or "all" to include every status. Defaults to "active" if not provided. enum: ["active","pending_deployment","pending_deletion","deleted","deployment_timed_out","deletion_timed_out","all"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Enable or Disable a Hostname for Client Authentication — cloudflare.per-hostname-authenticated-origin-pull-enable-or-disable-a-9a86acfd38

Run Enable or Disable a Hostname for Client Authentication with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.config — Required
body.config — Required allOf[1]; $ref: "#/definitions/tls-certificates-and-hostnames_config"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "config": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Certificates — cloudflare.per-hostname-authenticated-origin-pull-list-certificates

Run List Certificates with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Upload a Hostname Client Certificate — cloudflare.per-hostname-authenticated-origin-pull-upload-a-hostname-c-0fd8e52701

Run Upload a Hostname Client Certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.certificate — Required $ref: "#/definitions/tls-certificates-and-hostnames_certificate-6"
body.private_key — Required $ref: "#/definitions/tls-certificates-and-hostnames_private_key-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "certificate": "-----BEGIN CERTIFICATE-----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\nYbjM2rxXiyLGxB4Bol7QTv4zHif7Zt89FReT/NBy4rzaskDJY5L6xmY=\n-----END CERTIFICATE-----\n",
    "private_key": "-----BEGIN RSA PRIVATE KEY-----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\nlv6XTQaMyf6n1yjzL+fzDrH3qXMxHMO/b13EePXpDMpY7HQpoLDi\n-----END RSA PRIVATE KEY-----\n"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Hostname Client Certificate — cloudflare.per-hostname-authenticated-origin-pull-delete-hostname-cli-22f3b7c122

Run Delete Hostname Client Certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_hostname_aop_certificate_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Hostname Client Certificate — cloudflare.per-hostname-authenticated-origin-pull-get-the-hostname-cl-9a143608ca

Run Get the Hostname Client Certificate with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_hostname_aop_certificate_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the Hostname Status for Client Authentication — cloudflare.per-hostname-authenticated-origin-pull-get-the-hostname-st-5bc83da3fe

Run Get the Hostname Status for Client Authentication with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.hostname — Required $ref: "#/definitions/tls-certificates-and-hostnames_hostname-2"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "hostname": "app.example.com",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Enablement Setting for Zone — cloudflare.zone-level-authenticated-origin-pulls-get-enablement-setting-for-zone

Run Get Enablement Setting for Zone with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set Enablement for Zone — cloudflare.zone-level-authenticated-origin-pulls-set-enablement-for-zone

Run Set Enablement for Zone with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.enabled — Required $ref: "#/definitions/tls-certificates-and-hostnames_enabled-4"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Certificate — cloudflare.zone-level-authenticated-origin-pulls-delete-certificate

Run Delete Certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_zone_aop_certificate_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Certificate Details — cloudflare.zone-level-authenticated-origin-pulls-get-certificate-details

Run Get Certificate Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_zone_aop_certificate_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get client-side security settings — cloudflare.page-shield-get-settings

Run Get client-side security settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update client-side security settings — cloudflare.page-shield-update-settings

Run Update client-side security settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"
body object Required
body.enabled — Optional $ref: "#/definitions/client-side-security_enabled"
body.use_cloudflare_reporting_endpoint — Optional $ref: "#/definitions/client-side-security_use_cloudflare_reporting_endpoint"
body.use_connection_url_path — Optional $ref: "#/definitions/client-side-security_use_connection_url_path"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List detected connections — cloudflare.page-shield-list-connections

Run List detected connections with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"
query object Optional additionalProperties: false
query.exclude_urls string Optional Excludes connections whose URL contains one of the URL-encoded URLs separated by commas.
query.urls string Optional Includes connections whose URL contain one or more URL-encoded URLs separated by commas.
query.hosts string Optional Includes connections that match one or more URL-encoded hostnames separated by commas. Wildcards are supported at the start and end of each hostname to support starts with, ends with and contains. If no wildcards are used, results will be filtered by exact match
query.page string Optional The current page number of the paginated results. We additionally support a special value "all". When "all" is used, the API will return all the connections with the applied filters in a single page. This feature is best-effort and it may only work for zones with a low number of connections
query.per_page number Optional The number of results per page. minimum: 1; maximum: 100
query.order_by string Optional The field used to sort returned connections. enum: ["first_seen_at","last_seen_at"]
query.direction string Optional The direction used to sort returned connections. enum: ["asc","desc"]
query.prioritize_malicious boolean Optional When true, malicious connections appear first in the returned connections.
query.exclude_cdn_cgi boolean Optional When true, excludes connections seen in a /cdn-cgi path from the returned connections. The default value is true.
query.status string Optional Filters the returned connections using a comma-separated list of connection statuses. Accepted values: active, infrequent, and inactive. The default value is active.
query.page_url string Optional Includes connections that match one or more page URLs (separated by commas) where they were last seen Wildcards are supported at the start and end of each page URL to support starts with, ends with and contains. If no wildcards are used, results will be filtered by exact match
query.export string Optional Export the list of connections as a file, limited to 50000 entries. enum: ["csv"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a detected connection — cloudflare.page-shield-get-connection

Run Get a detected connection with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"
path.connection_id — Required $ref: "#/definitions/client-side-security_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "connection_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List detected cookies — cloudflare.page-shield-list-cookies

Run List detected cookies with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"
query object Optional additionalProperties: false
query.hosts string Optional Includes cookies that match one or more URL-encoded hostnames separated by commas. Wildcards are supported at the start and end of each hostname to support starts with, ends with and contains. If no wildcards are used, results will be filtered by exact match
query.page string Optional The current page number of the paginated results. We additionally support a special value "all". When "all" is used, the API will return all the cookies with the applied filters in a single page. This feature is best-effort and it may only work for zones with a low number of cookies
query.per_page number Optional The number of results per page. minimum: 1; maximum: 100
query.order_by string Optional The field used to sort returned cookies. enum: ["first_seen_at","last_seen_at"]
query.direction string Optional The direction used to sort returned cookies.' enum: ["asc","desc"]
query.page_url string Optional Includes connections that match one or more page URLs (separated by commas) where they were last seen Wildcards are supported at the start and end of each page URL to support starts with, ends with and contains. If no wildcards are used, results will be filtered by exact match
query.export string Optional Export the list of cookies as a file, limited to 50000 entries. enum: ["csv"]
query.name string Optional Filters the returned cookies that match the specified name. Wildcards are supported at the start and end to support starts with, ends with and contains. e.g. session* maxLength: 1024
query.secure boolean Optional Filters the returned cookies that are set with Secure
query.http_only boolean Optional Filters the returned cookies that are set with HttpOnly
query.same_site string Optional Filters the returned cookies that match the specified same_site attribute enum: ["lax","strict","none"]
query.type string Optional Filters the returned cookies that match the specified type attribute enum: ["first_party","unknown"]
query.path string Optional Filters the returned cookies that match the specified path attribute maxLength: 1024
query.domain string Optional Filters the returned cookies that match the specified domain attribute maxLength: 1024

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a detected cookie — cloudflare.page-shield-get-cookie

Run Get a detected cookie with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"
path.cookie_id — Required $ref: "#/definitions/client-side-security_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "cookie_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List content security rules — cloudflare.page-shield-list-policies

Run List content security rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a content security rule — cloudflare.page-shield-create-policy

Run Create a content security rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"
body — Required $ref: "#/definitions/client-side-security_policy"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "description": "Checkout page CSP policy",
    "action": "allow",
    "expression": "ends_with(http.request.uri.path, \"/checkout\")",
    "enabled": true,
    "value": "script-src 'none';"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a content security rule — cloudflare.page-shield-delete-policy

Run Delete a content security rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"
path.policy_id — Required $ref: "#/definitions/client-side-security_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a content security rule — cloudflare.page-shield-get-policy

Run Get a content security rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"
path.policy_id — Required $ref: "#/definitions/client-side-security_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a content security rule — cloudflare.page-shield-update-policy

Run Update a content security rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"
path.policy_id — Required $ref: "#/definitions/client-side-security_id"
body object Required
body.action — Optional $ref: "#/definitions/client-side-security_policy-action"
body.description — Optional $ref: "#/definitions/client-side-security_policy-description"
body.enabled — Optional $ref: "#/definitions/client-side-security_policy-enabled"
body.expression — Optional $ref: "#/definitions/client-side-security_policy-expression"
body.value — Optional $ref: "#/definitions/client-side-security_policy-value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "policy_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List detected scripts — cloudflare.page-shield-list-scripts

Run List detected scripts with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"
query object Optional additionalProperties: false
query.exclude_urls string Optional Excludes scripts whose URL contains one of the URL-encoded URLs separated by commas.
query.urls string Optional Includes scripts whose URL contain one or more URL-encoded URLs separated by commas.
query.hosts string Optional Includes scripts that match one or more URL-encoded hostnames separated by commas. Wildcards are supported at the start and end of each hostname to support starts with, ends with and contains. If no wildcards are used, results will be filtered by exact match
query.page string Optional The current page number of the paginated results. We additionally support a special value "all". When "all" is used, the API will return all the scripts with the applied filters in a single page. This feature is best-effort and it may only work for zones with a low number of scripts
query.per_page number Optional The number of results per page. minimum: 1; maximum: 100
query.order_by string Optional The field used to sort returned scripts. enum: ["first_seen_at","last_seen_at"]
query.direction string Optional The direction used to sort returned scripts. enum: ["asc","desc"]
query.prioritize_malicious boolean Optional When true, malicious scripts appear first in the returned scripts.
query.exclude_cdn_cgi boolean Optional When true, excludes scripts seen in a /cdn-cgi path from the returned scripts. The default value is true. default: true
query.exclude_duplicates boolean Optional When true, excludes duplicate scripts. We consider a script duplicate of another if their javascript content matches and they share the same url host and zone hostname. In such case, we return the most recent script for the URL host and zone hostname combination. default: true
query.status string Optional Filters the returned scripts using a comma-separated list of scripts statuses. Accepted values: active, infrequent, and inactive. The default value is active.
query.page_url string Optional Includes scripts that match one or more page URLs (separated by commas) where they were last seen Wildcards are supported at the start and end of each page URL to support starts with, ends with and contains. If no wildcards are used, results will be filtered by exact match
query.export string Optional Export the list of scripts as a file, limited to 50000 entries. enum: ["csv"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a detected script — cloudflare.page-shield-get-script

