Endpoints

To invoke a Cloudflare Firewall Rules API operation, append the endpoint to the Cloudflare API base URL:

https://api.cloudflare.com/client/v4/

For authentication instructions, refer to Getting Started: Requests in the Cloudflare API documentation.

For help with endpoints and pagination, refer to Getting Started: Endpoints.

Note

The Firewall Rules API endpoints require a value for <ZONE_ID>.

To retrieve a list of zones associated with your account, use the List Zones operation and note the zone ID associated with the domain whose firewall rules you want to manage.

The Cloudflare Firewall Rules API supports the operations outlined below. Visit the pages in this section for examples.

Operation	Method & Endpoint	Notes
Create firewall rules	POST zones/<ZONE_ID>/firewall/rules	Handled as a single transaction. If there is an error, the entire operation fails.
List firewall rules	GET zones/<ZONE_ID>/firewall/rules	Lists all current firewall rules. Results return paginated with 25 items per page by default. Use optional parameters to narrow results.
Get a firewall rule	GET zones/<ZONE_ID>/firewall/rules/<RULE_ID>	Retrieve a single firewall rule by ID.
Update firewall rules	PUT zones/<ZONE_ID>/firewall/rules	Handled as a single transaction. All rules must exist for operation to succeed. If there is an error, the entire operation fails.
Update a firewall rule	PUT zones/<ZONE_ID>/firewall/rules/<RULE_ID>	Update a single firewall rule by ID.
Delete firewall rules	DELETE zones/<ZONE_ID>/firewall/rules	Delete existing firewall rules. Must specify list of firewall rule IDs. Empty requests result in no deletion. Returns HTTP status code 200 if a specified rule does not exist.
Delete a firewall rule	DELETE zones/<ZONE_ID>/firewall/rules/<RULE_ID>	Delete a firewall rule by ID.