Cloudflare · source page ↗ · last checked —

Change history

• Deprecation Jun 29, 2026, 12:00 AM

  API deprecations - Legacy Registrar Domain Management API

  Deprecation date: April 10, 2026 End of life date: September 27, 2026 The legacy Registrar domain management endpoints are deprecated and will reach their end of life on September 27, 2026. These endpoints have been replaced by the new Registrar API, which provides domain search, availability checking, and registration capabilities. Deprecated APIs: GET /accounts/{account_id}/registrar/domains — List domains GET /accounts/{account_id}/registrar/domains/{domain_name} — Get domain PUT /accounts/{a

• Deprecation Jun 16, 2026, 12:00 AM

  API deprecations - Zone Settings Batch API

  Deprecation date: April 23, 2025 End of life date: September 15, 2026 The Zone Settings Batch API endpoints, which read and edit multiple zone settings in a single request, are deprecated and will reach their end of life on September 15, 2026. Use the per-setting endpoints to read and edit individual zone settings instead. Deprecated APIs: GET /zones/{zone_id}/settings PATCH /zones/{zone_id}/settings Replacements: Get zone setting — GET /zones/{zone_id}/settings/{setting_id} Edit zone setting —

• Deprecation May 13, 2026, 12:00 AM

  API deprecations - Gateway Audit SSH rules

  Deprecation date: November 3, 2025 End of life date: July 15, 2026 The Gateway Audit SSH action for network policies is deprecated and will be fully removed on July 15, 2026. SSH with Access for Infrastructure is the replacement for managing and auditing SSH access. Creating new Gateway rules with action: "audit_ssh" via the dashboard was disabled in December 2024. Creating new rules via the API and Terraform was disabled on November 3, 2025. Editing existing rules via the dashboard, API, and Te

• Deprecation Mar 19, 2026, 12:00 AM

  API deprecations - Service Key Authentication

  Deprecation date: March 19, 2026 End of life date: September 30, 2026 Service Key authentication for the Cloudflare API is deprecated and will be removed on September 30, 2026. API Tokens are capable of providing all functionality of Service Keys, with additional support for fine-grained permission scoping, expiration, and IP address restrictions. Deprecated behavior: Authenticating API requests using the X-Auth-User-Service-Key header. Generating new Service Keys via the Cloudflare dashboard or

• Deprecation Jan 23, 2026, 12:00 AM

  API deprecations - DNS Record Type Updates via API

  Deprecation date: January 23, 2026 End of life date: June 30, 2026 Changing the type of an existing DNS record via the API is deprecated and will no longer be supported after June 30, 2026. Changing a DNS record's type is not a natural update operation and typically also requires changing the record's content. Updates to attributes such as name, TTL, or content are common and safe, but changing the record type introduces additional validation complexity and consistency risks. To align with corre

• Deprecation Dec 9, 2025, 12:00 AM

  API deprecations - Authoritative DNS and DNS Firewall Legacy Analytics

  Deprecation date: December 9, 2025 End of life date: December 1, 2026 The following REST APIs are deprecated and will reach their end of life on December 1, 2026. DNS Analytics API DNS Firewall Analytics API All existing functionality is fully supported by Cloudflare's GraphQL Analytics API, which provides improved performance, flexibility, and long-term support. Integrations using the REST API need to be migrated to the new GraphQL API before December 1, 2026 in order to ensure uninterrupted se

• Deprecation Nov 11, 2025, 12:00 AM

  API deprecations - Zero Trust Devices

  End of life date: November 11, 2025 We are changing the definition of Devices. Devices are going to represent the real-world machines while the relation between Users and Devices will be represented by a new concept - Registrations. As a result multiple fields are moving from Devices to Registrations and we are deprecating the endpoints listed below. The deprecated endpoints are not supported on accounts with multi-user mode enabled. Deprecated API: GET /accounts/{account_id}/devices GET /accoun

• Deprecation Nov 3, 2025, 12:00 AM

  API deprecations - Cloudflare Mirage

  Deprecation date: November 2025 End of life date: January 2026 Following on from the deprecation of Cloudflare Mirage, the following API endpoints that manage Mirage settings are now deprecated and will be sunsetted in January 2026. Deprecated APIs: GET /zones/{zone_id}/settings/mirage PATCH /zones/{zone_id}/settings/mirage Affected APIs: GET /zones/{zone_id}/pagerules/settings - Mirage will be removed from available settings. POST /zones/{zone_id}/pagerules - Mirage parameter will be removed. P