Run Get a detected script with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/client-side-security_id"
path.script_id — Required $ref: "#/definitions/client-side-security_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "script_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Page Rules — cloudflare.page-rules-list-page-rules

Run List Page Rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zones_identifier-2"
query object Optional additionalProperties: false
query.order string Optional The field used to sort returned Page Rules. enum: ["status","priority"]; default: "priority"
query.direction string Optional The direction used to sort returned Page Rules. enum: ["asc","desc"]; default: "desc"
query.match string Optional When set to all, all the search requirements must match. When set to any, only one of the search requirements has to match. enum: ["any","all"]; default: "all"
query.status string Optional The status of the Page Rule. enum: ["active","disabled"]; default: "disabled"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a Page Rule — cloudflare.page-rules-create-a-page-rule

Run Create a Page Rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zones_identifier-2"
body object Required
body.actions — Required $ref: "#/definitions/zones_actions"
body.priority — Optional $ref: "#/definitions/zones_priority"
body.status — Optional $ref: "#/definitions/zones_status"
body.targets — Required $ref: "#/definitions/zones_targets"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "targets": [
      {
        "constraint": {
          "operator": "matches",
          "value": "*example.com/images/*"
        },
        "target": "url"
      }
    ],
    "actions": [
      {
        "id": "browser_check",
        "value": "on"
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a Page Rule — cloudflare.page-rules-delete-a-page-rule

Run Delete a Page Rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pagerule_id — Required $ref: "#/definitions/zones_identifier-2"
path.zone_id — Required $ref: "#/definitions/zones_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pagerule_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a Page Rule — cloudflare.page-rules-get-a-page-rule

Run Get a Page Rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pagerule_id — Required $ref: "#/definitions/zones_identifier-2"
path.zone_id — Required $ref: "#/definitions/zones_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pagerule_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit a Page Rule — cloudflare.page-rules-edit-a-page-rule

Run Edit a Page Rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pagerule_id — Required $ref: "#/definitions/zones_identifier-2"
path.zone_id — Required $ref: "#/definitions/zones_identifier-2"
body object Required
body.actions — Optional $ref: "#/definitions/zones_actions"
body.priority — Optional $ref: "#/definitions/zones_priority"
body.status — Optional $ref: "#/definitions/zones_status"
body.targets — Optional $ref: "#/definitions/zones_targets"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pagerule_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a Page Rule — cloudflare.page-rules-update-a-page-rule

Run Update a Page Rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.pagerule_id — Required $ref: "#/definitions/zones_identifier-2"
path.zone_id — Required $ref: "#/definitions/zones_identifier-2"
body object Required
body.actions — Required $ref: "#/definitions/zones_actions"
body.priority — Optional $ref: "#/definitions/zones_priority"
body.status — Optional $ref: "#/definitions/zones_status"
body.targets — Required $ref: "#/definitions/zones_targets"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "pagerule_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "targets": [
      {
        "constraint": {
          "operator": "matches",
          "value": "*example.com/images/*"
        },
        "target": "url"
      }
    ],
    "actions": [
      {
        "id": "browser_check",
        "value": "on"
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get pay-per-crawl zone eligibility — cloudflare.pay-per-crawl.getzonecanbeenabled

Run Get pay-per-crawl zone eligibility with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required zone id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get the pay-per-crawl config — cloudflare.pay-per-crawl.getconfig

Run Get the pay-per-crawl config with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required zone id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Changes pay-per-crawl config for a zone — cloudflare.pay-per-crawl.patchconfig

Run Changes pay-per-crawl config for a zone with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required zone id
body — Required $ref: "#/definitions/pay-per-crawl_DaricConfig"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get pay-per-use zone eligibility — cloudflare.pay-per-crawl.getppuzonecanbeenabled

Run Get pay-per-use zone eligibility with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required zone id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get pay-per-use zone configuration — cloudflare.pay-per-crawl.getppuzoneconfiguration

Run Get pay-per-use zone configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required zone id

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update pay-per-use zone configuration — cloudflare.pay-per-crawl.patchppuzoneconfiguration

Run Update pay-per-use zone configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required zone id
body — Required $ref: "#/definitions/pay-per-crawl_PPUZoneConfigurationUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List pay-per-use operators — cloudflare.pay-per-crawl.listppuoperators

Run List pay-per-use operators with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required zone id
query object Optional additionalProperties: false
query.page integer Optional Page number. default: 1; minimum: 1
query.per_page integer Optional Results per page. default: 100; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get pay-per-use usage statistics for a zone — cloudflare.pay-per-crawl.getppuzoneusagestats

Run Get pay-per-use usage statistics for a zone with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id string Required zone id
query object Required additionalProperties: false
query.since string Required Requested inclusive beginning of the statistics range as an RFC3339 timestamp. Rounded down to the selected UTC interval. format: "date-time"
query.until string Required Requested exclusive end of the statistics range as an RFC3339 timestamp. Rounded down to the selected UTC interval. The requested duration from since cannot exceed 31 days. format: "date-time"
query.page integer Optional Page number. default: 1; minimum: 1
query.per_page integer Optional Results per page. default: 100; minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "example"
  },
  "query": {
    "since": "2026-01-01T00:00:00Z",
    "until": "2026-01-01T00:00:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zone Precursor Config — cloudflare.precursor-for-a-zone-get-config

Run Get Zone Precursor Config with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
headers object Required additionalProperties: false
headers.Cloudflare-Version string Required Selects the split Precursor API schema. enum: ["1.0"]; default: "1.0"
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/precursor_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "headers": {
    "Cloudflare-Version": "1.0"
  },
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Zone Precursor Config — cloudflare.precursor-for-a-zone-update-config

Run Update Zone Precursor Config with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
headers object Required additionalProperties: false
headers.Cloudflare-Version string Required Selects the split Precursor API schema. enum: ["1.0"]; default: "1.0"
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/precursor_identifier"
body — Required $ref: "#/definitions/precursor_precursor_config"

Full JSON Schema

Full JSON Schema

Example input

{
  "headers": {
    "Cloudflare-Version": "1.0"
  },
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "mode": "arm",
    "rules": [
      {
        "description": "Show an interstitial on the shop page",
        "enabled": true,
        "expression": "http.request.uri.path eq \"/shop\"",
        "show_interstitial": true
      }
    ],
    "show_interstitial": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Purge Cached Content — cloudflare.zone-purge

Run Purge Cached Content with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required The zone ID. $ref: "#/definitions/cache-purge_identifier"
body — Required
body — Required anyOf[1]; $ref: "#/definitions/cache-purge_FlexPurgeByTags"
body — Required anyOf[2]; $ref: "#/definitions/cache-purge_FlexPurgeByHostnames"
body — Required anyOf[3]; $ref: "#/definitions/cache-purge_FlexPurgeByPrefixes"
body — Required anyOf[4]; $ref: "#/definitions/cache-purge_Everything"
body — Required anyOf[5]; $ref: "#/definitions/cache-purge_SingleFile"
body — Required anyOf[6]; $ref: "#/definitions/cache-purge_SingleFileWithUrlAndHeaders"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "tags": [
      "product-1234",
      "homepage"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List zone rulesets — cloudflare.listzonerulesets

Run List zone rulesets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"
query object Optional additionalProperties: false
query.cursor — Optional $ref: "#/definitions/rulesets_Cursor"
query.per_page — Optional $ref: "#/definitions/rulesets_PerPage"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a zone ruleset — cloudflare.createzoneruleset

Run Create a zone ruleset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false
body — Required
body — Required allOf[1]; $ref: "#/definitions/rulesets_Ruleset"
body object Required allOf[2]
body.kind — Required allOf[2]; $ref: "#/definitions/rulesets_RulesetKind"
body.phase — Required allOf[2]; $ref: "#/definitions/rulesets_RulesetPhase"
body.rules — Optional allOf[2]; $ref: "#/definitions/rulesets_RequestRules"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  },
  "body": {
    "name": "example",
    "kind": "root",
    "phase": "http_request_firewall_custom",
    "id": "2f2feab2026849078ba485f918791bdc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a zone entry point ruleset — cloudflare.getzoneentrypointruleset

Run Get a zone entry point ruleset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_phase — Required $ref: "#/definitions/rulesets_RulesetPhase"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_phase": "http_request_firewall_custom",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a zone entry point ruleset — cloudflare.updatezoneentrypointruleset

Run Update a zone entry point ruleset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_phase — Required $ref: "#/definitions/rulesets_RulesetPhase"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false
body — Required
body — Required allOf[1]; $ref: "#/definitions/rulesets_Ruleset"
body object Required allOf[2]
body.rules — Optional allOf[2]; $ref: "#/definitions/rulesets_RequestRules"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_phase": "http_request_firewall_custom",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  },
  "body": {
    "id": "2f2feab2026849078ba485f918791bdc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List a zone entry point ruleset's versions — cloudflare.listzoneentrypointrulesetversions

Run List a zone entry point ruleset's versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_phase — Required $ref: "#/definitions/rulesets_RulesetPhase"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_phase": "http_request_firewall_custom",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a zone entry point ruleset version — cloudflare.getzoneentrypointrulesetversion

Run Get a zone entry point ruleset version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_version — Required $ref: "#/definitions/rulesets_RulesetVersion"
path.ruleset_phase — Required $ref: "#/definitions/rulesets_RulesetPhase"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_version": "1",
    "ruleset_phase": "http_request_firewall_custom",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a zone ruleset — cloudflare.deletezoneruleset

Run Delete a zone ruleset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a zone ruleset — cloudflare.getzoneruleset

Run Get a zone ruleset with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a zone ruleset — cloudflare.updatezoneruleset

Run Update a zone ruleset with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false
body — Required
body — Required allOf[1]; $ref: "#/definitions/rulesets_Ruleset"
body object Required allOf[2]
body.kind — Optional allOf[2]; $ref: "#/definitions/rulesets_RulesetKind"
body.phase — Optional allOf[2]; $ref: "#/definitions/rulesets_RulesetPhase"
body.rules — Optional allOf[2]; $ref: "#/definitions/rulesets_RequestRules"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  },
  "body": {
    "id": "2f2feab2026849078ba485f918791bdc"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a zone ruleset rule — cloudflare.deletezonerulesetrule

Run Delete a zone ruleset rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/rulesets_RuleId"
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "3a03d665bac047339bb530ecb439a90d",
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List a zone ruleset's versions — cloudflare.listzonerulesetversions

Run List a zone ruleset's versions with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a zone ruleset version — cloudflare.deletezonerulesetversion

Run Delete a zone ruleset version with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_version — Required $ref: "#/definitions/rulesets_RulesetVersion"
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"
query object Optional additionalProperties: false
query.dry_run boolean Optional Validates the request without persisting changes when set to true. Responses that normally return 200 return result: null; endpoints that normally return 204 continue to return 204. default: false

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_version": "1",
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a zone ruleset version — cloudflare.getzonerulesetversion

Run Get a zone ruleset version with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.ruleset_version — Required $ref: "#/definitions/rulesets_RulesetVersion"
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "ruleset_version": "1",
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List a zone ruleset version's rules by tag — cloudflare.listzonerulesetversionrulesbytag

Run List a zone ruleset version's rules by tag with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_tag — Required $ref: "#/definitions/rulesets_RuleCategory"
path.ruleset_version — Required $ref: "#/definitions/rulesets_RulesetVersion"
path.ruleset_id — Required $ref: "#/definitions/rulesets_RulesetId"
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_tag": "directory-traversal",
    "ruleset_version": "1",
    "ruleset_id": "2f2feab2026849078ba485f918791bdc",
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List all uploaded schemas — cloudflare.schema-validation-list-schemas-paginated

Run List all uploaded schemas with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.omit_source boolean Optional Omit the source-files of schemas and only retrieve their meta-data. default: false
query.validation_enabled boolean Optional Filter for enabled schemas

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Upload a schema — cloudflare.schema-validation-create-schema

Run Upload a schema with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body object Required
body.kind string Required The kind of the schema enum: ["openapi_v3"]
body.name string Required A human-readable name for the schema
body.source string Required The raw schema, e.g., the OpenAPI schema, either as JSON or YAML
body.validation_enabled boolean Required An indicator if this schema is enabled

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "petstore schema",
    "kind": "openapi_v3",
    "source": "<schema file contents>",
    "validation_enabled": false
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List hosts covered by uploaded schemas — cloudflare.schema-validation-list-schema-hosts

Run List hosts covered by uploaded schemas with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get global schema validation settings — cloudflare.schema-validation-get-settings

Run Get global schema validation settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit global schema validation settings — cloudflare.schema-validation-edit-settings

Run Edit global schema validation settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body — Required $ref: "#/definitions/api-shield_global_setting_change_base"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List per-operation schema validation settings — cloudflare.schema-validation-list-per-operation-settings

Run List per-operation schema validation settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Bulk edit per-operation schema validation settings — cloudflare.schema-validation-bulk-edit-per-operation-settings

Run Bulk edit per-operation schema validation settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body object Required additionalProperties: {"description":"Operation ID to mitigation action mappings","properties":{"mitigation_action":{"description":"Mitigation actions are as follows:\n* `log` - log request when request does not conform to schema * `block` - deny access to the site when request does not conform to schema * `none` - skip running schema validation * null - clears any existing per-operation setting\n","type":["string","null"],"enum":["none","log","block",null],"examples":["block"]}},"type":"object"}

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "3818d821-5901-4147-a474-f5f5aec1d54e": {
      "mitigation_action": "log"
    },
    "b17c8043-99a0-4202-b7d9-8f7cdbee02cd": {
      "mitigation_action": "block"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete per-operation schema validation setting — cloudflare.schema-validation-delete-per-operation-setting

Run Delete per-operation schema validation setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.operation_id — Required Identifier for the operation $ref: "#/definitions/api-shield_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "operation_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get per-operation schema validation setting — cloudflare.schema-validation-get-per-operation-setting

Run Get per-operation schema validation setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.operation_id — Required Identifier for the operation $ref: "#/definitions/api-shield_uuid"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "operation_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Force AXFR — cloudflare.secondary-dns---secondary-zone--force-axfr

Run Force AXFR with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Secondary Zone Configuration — cloudflare.secondary-dns---secondary-zone--delete-secondary-zone-configuration

Run Delete Secondary Zone Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Secondary Zone Configuration Details — cloudflare.secondary-dns---secondary-zone--secondary-zone-configuration-details

Run Secondary Zone Configuration Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Secondary Zone Configuration — cloudflare.secondary-dns---secondary-zone--create-secondary-zone-configuration

Run Create Secondary Zone Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"
body — Required $ref: "#/definitions/secondary-dns_dns-secondary-secondary-zone"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  },
  "body": {
    "id": "269d8f4853475ca241c4e730be286b20",
    "name": "www.example.com.",
    "peers": [
      "23ff594956f20c2a721606e94745a8aa",
      "00920f38ce07c2e2f4df50b1f61d4194"
    ],
    "auto_refresh_seconds": 86400
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Secondary Zone Configuration — cloudflare.secondary-dns---secondary-zone--update-secondary-zone-configuration

Run Update Secondary Zone Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"
body — Required $ref: "#/definitions/secondary-dns_dns-secondary-secondary-zone"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  },
  "body": {
    "id": "269d8f4853475ca241c4e730be286b20",
    "name": "www.example.com.",
    "peers": [
      "23ff594956f20c2a721606e94745a8aa",
      "00920f38ce07c2e2f4df50b1f61d4194"
    ],
    "auto_refresh_seconds": 86400
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Primary Zone Configuration — cloudflare.secondary-dns---primary-zone--delete-primary-zone-configuration

Run Delete Primary Zone Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Primary Zone Configuration Details — cloudflare.secondary-dns---primary-zone--primary-zone-configuration-details

Run Primary Zone Configuration Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Primary Zone Configuration — cloudflare.secondary-dns---primary-zone--create-primary-zone-configuration

Run Create Primary Zone Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"
body — Required $ref: "#/definitions/secondary-dns_single_request_outgoing"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  },
  "body": {
    "id": "269d8f4853475ca241c4e730be286b20",
    "name": "www.example.com.",
    "peers": [
      "23ff594956f20c2a721606e94745a8aa",
      "00920f38ce07c2e2f4df50b1f61d4194"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Primary Zone Configuration — cloudflare.secondary-dns---primary-zone--update-primary-zone-configuration

Run Update Primary Zone Configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"
body — Required $ref: "#/definitions/secondary-dns_single_request_outgoing"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  },
  "body": {
    "id": "269d8f4853475ca241c4e730be286b20",
    "name": "www.example.com.",
    "peers": [
      "23ff594956f20c2a721606e94745a8aa",
      "00920f38ce07c2e2f4df50b1f61d4194"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Disable Outgoing Zone Transfers — cloudflare.secondary-dns---primary-zone--disable-outgoing-zone-transfers

Run Disable Outgoing Zone Transfers with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Enable Outgoing Zone Transfers — cloudflare.secondary-dns---primary-zone--enable-outgoing-zone-transfers

Run Enable Outgoing Zone Transfers with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Force DNS NOTIFY — cloudflare.secondary-dns---primary-zone--force-dns-notify

Run Force DNS NOTIFY with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Outgoing Zone Transfer Status — cloudflare.secondary-dns---primary-zone--get-outgoing-zone-transfer-status

Run Get Outgoing Zone Transfer Status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/secondary-dns_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "269d8f4853475ca241c4e730be286b20"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Zone Security Center Insights — cloudflare.get-zone-security-center-insights

Run Retrieves Zone Security Center Insights with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
query object Optional additionalProperties: false
query.dismissed — Optional $ref: "#/definitions/security-center_dismissed"
query.issue_class — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type — Optional $ref: "#/definitions/security-center_issueTypes"
query.product — Optional $ref: "#/definitions/security-center_products"
query.source — Optional $ref: "#/definitions/security-center_sources"
query.severity — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject — Optional $ref: "#/definitions/security-center_subjects"
query.issue_class~neq — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type~neq — Optional $ref: "#/definitions/security-center_issueTypes"
query.product~neq — Optional $ref: "#/definitions/security-center_products"
query.severity~neq — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject~neq — Optional $ref: "#/definitions/security-center_subjects"
query.page — Optional default: 1
query.page — Optional allOf[1]; $ref: "#/definitions/security-center_page"
query.per_page — Optional default: 25
query.per_page — Optional allOf[1]; $ref: "#/definitions/security-center_perPage"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Zone Audit Log — cloudflare.get-zone-security-center-audit-log

Run Retrieves Zone Audit Log with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
query object Optional additionalProperties: false
query.per_page integer Optional Number of results per page. default: 25; minimum: 1; maximum: 1000
query.cursor string Optional Opaque cursor for pagination. Use the cursor value from result_info of the previous response.
query.field_changed string Optional Filter by the field that was changed. enum: ["status","user_classification"]
query.changed_by string Optional Filter by the actor that made the change.
query.since string Optional Filter entries changed at or after this timestamp (RFC 3339). format: "date-time"
query.before string Optional Filter entries changed before this timestamp (RFC 3339). format: "date-time"
query.order string Optional Sort order for results. Use 'asc' for oldest first or 'desc' for newest first. enum: ["asc","desc"]; default: "desc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Zone Security Center Insight Counts by Class — cloudflare.get-zone-security-center-insight-counts-by-class

Run Retrieves Zone Security Center Insight Counts by Class with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
query object Optional additionalProperties: false
query.dismissed — Optional $ref: "#/definitions/security-center_dismissed"
query.issue_class — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type — Optional $ref: "#/definitions/security-center_issueTypes"
query.product — Optional $ref: "#/definitions/security-center_products"
query.source — Optional $ref: "#/definitions/security-center_sources"
query.severity — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject — Optional $ref: "#/definitions/security-center_subjects"
query.issue_class~neq — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type~neq — Optional $ref: "#/definitions/security-center_issueTypes"
query.product~neq — Optional $ref: "#/definitions/security-center_products"
query.severity~neq — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject~neq — Optional $ref: "#/definitions/security-center_subjects"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves a Partner Zone Security Center Insight Count — cloudflare.get-zone-security-center-partner-insight-count