• Deprecation Oct 15, 2025, 12:00 AM

  API deprecations - Cloudflare Radar: Summary and Timeseries Groups Endpoints

  Deprecation date: October 15, 2025 End of life date: April 15, 2026 The Radar API currently has multiple summary and timeseries groups endpoints per dataset (for example, /radar/http/summary/device_type and /radar/http/timeseries_groups/device_type), which share nearly identical parameters and schema. To simplify the API and improve maintainability, these endpoints will be replaced with parameterized endpoints using a {dimension} path parameter. Deprecated APIs: GET /radar/http/summary/device_ty

• Deprecation Jul 1, 2025, 12:00 AM

  API deprecations - Cloudflare Radar: Verified Bots APIs

  Deprecation date: July 1, 2025 End of life date: January 1, 2026 The Radar Verified Bots API is now deprecated and will be replaced by the new Bots API. Deprecated APIs: GET /radar/verified_bots/top/bots GET /radar/verified_bots/top/categories Replacements: GET /radar/bots/summary/bot GET /radar/bots/summary/category

• Deprecation Jul 1, 2025, 12:00 AM

  API deprecations - Cloudflare DWeb Resolver

  Deprecation date: July 1, 2025 The Cloudflare DWeb Resolver experiment is ending. Deprecated APIs: DoH resolver on resolver.cloudflare-eth.com

• Deprecation Jun 15, 2025, 12:00 AM

  API deprecations - Firewall Rules API and Filters API

  Deprecation date: June 15, 2025 The Firewall Rules API and the Filters API are deprecated, since Firewall Rules was deprecated in favor of WAF custom rules. Refer to Firewall Rules upgrade for more information about this change. Deprecated APIs: GET /zones/:zone_id/firewall/rules POST /zones/:zone_id/firewall/rules PATCH /zones/:zone_id/firewall/rules PUT /zones/:zone_id/firewall/rules DELETE /zones/:zone_id/firewall/rules GET /zones/:zone_id/firewall/rules/:rule_id PATCH /zones/:zone_id/firewal

• Deprecation Jun 15, 2025, 12:00 AM

  API deprecations - WAF managed rules APIs (previous version)

  Deprecation date: June 15, 2025 The APIs for managing WAF managed rules (previous version) — namely for managing packages, rule groups, rules, and overrides — are deprecated in favor of using the Rulesets API for managing the new version of WAF Managed Rules. Refer to WAF Managed Rules upgrade for more information about this change. Deprecated APIs: GET /zones/:zone_id/firewall/waf/packages GET /zones/:zone_id/firewall/waf/packages/:package_id PATCH /zones/:zone_id/firewall/waf/packages/:package

• Deprecation Jun 15, 2025, 12:00 AM

  API deprecations - Rate Limiting API (previous version)

  Deprecation date: June 15, 2025 The Rate Limiting API is deprecated, in favor of using the Rulesets API for managing the new rate limiting rules. Refer to Rate limiting (previous version) upgrade for more information about this change. Deprecated API: GET /zones/:zone_id/rate_limits POST /zones/:zone_id/rate_limits GET /zones/:zone_id/rate_limits/:rate_limit_id PUT /zones/:zone_id/rate_limits/:rate_limit_id DELETE /zones/:zone_id/rate_limits/:rate_limit_id Replacement: Rate limiting rules (new v

• Deprecation Jun 8, 2025, 12:00 AM

  API deprecations - Zone Setting: cname_flattening

  Deprecation date: June 8, 2025 The Zone Settings API endpoints for managing zone-level CNAME flattening are deprecated. Instead, use the Show DNS Settings and Update DNS Settings endpoints to manage this setting. Changes via the old endpoints will be reflected in the new ones, and vice versa, so there is no need to migrate existing zones. However, future API calls must use DNS Settings instead of the Zone Settings endpoints. Note that, with the deprecated zone setting, values "off" and "apex" ha

• Deprecation Mar 23, 2025, 12:00 AM

  API deprecations - Eligible Zones For Account Custom Nameservers

  Deprecation date: March 23, 2025 Users can now add custom nameservers that are not part of a zone managed within their account. As a result, any zone is eligible for custom nameservers, regardless of whether it is managed by Cloudflare. Given this change, an endpoint to check for eligible zones is no longer relevant and is therefore being deprecated. Deprecated APIs: GET /accounts/:account_id/custom_ns/availability