Run Retrieves a Partner Zone Security Center Insight Count with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
query object Required additionalProperties: false
query.source string Required enum: ["riskrecon"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "source": "riskrecon"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Recent Zone Scans — cloudflare.get-security-center-zone-scans

Run Get Recent Zone Scans with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start On-Demand Zone Scan — cloudflare.start-security-center-zone-scan

Run Start On-Demand Zone Scan with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
body — Required $ref: "#/definitions/security-center_newScanRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "issue_type": "compliance_violation"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Zone Security Center Insight Counts by Severity — cloudflare.get-zone-security-center-insight-counts-by-severity

Run Retrieves Zone Security Center Insight Counts by Severity with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
query object Optional additionalProperties: false
query.dismissed — Optional $ref: "#/definitions/security-center_dismissed"
query.issue_class — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type — Optional $ref: "#/definitions/security-center_issueTypes"
query.product — Optional $ref: "#/definitions/security-center_products"
query.source — Optional $ref: "#/definitions/security-center_sources"
query.severity — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject — Optional $ref: "#/definitions/security-center_subjects"
query.issue_class~neq — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type~neq — Optional $ref: "#/definitions/security-center_issueTypes"
query.product~neq — Optional $ref: "#/definitions/security-center_products"
query.severity~neq — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject~neq — Optional $ref: "#/definitions/security-center_subjects"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Zone Security Center Insight Counts by Type — cloudflare.get-zone-security-center-insight-counts-by-type

Run Retrieves Zone Security Center Insight Counts by Type with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
query object Optional additionalProperties: false
query.dismissed — Optional $ref: "#/definitions/security-center_dismissed"
query.issue_class — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type — Optional $ref: "#/definitions/security-center_issueTypes"
query.product — Optional $ref: "#/definitions/security-center_products"
query.source — Optional $ref: "#/definitions/security-center_sources"
query.severity — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject — Optional $ref: "#/definitions/security-center_subjects"
query.issue_class~neq — Optional $ref: "#/definitions/security-center_issueClasses"
query.issue_type~neq — Optional $ref: "#/definitions/security-center_issueTypes"
query.product~neq — Optional $ref: "#/definitions/security-center_products"
query.severity~neq — Optional $ref: "#/definitions/security-center_severityQueryParam"
query.subject~neq — Optional $ref: "#/definitions/security-center_subjects"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves Zone Issue Audit Log — cloudflare.get-zone-security-center-issue-audit-log

Run Retrieves Zone Issue Audit Log with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
path.issue_id string Required
query object Optional additionalProperties: false
query.per_page integer Optional Number of results per page. default: 25; minimum: 1; maximum: 1000
query.cursor string Optional Opaque cursor for pagination. Use the cursor value from result_info of the previous response.
query.field_changed string Optional Filter by the field that was changed. enum: ["status","user_classification"]
query.changed_by string Optional Filter by the actor that made the change.
query.since string Optional Filter entries changed at or after this timestamp (RFC 3339). format: "date-time"
query.before string Optional Filter entries changed before this timestamp (RFC 3339). format: "date-time"
query.order string Optional Sort order for results. Use 'asc' for oldest first or 'desc' for newest first. enum: ["asc","desc"]; default: "desc"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "issue_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Updates Zone Security Center Insight Classification — cloudflare.update-zone-security-center-insight-classification

Run Updates Zone Security Center Insight Classification with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
path.issue_id string Required
body — Required $ref: "#/definitions/security-center_userClassificationUpdate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "issue_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Archives Zone Security Center Insight — cloudflare.archive-zone-security-center-insight

Run Archives Zone Security Center Insight with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
path.issue_id string Required
body object Required
body.dismiss boolean Optional default: true

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "issue_id": "example"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Lists Partner-Discovered Shadow Hosts for a Zone — cloudflare.get-zone-security-center-partner-shadow-hosts

Run Lists Partner-Discovered Shadow Hosts for a Zone with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
path.partner string Required The partner integration identifier. enum: ["riskrecon"]
query object Optional additionalProperties: false
query.cursor string Optional Opaque cursor from the previous response's result_info.cursor. Omit for the first page.
query.per_page integer Optional Number of premium partner asset results per page. Values other than 1 must be a multiple of 5. default: 25; minimum: 1; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "partner": "riskrecon"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Deletes security.txt — cloudflare.delete-security-txt

Run Deletes security.txt with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieves security.txt — cloudflare.get-security-txt

Run Retrieves security.txt with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Updates security.txt — cloudflare.update-security-txt

Run Updates security.txt with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/security-center_identifier"
body — Required $ref: "#/definitions/security-center_securityTxt"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete aegis setting — cloudflare.zone-cache-settings-delete-aegis-setting

Run Delete aegis setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get aegis setting — cloudflare.zone-cache-settings-get-aegis-setting

Run Get aegis setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change aegis setting — cloudflare.zone-cache-settings-change-aegis-setting

Run Change aegis setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body object Required
body.value — Required $ref: "#/definitions/cache-settings_aegis_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Auto-Origin TLS KEX enrollment status for the given zone — cloudflare.ssl-detector-auto-origin-tls-kex-get-enrollment

Run Get Auto-Origin TLS KEX enrollment status for the given zone with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Auto-Origin TLS KEX enrollment status for the given zone — cloudflare.ssl-detector-auto-origin-tls-kex-patch-enrollment

Run Patch Auto-Origin TLS KEX enrollment status for the given zone with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache_identifier"
body — Required $ref: "#/definitions/cache_auto_origin_tls_kex_patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "enabled": true
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Automatic Platform Optimization setting — cloudflare.zone-settings-get-automatic-platform-optimization-setting

Run Get Automatic Platform Optimization setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Automatic Platform Optimization setting — cloudflare.zone-settings-change-automatic-platform-optimization-setting

Run Change Automatic Platform Optimization setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"
body object Required
body.value — Required $ref: "#/definitions/speed_automatic_platform_optimization_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "off"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Binary AST setting — cloudflare.zone-settings-get-binary-ast-setting

Run Get Binary AST setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Binary AST setting — cloudflare.zone-settings-change-binary-ast-setting

Run Change Binary AST setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"
body object Required
body.value — Required $ref: "#/definitions/speed_binary_ast_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "off"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get CSAM Scanner setting — cloudflare.csam-scanner-get-setting

Run Get CSAM Scanner setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Identifier for the zone. $ref: "#/definitions/csam-config-service_zone_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update CSAM Scanner setting — cloudflare.csam-scanner-update-setting

Run Update CSAM Scanner setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Identifier for the zone. $ref: "#/definitions/csam-config-service_zone_identifier"
body — Required $ref: "#/definitions/csam-config-service_csam_scanner_third_party_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Cloudflare Fonts setting — cloudflare.zone-settings-get-fonts-setting

Run Get Cloudflare Fonts setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Cloudflare Fonts setting — cloudflare.zone-settings-change-fonts-setting

Run Change Cloudflare Fonts setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"
body object Required
body.value — Required $ref: "#/definitions/speed_cloudflare_fonts_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "off"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Google Tag Gateway configuration — cloudflare.zone-settings-get-google-tag-gateway-config

Run Get Google Tag Gateway configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/google-tag-gateway_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Google Tag Gateway configuration — cloudflare.zone-settings-change-google-tag-gateway-config

Run Update Google Tag Gateway configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/google-tag-gateway_identifier"
body — Required $ref: "#/definitions/google-tag-gateway_google-tag-gateway-config"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "enabled": true,
    "endpoint": "/metrics",
    "hideOriginalIp": true,
    "measurementId": "GTM-P2F3N47Q"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get HTTP/2 Prioritization setting — cloudflare.zone-settings-get-h2-prioritization-setting

Run Get HTTP/2 Prioritization setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change HTTP/2 Prioritization setting — cloudflare.zone-settings-change-h2-prioritization-setting

Run Change HTTP/2 Prioritization setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"
body object Required
body.value — Required $ref: "#/definitions/speed_h2_prioritization_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "off"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Image Transformations setting — cloudflare.zone-settings-get-image-resizing-setting

Run Get Image Transformations setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Image Transformations setting — cloudflare.zone-settings-change-image-resizing-setting

Run Change Image Transformations setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"
body object Required
body.value — Required $ref: "#/definitions/speed_image_resizing_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "off"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get NEL setting — cloudflare.nel-settings-get

Run Get NEL setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Identifier of the zone. $ref: "#/definitions/nel-config_zone_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit NEL setting — cloudflare.nel-settings-edit

Run Edit NEL setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Identifier of the zone. $ref: "#/definitions/nel-config_zone_identifier"
body — Required $ref: "#/definitions/nel-config_nel_setting_patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": {
      "enabled": true
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Origin H2 Max Streams Setting — cloudflare.zone-cache-settings-get-origin-h2-max-streams-setting

Run Get Origin H2 Max Streams Setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Origin H2 Max Streams Setting — cloudflare.zone-cache-settings-change-origin-h2-max-streams-setting

Run Change Origin H2 Max Streams Setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body object Required
body.value — Required $ref: "#/definitions/cache-settings_origin_h2_max_streams_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": 50
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Origin Max HTTP Version Setting — cloudflare.zone-cache-settings-get-origin-max-http-version-setting

Run Get Origin Max HTTP Version Setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Origin Max HTTP Version Setting — cloudflare.zone-cache-settings-change-origin-max-http-version-setting

Run Change Origin Max HTTP Version Setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body object Required
body.value — Required $ref: "#/definitions/cache-settings_origin_max_http_version_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "2"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Origin TLS Compliance Modes setting — cloudflare.zone-cache-settings-delete-origin-tls-compliance-modes-setting

Run Delete Origin TLS Compliance Modes setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Origin TLS Compliance Modes setting — cloudflare.zone-cache-settings-get-origin-tls-compliance-modes-setting

Run Get Origin TLS Compliance Modes setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Origin TLS Compliance Modes setting — cloudflare.zone-cache-settings-change-origin-tls-compliance-modes-setting

Run Change Origin TLS Compliance Modes setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body object Required
body.value — Required $ref: "#/definitions/cache-settings_origin_tls_compliance_modes_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": [
      "fips",
      "pqh"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace Origin TLS Compliance Modes setting — cloudflare.zone-cache-settings-replace-origin-tls-compliance-modes-setting

Run Replace Origin TLS Compliance Modes setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache-settings_identifier"
body object Required
body.value — Required $ref: "#/definitions/cache-settings_origin_tls_compliance_modes_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": [
      "fips",
      "pqh"
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get RUM status for a zone — cloudflare.web-analytics-get-rum-status

Run Get RUM status for a zone with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/rum_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Toggle RUM on/off for a zone — cloudflare.web-analytics-toggle-rum

Run Toggle RUM on/off for a zone with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/rum_identifier"
body — Required $ref: "#/definitions/rum_toggle-rum-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Cloudflare Speed Brain setting — cloudflare.zone-settings-get-speed-brain-setting

Run Get Cloudflare Speed Brain setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Cloudflare Speed Brain setting — cloudflare.zone-settings-change-speed-brain-setting

Run Change Cloudflare Speed Brain setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"
body object Required
body.value string Required Whether the feature is enabled or disabled. enum: ["on","off"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "on"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Automatic SSL/TLS enrollment status for the given zone — cloudflare.ssl-detector-automatic-mode-get-enrollment

Run Get Automatic SSL/TLS enrollment status for the given zone with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Automatic SSL/TLS Enrollment status for given zone — cloudflare.ssl-detector-automatic-mode-patch-enrollment

Run Patch Automatic SSL/TLS Enrollment status for given zone with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/cache_identifier"
body — Required $ref: "#/definitions/cache_schemas_patch"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "auto"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Image Transformations Allowed Origins setting — cloudflare.zone-settings-get-transformations-allowed-origins-setting

Run Get Image Transformations Allowed Origins setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Image Transformations Allowed Origins setting — cloudflare.zone-settings-change-transformations-allowed-origins-setting

Run Change Image Transformations Allowed Origins setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"
body object Required
body.value — Required $ref: "#/definitions/speed_transformations_allowed_origins_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "example.com,cdn.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Image Transformations C2PA setting — cloudflare.zone-settings-get-transformations-c2pa-setting

Run Get Image Transformations C2PA setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Image Transformations C2PA setting — cloudflare.zone-settings-change-transformations-c2pa-setting

Run Change Image Transformations C2PA setting with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"
body object Required
body.value — Required $ref: "#/definitions/speed_transformations_c2pa_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": "off"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Transformations configuration — cloudflare.zone-settings-get-transformations-config

Run Get Transformations configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Change Transformations configuration — cloudflare.zone-settings-change-transformations-config

Run Change Transformations configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/speed_identifier"
body object Required
body.value — Required $ref: "#/definitions/speed_transformations_config_value"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "value": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zaraz configuration — cloudflare.get-zones-zone_identifier-zaraz-config

Run Get Zaraz configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zaraz_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get default Zaraz configuration — cloudflare.get-zones-zone_identifier-zaraz-default

Run Get default Zaraz configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zaraz_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Export Zaraz configuration — cloudflare.get-zones-zone_identifier-zaraz-export

Run Export Zaraz configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zaraz_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Zaraz historical configuration records — cloudflare.get-zones-zone_identifier-zaraz-history

Run List Zaraz historical configuration records with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zaraz_identifier"
query object Optional additionalProperties: false
query.offset integer Optional Ordinal number to start listing the results with. Default value is 0. minimum: 0
query.limit integer Optional Maximum amount of results to list. Default value is 10. minimum: 1
query.sortField string Optional The field to sort by. Default is updated_at. enum: ["id","user_id","description","created_at","updated_at"]
query.sortOrder string Optional Sorting order. Default is DESC. enum: ["DESC","ASC"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Restore Zaraz historical configuration by ID — cloudflare.put-zones-zone_identifier-zaraz-history

Run Restore Zaraz historical configuration by ID with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zaraz_identifier"
body integer Required ID of the Zaraz configuration to restore. minimum: 1

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": 12345
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zaraz historical configurations by ID(s) — cloudflare.get-zones-zone_identifier-zaraz-config-history

Run Get Zaraz historical configurations by ID(s) with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zaraz_identifier"
query object Required additionalProperties: false
query.ids array Required Comma separated list of Zaraz configuration IDs.
query.ids[] integer Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "ids": [
      12345,
      23456
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Publish Zaraz preview configuration — cloudflare.post-zones-zone_identifier-zaraz-publish

Run Publish Zaraz preview configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zaraz_identifier"
body string Optional Zaraz configuration description.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Zaraz workflow — cloudflare.get-zones-zone_identifier-zaraz-workflow

Run Get Zaraz workflow with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zaraz_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Zaraz workflow — cloudflare.put-zones-zone_identifier-zaraz-workflow

Run Update Zaraz workflow with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zaraz_identifier"
body — Required $ref: "#/definitions/zaraz_zaraz-workflow"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": "realtime"
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get zone setting — cloudflare.zone-settings-get-single-setting

Run Get zone setting with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/zones_identifier"
path.setting_id — Required $ref: "#/definitions/zones_setting_name"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "setting_id": "always_online"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Smart Shield Settings — cloudflare.smart-shield-get-settings

Run Get Smart Shield Settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/smartshield_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Smart Shield Settings — cloudflare.smart-shield-patch-settings

Run Patch Smart Shield Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/smartshield_identifier"
body — Required $ref: "#/definitions/smartshield_smart_shield_settings_patch_body"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "smart_tiered_cache": {
      "value": "on"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Cache Reserve Clear — cloudflare.smart-shield-settings-get-cache-reserve-clear

Run Get Cache Reserve Clear with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/smartshield_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start Cache Reserve Clear — cloudflare.smart-shield-settings-start-cache-reserve-clear

Run Start Cache Reserve Clear with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/smartshield_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Health Checks — cloudflare.smart-shield-list-health-checks

Run List Health Checks with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/smartshield_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. Must be a multiple of 5. default: 25; minimum: 5; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Health Check — cloudflare.smart-shield-create-health-check

Run Create Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/smartshield_identifier"
body — Required $ref: "#/definitions/smartshield_query_healthcheck"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "server-1",
    "address": "www.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Health Check — cloudflare.smart-shield-delete-health-check

Run Delete Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.healthcheck_id — Required $ref: "#/definitions/smartshield_identifier"
path.zone_id — Required $ref: "#/definitions/smartshield_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "healthcheck_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Health Check Details — cloudflare.smart-shield-health-check-details

Run Health Check Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.healthcheck_id — Required $ref: "#/definitions/smartshield_identifier"
path.zone_id — Required $ref: "#/definitions/smartshield_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "healthcheck_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Health Check — cloudflare.smart-shield-patch-health-check

Run Patch Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.healthcheck_id — Required $ref: "#/definitions/smartshield_identifier"
path.zone_id — Required $ref: "#/definitions/smartshield_identifier"
body — Required $ref: "#/definitions/smartshield_query_healthcheck"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "healthcheck_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "server-1",
    "address": "www.example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Health Check — cloudflare.smart-shield-update-health-check

Run Update Health Check with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.healthcheck_id — Required $ref: "#/definitions/smartshield_identifier"
path.zone_id — Required $ref: "#/definitions/smartshield_identifier"
body — Required $ref: "#/definitions/smartshield_single_hc_response"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "healthcheck_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "success": true,
    "errors": [],
    "messages": [],
    "result": {}
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List zone snippets — cloudflare.listzonesnippets

Run List zone snippets with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/snippets_ZoneId"
query object Optional additionalProperties: false
query.page — Optional $ref: "#/definitions/snippets_Page"
query.per_page — Optional $ref: "#/definitions/snippets_PerPage"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete zone snippet rules — cloudflare.deletezonesnippetrules

Run Delete zone snippet rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/snippets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List zone snippet rules — cloudflare.listzonesnippetrules

Run List zone snippet rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/snippets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update zone snippet rules — cloudflare.updatezonesnippetrules

Run Update zone snippet rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/snippets_ZoneId"
body object Required Define a snippet rules object.
body.rules — Required $ref: "#/definitions/snippets_SnippetRules"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  },
  "body": {
    "rules": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a zone snippet — cloudflare.deletezonesnippet

Run Delete a zone snippet with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/snippets_ZoneId"
path.snippet_name — Required $ref: "#/definitions/snippets_SnippetName"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074",
    "snippet_name": "my_snippet"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a zone snippet — cloudflare.getzonesnippet

Run Get a zone snippet with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/snippets_ZoneId"
path.snippet_name — Required $ref: "#/definitions/snippets_SnippetName"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074",
    "snippet_name": "my_snippet"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get current aggregated analytics — cloudflare.spectrum-aggregate-analytics-get-current-aggregated-analytics

Run Get current aggregated analytics with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/spectrum-analytics_identifier"
query object Optional additionalProperties: false
query.appID — Optional $ref: "#/definitions/spectrum-analytics_app_id_param"
query.colo_name string Optional Co-location identifier. maxLength: 3

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get analytics by time — cloudflare.spectrum-analytics---by-time--get-analytics-by-time

Run Get analytics by time with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/spectrum-analytics_identifier"
query object Required additionalProperties: false
query.dimensions — Optional $ref: "#/definitions/spectrum-analytics_dimensions"
query.sort — Optional $ref: "#/definitions/spectrum-analytics_sort"
query.until — Optional $ref: "#/definitions/spectrum-analytics_until"
query.metrics — Optional $ref: "#/definitions/spectrum-analytics_metrics"
query.filters — Optional $ref: "#/definitions/spectrum-analytics_filters"
query.since — Optional $ref: "#/definitions/spectrum-analytics_since"
query.time_delta string Required Used to select time series resolution. enum: ["year","quarter","month","week","day","hour","dekaminute","minute"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "time_delta": "minute"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get analytics summary — cloudflare.spectrum-analytics---summary--get-analytics-summary