• Deprecation Mar 20, 2025, 12:00 AM

  API deprecations - Cloudflare Radar: Attack top industry and vertical endpoints

  Deprecation date: March 20, 2025 End of life date: September 20, 2025 The /top/industry and /top/vertical attack endpoints are now deprecated and will be replaced by the corresponding summary endpoints. Affected APIs: GET /radar/attacks/layer3/top/industry GET /radar/attacks/layer3/top/vertical GET /radar/attacks/layer7/top/industry GET /radar/attacks/layer7/top/vertical Replacements: GET /radar/attacks/layer3/summary/industry GET /radar/attacks/layer3/summary/vertical GET /radar/attacks/layer7/

• Deprecation Mar 17, 2025, 12:00 AM

  API deprecations - Security Center: Security level and Threat Score are now automated

  Change date: March 17, 2025 Cloudflare now combines the IP address threat signal with threshold and botnet data, no longer requiring you to set a sensitivity level. Users will no longer be able to set Security level via the Cloudflare dashboard. However, users can still rely on the existing API or Terraform configuration to set a Security level. If you are using threat score in rule expressions, you should review those expressions to make sure the rule still triggers when appropriate. Cloudflare

• Deprecation Mar 14, 2025, 12:00 AM

  API deprecations - Account Settings: default_nameservers and use_account_custom_ns_by_default

  Deprecation date: March 14, 2025 The fields "default_nameservers" and "use_account_custom_ns_by_default" within the "settings" object of accounts are deprecated. Instead, use the Show DNS Settings and Update DNS Settings endpoints to manage this setting. This setting is available in the new API as.zone_defaults.nameservers.type, with allowed values "cloudflare.standard", "cloudflare.standard.random", "custom.account" and "custom.tenant". Changes via the old endpoints will be reflected in the ne

• Deprecation Mar 11, 2025, 12:00 AM

  API deprecations - Cloudflare Radar: Layer 7 attack magnitude parameter

  Deprecation date: March 11, 2025 End of life date: June 11, 2025 The layer 7 attack magnitude query parameter, which allows you to define attack magnitude by total requests mitigated (MITIGATED_REQUESTS) or total zones attacked (AFFECTED_ZONES), is deprecated. Moving forward, Cloudflare Radar will only support defining layer 7 attack magnitude based on the total number of mitigated requests. Affected API: GET /radar/attacks/layer7/top/attacks Replacement: Users should stop using the magnitude pa

• Deprecation Feb 21, 2025, 12:00 AM

  API deprecations - DNS Records API: Changes to Filter Parameters

  Deprecation date: February 21, 2025 The following URL parameters for filtering DNS records are deprecated: name=contains:value Instead, use the supported name.contains=value syntax. name=starts_with:value Instead, use the supported name.startswith=value syntax. name=ends_with:value Instead, use the supported name.endswith=value syntax. name=one,two,three (searching for one of multiple possible names, separated by commas) Instead, make multiple requests, one for each possible name. Alternatively,

• Deprecation Dec 9, 2024, 12:00 AM

  API deprecations - Access applications: self_hosted_domains

  Deprecation date: November 21, 2025 The self_hosted_domains field for Access applications is deprecated in favor of destinations to allow for more flexibility in defining different types of domains. Before: { //... "self_hosted_domains": ["foo.example.com", "bar.example.com"] } After: { //... "destinations": [ { "type": "public", "uri": "foo.example.com" }, { "type": "public", "uri": "bar.example.com" } ] } The API will accept both fields until the deprecation date. If self_hosted_domains are

• Deprecation Nov 30, 2024, 12:00 AM

  API deprecations - Zone information in individual DNS records

  Deprecation date: November 30, 2024 Currently, each individual DNS record returned by the API contains information about the zone it is on, specifically the zone ID and name. { "result": [ { //... "zone_id": "ab922473c42f4e50819d7c1c9b81b16b", "zone_name": "example.com" } ], //... } This information is redundant because both affected API routes are already within the zone scope. In particular, the zone ID will already be known to any user of these routes because it appears in the URL. The zone

• Deprecation Oct 1, 2024, 12:00 AM

  API deprecations - DNS Records: Error chains for DNS validation errors

  Deprecation date: October 1, 2024 Cloudflare is making a minor change to the representation of certain errors when creating DNS records. Currently, when the DNS record to be created is invalid, an error similar to the following may be returned: { "result": null, "success": false, "errors": [ { "code": 1004, "message": "DNS Validation Error", "error_chain": [ { "code": 9999, "message": "This is an example." } ] } ], "messages": [] } After October 1st, 2024, the error_chain will be omitted, return