Run Get analytics summary with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/spectrum-analytics_identifier"
query object Optional additionalProperties: false
query.dimensions — Optional $ref: "#/definitions/spectrum-analytics_dimensions"
query.sort — Optional $ref: "#/definitions/spectrum-analytics_sort"
query.until — Optional $ref: "#/definitions/spectrum-analytics_until"
query.metrics — Optional $ref: "#/definitions/spectrum-analytics_metrics"
query.filters — Optional $ref: "#/definitions/spectrum-analytics_filters"
query.since — Optional $ref: "#/definitions/spectrum-analytics_since"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Spectrum applications — cloudflare.spectrum-applications-list-spectrum-applications

Run List Spectrum applications with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/spectrum-config_zone_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. This parameter is required in order to use other pagination parameters. If included in the query, result_info will be present in the response. minimum: 1
query.per_page number Optional Sets the maximum number of results per page. default: 20; minimum: 1; maximum: 100
query.direction string Optional Sets the direction by which results are ordered. enum: ["asc","desc"]; default: "asc"
query.order string Optional Application field by which results are ordered. enum: ["protocol","app_id","created_on","modified_on","dns"]; default: "dns"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Spectrum application — cloudflare.spectrum-applications-delete-spectrum-application

Run Delete Spectrum application with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/spectrum-config_app_identifier"
path.zone_id — Required $ref: "#/definitions/spectrum-config_zone_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Spectrum application configuration — cloudflare.spectrum-applications-get-spectrum-application-configuration

Run Get Spectrum application configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.app_id — Required $ref: "#/definitions/spectrum-config_app_identifier"
path.zone_id — Required $ref: "#/definitions/spectrum-config_zone_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "app_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Spectrum application protocols — cloudflare.spectrum-applications-list-spectrum-application-protocols

Run List Spectrum application protocols with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/spectrum-config_zone_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get quota and availability — cloudflare.speed-get-availabilities

Run Get quota and availability with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/observatory_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List tested webpages — cloudflare.speed-list-pages

Run List tested webpages with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/observatory_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete all page tests — cloudflare.speed-delete-tests

Run Delete all page tests with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/observatory_identifier"
path.url — Required $ref: "#/definitions/observatory_url"
query object Optional additionalProperties: false
query.region — Optional
query.region — Optional allOf[1]; $ref: "#/definitions/observatory_region"
query.region string Optional allOf[2]; default: "us-central1"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "url": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List page test history — cloudflare.speed-list-test-history

Run List page test history with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/observatory_identifier"
path.url — Required $ref: "#/definitions/observatory_url"
query object Optional additionalProperties: false
query.page integer Optional default: 1
query.per_page integer Optional default: 20; minimum: 5; maximum: 50
query.region — Optional
query.region — Optional allOf[1]; $ref: "#/definitions/observatory_region"
query.region string Optional allOf[2]; default: "us-central1"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "url": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Start page test — cloudflare.speed-create-test

Run Start page test with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/observatory_identifier"
path.url — Required $ref: "#/definitions/observatory_url"
body object Optional
body.region — Optional
body.region — Optional allOf[1]; $ref: "#/definitions/observatory_region"
body.region string Optional allOf[2]; default: "us-central1"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "url": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a page test result — cloudflare.speed-get-test

Run Get a page test result with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/observatory_identifier"
path.url — Required $ref: "#/definitions/observatory_url"
path.test_id string Required

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "url": "example.com",
    "test_id": "example"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List core web vital metrics trend — cloudflare.speed-list-page-trend

Run List core web vital metrics trend with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/observatory_identifier"
path.url — Required $ref: "#/definitions/observatory_url"
query object Required additionalProperties: false
query.region — Required $ref: "#/definitions/observatory_region"
query.deviceType — Required $ref: "#/definitions/observatory_device_type"
query.start — Required $ref: "#/definitions/observatory_timestamp"
query.end — Optional $ref: "#/definitions/observatory_timestamp"
query.tz string Required The timezone of the start and end timestamps.
query.metrics string Required A comma-separated list of metrics to include in the results.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "url": "example.com"
  },
  "query": {
    "region": "us-central1",
    "deviceType": "DESKTOP",
    "start": "2014-01-01T05:20:00.12345Z",
    "tz": "America/Chicago",
    "metrics": "performanceScore,ttfb,fcp,si,lcp,tti,tbt,cls"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete scheduled page test — cloudflare.speed-delete-test-schedule

Run Delete scheduled page test with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/observatory_identifier"
path.url — Required $ref: "#/definitions/observatory_url"
query object Optional additionalProperties: false
query.region — Optional
query.region — Optional allOf[1]; $ref: "#/definitions/observatory_region"
query.region string Optional allOf[2]; default: "us-central1"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "url": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a page test schedule — cloudflare.speed-get-scheduled-test

Run Get a page test schedule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/observatory_identifier"
path.url — Required $ref: "#/definitions/observatory_url"
query object Optional additionalProperties: false
query.region — Optional
query.region — Optional allOf[1]; $ref: "#/definitions/observatory_region"
query.region string Optional allOf[2]; default: "us-central1"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "url": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create scheduled page test — cloudflare.speed-create-scheduled-test

Run Create scheduled page test with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/observatory_identifier"
path.url — Required $ref: "#/definitions/observatory_url"
query object Optional additionalProperties: false
query.region — Optional
query.region — Optional allOf[1]; $ref: "#/definitions/observatory_region"
query.region string Optional allOf[2]; default: "us-central1"
query.frequency — Optional The frequency of the scheduled test. Defaults to WEEKLY for free plans, DAILY for paid plans. $ref: "#/definitions/observatory_schedule_frequency"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "url": "example.com"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Analyze Certificate — cloudflare.analyze-certificate-analyze-certificate

Run Analyze Certificate with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.bundle_method — Optional $ref: "#/definitions/tls-certificates-and-hostnames_bundle_method"
body.certificate — Optional $ref: "#/definitions/tls-certificates-and-hostnames_certificate"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Certificate Packs — cloudflare.certificate-packs-list-certificate-packs

Run List Certificate Packs with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Number of certificate packs per page. default: 20; minimum: 5; maximum: 50
query.status string Optional Include Certificate Packs of all statuses, not just active ones. enum: ["all"]
query.deploy string Optional Specify the deployment environment for the certificate packs. enum: ["staging","production"]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Order Advanced Certificate Manager Certificate Pack — cloudflare.certificate-packs-order-advanced-certificate-manager-certificate-pack

Run Order Advanced Certificate Manager Certificate Pack with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.certificate_authority — Required $ref: "#/definitions/tls-certificates-and-hostnames_certificate_authority-2"
body.cloudflare_branding — Optional $ref: "#/definitions/tls-certificates-and-hostnames_cloudflare_branding"
body.hosts — Required $ref: "#/definitions/tls-certificates-and-hostnames_hosts-2"
body.type — Required $ref: "#/definitions/tls-certificates-and-hostnames_advanced_type"
body.validation_method — Required $ref: "#/definitions/tls-certificates-and-hostnames_validation_method"
body.validity_days — Required $ref: "#/definitions/tls-certificates-and-hostnames_validity_days"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "type": "advanced",
    "hosts": [
      "example.com",
      "*.example.com",
      "www.example.com"
    ],
    "validation_method": "txt",
    "validity_days": 14,
    "certificate_authority": "lets_encrypt"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Certificate Pack Quotas — cloudflare.certificate-packs-get-certificate-pack-quotas

Run Get Certificate Pack Quotas with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Advanced Certificate Manager Certificate Pack — cloudflare.certificate-packs-delete-advanced-certificate-manager-cert-c1b2665810

Run Delete Advanced Certificate Manager Certificate Pack with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_pack_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_certificate_pack_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_pack_id": "3822ff90-ea29-44df-9e55-21300bb9419b",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Certificate Pack — cloudflare.certificate-packs-get-certificate-pack

Run Get Certificate Pack with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_pack_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_certificate_pack_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_pack_id": "3822ff90-ea29-44df-9e55-21300bb9419b",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Restart Validation or Update Advanced Certificate Manager Certificate Pack — cloudflare.certificate-packs-restart-validation-for-advanced-certific-b3c0a565ac

Run Restart Validation or Update Advanced Certificate Manager Certificate Pack with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_pack_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_certificate_pack_identifier"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body object Required
body.cloudflare_branding — Optional $ref: "#/definitions/tls-certificates-and-hostnames_cloudflare_branding"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_pack_id": "3822ff90-ea29-44df-9e55-21300bb9419b",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Universal SSL Settings Details — cloudflare.universal-ssl-settings-for-a-zone-universal-ssl-settings-details

Run Universal SSL Settings Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit Universal SSL Settings — cloudflare.universal-ssl-settings-for-a-zone-edit-universal-ssl-settings

Run Edit Universal SSL Settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body — Required $ref: "#/definitions/tls-certificates-and-hostnames_universal"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

SSL Verification Details — cloudflare.ssl-verification-ssl-verification-details

Run SSL Verification Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
query object Optional additionalProperties: false
query.retry boolean Optional Immediately retry SSL Verification. enum: [true]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit SSL Certificate Pack Validation Method — cloudflare.ssl-verification-edit-ssl-certificate-pack-validation-method

Run Edit SSL Certificate Pack Validation Method with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.certificate_pack_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_cert_pack_uuid"
path.zone_id — Required $ref: "#/definitions/tls-certificates-and-hostnames_identifier"
body — Required $ref: "#/definitions/tls-certificates-and-hostnames_validation_method-3"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "certificate_pack_id": "a77f8bd7-3b47-46b4-a6f1-75cf98109948",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "validation_method": "txt"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get zone Stream usage — cloudflare.usage-analytics-get-zone-stream-usage

Run Get zone Stream usage with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required Standard Cloudflare hex zone identifier. The API gateway resolves this to the owning account and translates it to an internal numeric ID before forwarding to the backend service. $ref: "#/definitions/usage-analytics_identifier"
query object Optional additionalProperties: false
query.metrics string Optional Comma-separated list of metrics to include in the response. Available metrics depend on the endpoint. Billing usage supports: streamMinutesViewed, rateLimitingRequestsAllowed, loadBalancingQueries, argoAcceleratedBytes, workersRequests, workersKVReads, imageResizingRequests, spectrumBytesTransferred, mediaUniqueTransformations. Stream/media usage supports: streamMinutesViewed.
query.since string Optional Start of the time range for the query (inclusive). ISO 8601 timestamp. Defaults to 6 hours before the current time. format: "date-time"
query.until string Optional End of the time range for the query (inclusive). ISO 8601 timestamp. Defaults to the current time. format: "date-time"
query.time_delta string Optional Time unit to aggregate usage observations into. Data retention is approximately 18 months. The effective number of data points returned depends on the time range and granularity selected. For example, requesting hourly granularity over 18 months could produce up to ~13,000 data points; use the limit parameter to cap results and be aware that responses may be truncated. enum: ["hour","day","week","month","quarter","year"]; default: "hour"
query.limit integer Optional Maximum number of data points to return. The actual number of results depends on the interaction between the time range (since/until) and time_delta granularity. Results are truncated to this limit without error if the time range produces more data points than the limit allows. default: 100; minimum: 1; maximum: 10000
query.filters string Optional Filter expressions to apply to the query. Format: field==value. Multiple filters can be combined.

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Zone Subscription — cloudflare.zone-subscription-delete-zone-subscription

Run Delete Zone Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Zone Subscription Details — cloudflare.zone-subscription-zone-subscription-details

Run Zone Subscription Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Zone Subscription — cloudflare.zone-subscription-create-zone-subscription

Run Create Zone Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_subscription-v2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Zone Subscription — cloudflare.zone-subscription-update-zone-subscription

Run Update Zone Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_subscription-v2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Zone Subscription — cloudflare.zone-subscription-delete-zone-subscriptions

Run Delete Zone Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bill-subs-api_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Zone Subscription — cloudflare.zone-subscription-create-zone-subscriptions

Run Create Zone Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_subscription-v2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update Zone Subscription — cloudflare.zone-subscription-update-zone-subscriptions

Run Update Zone Subscription with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/bill-subs-api_identifier"
body — Required $ref: "#/definitions/bill-subs-api_subscription-v2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete tags from a zone-level resource — cloudflare.tags-zone-delete

Run Delete tags from a zone-level resource with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/resource-tagging_zone_id"
headers object Optional additionalProperties: false
headers.If-Match string Optional ETag value for optimistic concurrency control. When provided, the server will verify the current resource ETag matches before applying the write. Returns 412 Precondition Failed if the resource has been modified since the ETag was obtained. Omit this header for unconditional writes.
body — Required $ref: "#/definitions/resource-tagging_delete_tags_request_zone_level"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "resource_type": "zone",
    "resource_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get tags for a zone-level resource — cloudflare.tags-zone-get

Run Get tags for a zone-level resource with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/resource-tagging_zone_id"
query object Required additionalProperties: false
query.resource_id — Required The ID of the resource to retrieve tags for. $ref: "#/definitions/resource-tagging_resource_id"
query.resource_type — Required The type of the resource. $ref: "#/definitions/resource-tagging_zone_resource_type"
query.access_application_id — Optional Access application ID identifier. Required for access_application_policy resources. $ref: "#/definitions/resource-tagging_access_application_id"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "query": {
    "resource_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "resource_type": "zone"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Set tags for a zone-level resource — cloudflare.tags-zone-set

Run Set tags for a zone-level resource with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/resource-tagging_zone_id"
headers object Optional additionalProperties: false
headers.If-Match string Optional ETag value for optimistic concurrency control. When provided, the server will verify the current resource ETag matches before applying the write. Returns 412 Precondition Failed if the resource has been modified since the ETag was obtained. Omit this header for unconditional writes.
body — Required $ref: "#/definitions/resource-tagging_set_tags_request_zone_level"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "resource_type": "zone",
    "resource_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List token validation configurations — cloudflare.token-validation-config-list

Run List token validation configurations with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.per_page integer Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a token validation configuration — cloudflare.token-validation-config-create

Run Create a token validation configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body object Required
body.credentials — Required $ref: "#/definitions/api-shield_credentials-request"
body.description — Required $ref: "#/definitions/api-shield_description"
body.title — Required $ref: "#/definitions/api-shield_title"
body.token_sources — Required $ref: "#/definitions/api-shield_token_sources"
body.token_type — Required $ref: "#/definitions/api-shield_token_type"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "title": "Example Token Validation Configuration",
    "description": "Long description for Token Validation Configuration",
    "token_sources": [
      "http.request.headers[\"x-auth\"][0]",
      "http.request.cookies[\"Authorization\"][0]"
    ],
    "token_type": "JWT",
    "credentials": {
      "keys": [
        {
          "kid": "example",
          "kty": "RSA",
          "alg": "RS256",
          "n": "example",
          "e": "example"
        }
      ]
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a token validation configuration — cloudflare.token-validation-config-delete

Run Delete a token validation configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.config_id — Required Token Configuration ID $ref: "#/definitions/api-shield_uuid-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "config_id": "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a token validation configuration — cloudflare.token-validation-config-get

Run Get a token validation configuration with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.config_id — Required Token Configuration ID $ref: "#/definitions/api-shield_uuid-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "config_id": "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit a token validation configuration — cloudflare.token-validation-config-edit

Run Edit a token validation configuration with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.config_id — Required Token Configuration ID $ref: "#/definitions/api-shield_uuid-2"
body object Required
body.description — Optional $ref: "#/definitions/api-shield_description"
body.title — Optional $ref: "#/definitions/api-shield_title"
body.token_sources — Optional $ref: "#/definitions/api-shield_token_sources"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "config_id": "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit token validation credentials — cloudflare.token-validation-config-credentials-edit

Run Edit token validation credentials with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.config_id — Required Token Configuration ID $ref: "#/definitions/api-shield_uuid-2"
body — Required $ref: "#/definitions/api-shield_credentials-patch-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "config_id": "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  },
  "body": {
    "keys": [
      {
        "kid": "example",
        "kty": "RSA",
        "alg": "RS256",
        "n": "example",
        "e": "example"
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace token validation credentials — cloudflare.token-validation-config-credentials-update

Run Replace token validation credentials with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.config_id — Required Token Configuration ID $ref: "#/definitions/api-shield_uuid-2"
body — Required $ref: "#/definitions/api-shield_credentials-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "config_id": "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  },
  "body": {
    "keys": [
      {
        "kid": "example",
        "kty": "RSA",
        "alg": "RS256",
        "n": "example",
        "e": "example"
      }
    ]
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List token validation rules — cloudflare.token-validation-rules-list

Run List token validation rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.per_page integer Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.token_configuration array Optional Select rules using any of these token configurations.
query.token_configuration[] — Optional $ref: "#/definitions/api-shield_uuid-2"
query.action — Optional $ref: "#/definitions/api-shield_action"
query.enabled — Optional $ref: "#/definitions/api-shield_enabled"
query.id — Optional Select rules with these IDs. $ref: "#/definitions/api-shield_uuid-2"
query.rule_id — Optional Select rules with these IDs. $ref: "#/definitions/api-shield_uuid-2"
query.host — Optional Select rules with this host in include. $ref: "#/definitions/api-shield_host"
query.hostname — Optional Select rules with this host in include. $ref: "#/definitions/api-shield_host"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit token validation rules — cloudflare.token-validation-rules-bulk-edit

Run Edit token validation rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body array Required
body[] — Optional
body[] object Optional allOf[1]
body[].id string Required Rule ID this patch applies to allOf[1]; maxLength: 36; format: "uuid"
body[] — Optional allOf[2]; $ref: "#/definitions/api-shield_edit-single-rule-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create token validation rules — cloudflare.token-validation-rules-bulk-create

Run Create token validation rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
body array Required
body[] — Optional $ref: "#/definitions/api-shield_create-single-rule-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Preview a token validation rule — cloudflare.token-validation-rules-preview

Run Preview a token validation rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
query object Optional additionalProperties: false
query.per_page integer Optional Maximum number of results per page. default: 20; minimum: 5; maximum: 50
query.page integer Optional Page number of paginated results. default: 1; minimum: 1
query.state array Optional
query.state[] — Optional $ref: "#/definitions/api-shield_selector-operation-state"
query.host array Optional Filter operations by host.
query.host[] — Optional $ref: "#/definitions/api-shield_host"
query.hostname array Optional Filter operations by host.
query.hostname[] — Optional $ref: "#/definitions/api-shield_host"
query.method array Optional Filter operations by method.
query.method[] — Optional $ref: "#/definitions/api-shield_method"
query.endpoint array Optional Filter operations by endpoint. Allows substring matching.
query.endpoint[] — Optional $ref: "#/definitions/api-shield_endpoint"
body — Required $ref: "#/definitions/api-shield_selector"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a token validation rule — cloudflare.token-validation-rules-delete

Run Delete a token validation rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.rule_id — Required Token Validation Rule ID $ref: "#/definitions/api-shield_uuid-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a token validation rule — cloudflare.token-validation-rules-get

Run Get a token validation rule with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.rule_id — Required Token Validation Rule ID $ref: "#/definitions/api-shield_uuid-2"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit a token validation rule — cloudflare.token-validation-rules-edit

Run Edit a token validation rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/api-shield_identifier-2"
path.rule_id — Required Token Validation Rule ID $ref: "#/definitions/api-shield_uuid-2"
body — Required $ref: "#/definitions/api-shield_edit-single-rule-request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "rule_id": "examplexxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete URL Normalization settings — cloudflare.deleteurlnormalization

Run Delete URL Normalization settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get URL Normalization settings — cloudflare.geturlnormalization

Run Get URL Normalization settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update URL Normalization settings — cloudflare.updateurlnormalization

Run Update URL Normalization settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/rulesets_ZoneId"
body — Required $ref: "#/definitions/rulesets_UrlNormalization"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "9f1839b6152d298aca64c4e906b6d074"
  },
  "body": {
    "type": "cloudflare",
    "scope": "incoming"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List waiting rooms for zone — cloudflare.waiting-room-list-waiting-rooms

Run List waiting rooms for zone with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. Must be a multiple of 5. default: 25; minimum: 5; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create waiting room — cloudflare.waiting-room-create-waiting-room