• Deprecation Sep 13, 2024, 12:00 AM

  API deprecations - Legacy DNS Settings Endpoints

  Deprecation date: September 13, 2024 The dedicated endpoints for DNS settings use_apex_ns and secondary_overrides are being deprecated. Instead, use the Show DNS Settings and Update DNS Settings endpoints to manage these settings. Instead of the.../use_apex_ns endpoint, use the multi_provider field. Instead of the.../secondary_overrides endpoint, use the secondary_overrides field. Deprecated APIs: GET /zones/:zone_id/dns_settings/use_apex_ns PATCH /zones/:zone_id/dns_settings/use_apex_ns GET /

• Deprecation Aug 15, 2024, 12:00 AM

  API deprecations - Brotli

  Deprecation date: August 15, 2024 The Brotli setting and its API endpoints are deprecated. Brotli compression is available for all non-Enterprise zones, and it will be extended to Enterprise zones in the coming year. Deprecated APIs: GET /zones/:zone_id/settings/brotli PATCH /zones/:zone_id/settings/brotli Enterprise customers can override Cloudflare's default compression behavior using Compression Rules.

• Deprecation Aug 5, 2024, 12:00 AM

  API deprecations - Auto Minify

  Deprecation date: August 5, 2024 The Auto Minify API endpoints are deprecated since the Auto Minify feature was deprecated. Deprecated APIs: GET /zones/:zone_id/settings/minify PATCH /zones/:zone_id/settings/minify

• Deprecation Jul 14, 2024, 12:00 AM

  API deprecations - DNS Records: 'locked' Field

  Deprecation date: July 14, 2024 The "locked" field of DNS records in API responses is unused and has been guaranteed to always be false for more than a year. This deprecation means that the field will be omitted from API responses entirely. If received from a client, the field will continue to be ignored, just as it is today. Modified API: GET /zones/:zone_id/dns_records POST /zones/:zone_id/dns_records GET /zones/:zone_id/dns_records/:dns_record_id PATCH /zones/:zone_id/dns_records/:dns_record_

• Deprecation Jun 30, 2024, 12:00 AM

  API deprecations - Mobile redirect

  Deprecation date: June 30, 2024 This endpoint and its related APIs are deprecated in favor of Single Redirects. Refer to Perform mobile redirects to migrate Mobile Redirect to Redirect Rules. Deprecated API: GET /zones/:zone_identifier/settings/mobile_redirect PATCH /zones/:zone_identifier/settings/mobile_redirect Replacement: Single Redirects

• Deprecation Jun 14, 2024, 12:00 AM

  API deprecations - Server-side Excludes

  Deprecation date: June 14, 2024 The Server-side Excludes feature and its API endpoints are deprecated. Deprecated APIs: GET /zones/:zone_id/settings/server_side_exclude PATCH /zones/:zone_id/settings/server_side_exclude

• Deprecation May 31, 2024, 12:00 AM

  API deprecations - Name-Related Data Fields on SRV (DNS) Records

  Deprecation date: May 31, 2024 The name of an SRV record normally consists of three parts: the service (e.g., _xmpp), the protocol (e.g., _tcp), and the base name (example.com). The complete name would then be, e.g., _xmpp._tcp.example.com. When interacting with DNS records through the API, SRV records contain both a full name as well as a data map containing the individual components of the name: { "name": "_xmpp._tcp.example.com", "data": { "service": "_xmpp", "proto": "_tcp", "name": "example

• Deprecation Mar 31, 2024, 12:00 AM

  API deprecations - Privacy Pass API Removal

  Deprecation date: March 31, 2024 In 2017, Cloudflare announced support for Privacy Pass, a recent protocol to let users prove their identity across multiple sites anonymously without enabling tracking. The initial use case was to provide untraceable tokens to sites to vouch for users who might otherwise have been presented with a CAPTCHA challenge. In the time since this release, Privacy Pass has evolved both at the IETF and within Cloudflare. The version announced in 2017 is now considered lega