Run Create waiting room with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_query_waitingroom"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "production_webinar",
    "host": "shop.example.com",
    "new_users_per_minute": 200,
    "total_active_users": 200
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a custom waiting room page preview — cloudflare.waiting-room-create-a-custom-waiting-room-page-preview

Run Create a custom waiting room page preview with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_query_preview"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "custom_html": "{{#waitTimeKnown}} {{waitTime}} mins {{/waitTimeKnown}} {{^waitTimeKnown}} Queue all enabled {{/waitTimeKnown}}"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get zone-level Waiting Room settings — cloudflare.waiting-room-get-zone-settings

Run Get zone-level Waiting Room settings with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch zone-level Waiting Room settings — cloudflare.waiting-room-patch-zone-settings

Run Patch zone-level Waiting Room settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_zone_settings"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update zone-level Waiting Room settings — cloudflare.waiting-room-update-zone-settings

Run Update zone-level Waiting Room settings with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_zone_settings"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete waiting room — cloudflare.waiting-room-delete-waiting-room

Run Delete waiting room with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Waiting room details — cloudflare.waiting-room-waiting-room-details

Run Waiting room details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch waiting room — cloudflare.waiting-room-patch-waiting-room

Run Patch waiting room with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_query_waitingroom"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "production_webinar",
    "host": "shop.example.com",
    "new_users_per_minute": 200,
    "total_active_users": 200
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update waiting room — cloudflare.waiting-room-update-waiting-room

Run Update waiting room with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_query_waitingroom"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "production_webinar",
    "host": "shop.example.com",
    "new_users_per_minute": 200,
    "total_active_users": 200
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List events — cloudflare.waiting-room-list-events

Run List events with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
query object Optional additionalProperties: false
query.page number Optional Page number of paginated results. default: 1; minimum: 1
query.per_page number Optional Maximum number of results per page. Must be a multiple of 5. default: 25; minimum: 5; maximum: 1000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create event — cloudflare.waiting-room-create-event

Run Create event with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_query_event"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "production_webinar_event",
    "event_start_time": "2021-09-28T15:30:00Z",
    "event_end_time": "2021-09-28T17:00:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete event — cloudflare.waiting-room-delete-event

Run Delete event with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.event_id — Required $ref: "#/definitions/waitingroom_event_id"
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "event_id": "25756b2dfe6e378a06b033b670413757",
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Event details — cloudflare.waiting-room-event-details

Run Event details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.event_id — Required $ref: "#/definitions/waitingroom_event_id"
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "event_id": "25756b2dfe6e378a06b033b670413757",
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch event — cloudflare.waiting-room-patch-event

Run Patch event with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.event_id — Required $ref: "#/definitions/waitingroom_event_id"
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_query_event"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "event_id": "25756b2dfe6e378a06b033b670413757",
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "production_webinar_event",
    "event_start_time": "2021-09-28T15:30:00Z",
    "event_end_time": "2021-09-28T17:00:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update event — cloudflare.waiting-room-update-event

Run Update event with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.event_id — Required $ref: "#/definitions/waitingroom_event_id"
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_query_event"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "event_id": "25756b2dfe6e378a06b033b670413757",
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "production_webinar_event",
    "event_start_time": "2021-09-28T15:30:00Z",
    "event_end_time": "2021-09-28T17:00:00Z"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Preview active event details — cloudflare.waiting-room-preview-active-event-details

Run Preview active event details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.event_id — Required $ref: "#/definitions/waitingroom_event_id"
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "event_id": "25756b2dfe6e378a06b033b670413757",
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Waiting Room Rules — cloudflare.waiting-room-list-waiting-room-rules

Run List Waiting Room Rules with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Waiting Room Rule — cloudflare.waiting-room-create-waiting-room-rule

Run Create Waiting Room Rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_create_rule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "action": "bypass_waiting_room",
    "expression": "ip.src in {10.20.30.40}"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace Waiting Room Rules — cloudflare.waiting-room-replace-waiting-room-rules

Run Replace Waiting Room Rules with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_update_rules"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": []
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Waiting Room Rule — cloudflare.waiting-room-delete-waiting-room-rule

Run Delete Waiting Room Rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/waitingroom_rule_id"
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "25756b2dfe6e378a06b033b670413757",
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Patch Waiting Room Rule — cloudflare.waiting-room-patch-waiting-room-rule

Run Patch Waiting Room Rule with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.rule_id — Required $ref: "#/definitions/waitingroom_rule_id"
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"
body — Required $ref: "#/definitions/waitingroom_patch_rule"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "rule_id": "25756b2dfe6e378a06b033b670413757",
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "action": "bypass_waiting_room",
    "expression": "ip.src in {10.20.30.40}"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get waiting room status — cloudflare.waiting-room-get-waiting-room-status

Run Get waiting room status with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.waiting_room_id — Required $ref: "#/definitions/waitingroom_waiting_room_id"
path.zone_id — Required $ref: "#/definitions/waitingroom_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "waiting_room_id": "699d98642c564d2e855e9661899b7252",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Web3 Hostnames — cloudflare.web3-hostname-list-web3-hostnames

Run List Web3 Hostnames with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/web3_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Web3 Hostname — cloudflare.web3-hostname-create-web3-hostname

Run Create Web3 Hostname with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/web3_identifier"
body — Required $ref: "#/definitions/web3_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "name": "gateway.example.com",
    "target": "ipfs"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Web3 Hostname Details — cloudflare.web3-hostname-web3-hostname-details

Run Web3 Hostname Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/web3_identifier"
path.zone_id — Required $ref: "#/definitions/web3_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit Web3 Hostname — cloudflare.web3-hostname-edit-web3-hostname

Run Edit Web3 Hostname with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/web3_identifier"
path.zone_id — Required $ref: "#/definitions/web3_identifier"
body — Required $ref: "#/definitions/web3_modify_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

IPFS Universal Path Gateway Content List Details — cloudflare.web3-hostname-ipfs-universal-path-gateway-content-list-details

Run IPFS Universal Path Gateway Content List Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/web3_identifier"
path.zone_id — Required $ref: "#/definitions/web3_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update IPFS Universal Path Gateway Content List — cloudflare.web3-hostname-update-ipfs-universal-path-gateway-content-list

Run Update IPFS Universal Path Gateway Content List with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/web3_identifier"
path.zone_id — Required $ref: "#/definitions/web3_identifier"
body — Required $ref: "#/definitions/web3_content_list_update_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "action": "block",
    "entries": []
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List IPFS Universal Path Gateway Content List Entries — cloudflare.web3-hostname-list-ipfs-universal-path-gateway-content-list-entries

Run List IPFS Universal Path Gateway Content List Entries with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/web3_identifier"
path.zone_id — Required $ref: "#/definitions/web3_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create IPFS Universal Path Gateway Content List Entry — cloudflare.web3-hostname-create-ipfs-universal-path-gateway-content-list-entry

Run Create IPFS Universal Path Gateway Content List Entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.identifier — Required $ref: "#/definitions/web3_identifier"
path.zone_id — Required $ref: "#/definitions/web3_identifier"
body — Required $ref: "#/definitions/web3_content_list_entry_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "type": "cid",
    "content": "QmPZ9gcCEpqKTo6aq61g2nXGUhM4iCL3ewB6LDXZCtioEB"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

IPFS Universal Path Gateway Content List Entry Details — cloudflare.web3-hostname-ipfs-universal-path-gateway-content-list-entry-details

Run IPFS Universal Path Gateway Content List Entry Details with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.content_list_entry_identifier — Required $ref: "#/definitions/web3_identifier"
path.identifier — Required $ref: "#/definitions/web3_identifier"
path.zone_id — Required $ref: "#/definitions/web3_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "content_list_entry_identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Edit IPFS Universal Path Gateway Content List Entry — cloudflare.web3-hostname-edit-ipfs-universal-path-gateway-content-list-entry

Run Edit IPFS Universal Path Gateway Content List Entry with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.content_list_entry_identifier — Required $ref: "#/definitions/web3_identifier"
path.identifier — Required $ref: "#/definitions/web3_identifier"
path.zone_id — Required $ref: "#/definitions/web3_identifier"
body — Required $ref: "#/definitions/web3_content_list_entry_create_request"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "content_list_entry_identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "identifier": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "type": "cid",
    "content": "QmPZ9gcCEpqKTo6aq61g2nXGUhM4iCL3ewB6LDXZCtioEB"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List Worker Routes — cloudflare.worker-routes-list-routes

Run List Worker Routes with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/workers_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create Worker Route — cloudflare.worker-routes-create-route

Run Create Worker Route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.zone_id — Required $ref: "#/definitions/workers_identifier"
body — Required $ref: "#/definitions/workers_route"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "pattern": "example.com/*"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete Worker Route — cloudflare.worker-routes-delete-route

Run Delete Worker Route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.route_id — Required $ref: "#/definitions/workers_identifier"
path.zone_id — Required $ref: "#/definitions/workers_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "route_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get Worker Route — cloudflare.worker-routes-get-route

Run Get Worker Route with Cloudflare. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.route_id — Required $ref: "#/definitions/workers_identifier"
path.zone_id — Required $ref: "#/definitions/workers_identifier"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "route_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Replace Worker Route — cloudflare.worker-routes-update-route

Run Replace Worker Route with Cloudflare. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.route_id — Required $ref: "#/definitions/workers_identifier"
path.zone_id — Required $ref: "#/definitions/workers_identifier"
body — Required $ref: "#/definitions/workers_route"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "route_id": "023e105f4ecef8ad9ca31a8372d0c353",
    "zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
  },
  "body": {
    "pattern": "example.com/*"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Errors

Check the key's expiry, revocation, workspace and allowed operations.

Reuse the same idempotency key only for the same request.

The connection or provider limit has been reached. Check the receipt before retrying.

Test the connection

Open the integration's commands below to inspect parameters and examples. Start with a read command for an account or resource you can access. Refresh your client's tool list, use the returned tool name, and check the execution result and usage. Provider charges and permissions still apply. Never test a write against production data without reviewing it.

Official provider documentation

Source: https://help.tooluse.net/integrations/cloudflare/index.mdx