• Deprecation Feb 4, 2024, 12:00 AM

  API deprecations - Argo Tunnel

  Deprecation date: February 4, 2024 This endpoint and its related APIs are deprecated in favor of the Cloudflare Tunnels equivalent APIs. Deprecated API: GET accounts/:account_identifier/tunnels POST accounts/:account_identifier/tunnels GET accounts/:account_identifier/tunnels/:tunnel_id DELETE accounts/:account_identifier/tunnels/:tunnel_id Replacement: Cloudflare Tunnel API

• Deprecation Jul 1, 2023, 12:00 AM

  API deprecations - ChaCha20 TLS Cipher Removal

  Deprecation date: July 1, 2023 Back in 2016, Cloudflare introduced support for ChaCha20-Poly1305 cipher suites for TLS 1.2. At the time, we introduced two variants of these new suites, the "standard" suites as defined by the IETF RFC 7905, and "draft" suites that followed an earlier draft of said specification. The draft suites were added for compatibility with some older Android devices that at the time did not yet support the proper ChaCha20-Poly1305 standard versions. This was in 2016, and in

• Deprecation Jul 1, 2023, 12:00 AM

  API deprecations - Transfer-Encoding and Content-Length headers

  Deprecation date: July 1, 2023 Previously, RFC 2616 allowed the use of Transfer-Encoding and Content-Length HTTP headers in the same request. RFC 7230 supersedes RFC 2616 and prohibits the use of Transfer-Encoding and Content-Length headers in the same request because they can cause HTTP request smuggling vulnerabilities. Starting on July 1st, 2023, Cloudflare will decline requests with both Transfer-Encoding and Content-Length HTTP headers.

• Deprecation Jun 6, 2023, 12:00 AM

  API deprecations - Account Billing Profile, User Billing Profile, and User Billing History

  Deprecation date: June 6, 2023 There is no API replacement for these endpoints. As an alternative, please log in to your Cloudflare account to view your: Invoices & Billing Email Billing subscriptions Billing profile payment info Deprecated API: GET accounts/{account_identifier}/billing/profile GET user/billing/profile GET user/billing/history

• Deprecation Apr 3, 2023, 12:00 AM

  API deprecations - Load Balancing - notification_email

  Deprecation date: April 3, 2023 This field is deprecated and has been moved to Cloudflare centralized notification service. notification_email is the email address to send health status notifications to. This can be an individual mailbox or a mailing list. Multiple emails can be supplied as a comma delimited list.

• Deprecation Mar 19, 2023, 12:00 AM

  API deprecations - Access Bookmark applications

  Deprecation date: March 19, 2023 This endpoint is deprecated in favor of using a specialized Access Application App Type API. Deprecated API: GET accounts/:identifier/access/bookmarks GET accounts/:identifier/access/bookmarks/:uuid POST accounts/:identifier/access/bookmarks/:uuid PUT accounts/:identifier/access/bookmarks/:uuid DELETE accounts/:identifier/access/bookmarks/:uuid Replacement: Access applications app type API

• Deprecation Oct 11, 2022, 12:00 AM

  API deprecations - Page Shield

  Deprecation date: October 11, 2022 Replace script_monitor in Page Shield API routes with page_shield.

• Deprecation Jul 1, 2022, 12:00 AM

  API deprecations - Cloudflare Images - Create authenticated direct upload URL v1

  Deprecation date: July 1, 2022 This endpoint is deprecated in favor of using v2, which allows you to control metadata, define an access policy, and get the image ID. Deprecated API: POST accounts/:account_identifier/images/v1/direct_upload Replacement: POST accounts/:account_identifier/images/v2/direct_upload

• Deprecation Mar 1, 2021, 12:00 AM

  API deprecations - Zone Analytics API

  Deprecation date: March 1, 2021 This API is deprecated in favor of the GraphQL Analytics API, which provides equivalent data and more features, including the ability to select only the metrics that you need. For more information, refer to the Zone analytics to GraphQL analytics migration guide. Deprecated API: GET zones/:zone_identifier/analytics/dashboard GET zones/:zone_identifier/analytics/colos Replacement: GraphQL Analytics API

• Deprecation Apr 2, 2020, 12:00 AM

  API deprecations - Organizations

  Deprecation date: April 2, 2020 This endpoint and its related APIs are deprecated in favor of the /accounts equivalent API, which has a broader range of features and is backwards compatible with the /organizations API. Deprecated API: GET organizations/:identifier PATCH organizations/:identifier GET organizations/:organization_identifier/invites POST organizations/:organization_identifier/invites GET organizations/:organization_identifier/invites/:identifier PATCH organizations/:organization_ide