API request
APIRequest
is used 225
times on 99
pages.
Pages which use APIRequest
- src/content/partials/waf/leaked-credentials-detection-enable.mdx
- src/content/partials/ssl/forward-client-certificate.mdx
- src/content/partials/rules/origin-rules-api-change-host-header-dns-record.mdx
- src/content/partials/rules/origin-rules-api-change-port.mdx
- src/content/partials/networking-services/routing/configure-routes.mdx
- src/content/partials/networking-services/routing/configure-tunnels.mdx
- src/content/partials/networking-services/mconn/app-aware-policies/breakout-prioritized.mdx
- src/content/partials/dns/internal-reference-zone-api.mdx
- src/content/partials/byoip/service-bindings-account-info.mdx
- src/content/partials/byoip/service-bindings-create-binding.mdx
- src/content/docs/waf/tools/user-agent-blocking.mdx
- src/content/docs/waf/tools/zone-lockdown.mdx
- src/content/docs/waf/rate-limiting-rules/create-api.mdx
- src/content/docs/waf/managed-rules/waf-exceptions/define-api.mdx
- src/content/docs/waf/managed-rules/reference/exposed-credentials-check.mdx
- src/content/docs/waf/managed-rules/reference/sensitive-data-detection.mdx
- src/content/docs/waf/managed-rules/reference/owasp-core-ruleset/configure-api.mdx
- src/content/docs/waf/managed-rules/payload-logging/configure-api.mdx
- src/content/docs/waf/managed-rules/check-for-exposed-credentials/configure-api.mdx
- src/content/docs/waf/detections/malicious-uploads/api-calls.mdx
- src/content/docs/waf/detections/malicious-uploads/get-started.mdx
- src/content/docs/waf/detections/leaked-credentials/api-calls.mdx
- src/content/docs/waf/detections/leaked-credentials/get-started.mdx
- src/content/docs/waf/custom-rules/create-api.mdx
- src/content/docs/waf/custom-rules/skip/api-examples.mdx
- src/content/docs/waf/account/rate-limiting-rulesets/create-api.mdx
- src/content/docs/waf/account/managed-rulesets/index.mdx
- src/content/docs/waf/account/custom-rulesets/create-api.mdx
- src/content/docs/ssl/post-quantum-cryptography/pqc-to-origin.mdx
- src/content/docs/ssl/origin-configuration/ssl-modes/index.mdx
- src/content/docs/ssl/origin-configuration/authenticated-origin-pull/aws-alb-integration.mdx
- src/content/docs/ssl/origin-configuration/authenticated-origin-pull/set-up/manage-certificates.mdx
- src/content/docs/ssl/edge-certificates/geokey-manager/setup.mdx
- src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx
- src/content/docs/ssl/edge-certificates/additional-options/cipher-suites/customize-cipher-suites/api.mdx
- src/content/docs/ssl/client-certificates/byo-ca.mdx
- src/content/docs/ruleset-engine/rulesets-api/add-rule.mdx
- src/content/docs/ruleset-engine/rulesets-api/create.mdx
- src/content/docs/ruleset-engine/rulesets-api/delete-rule.mdx
- src/content/docs/ruleset-engine/rulesets-api/delete.mdx
- src/content/docs/ruleset-engine/rulesets-api/update-rule.mdx
- src/content/docs/ruleset-engine/rulesets-api/update.mdx
- src/content/docs/ruleset-engine/rulesets-api/view.mdx
- src/content/docs/ruleset-engine/managed-rulesets/override-managed-ruleset.mdx
- src/content/docs/ruleset-engine/managed-rulesets/override-examples/deploy-cmr-joomla-only.mdx
- src/content/docs/ruleset-engine/managed-rulesets/override-examples/deploy-cmr-wordpress-block.mdx
- src/content/docs/ruleset-engine/managed-rulesets/override-examples/enable-selected-rules.mdx
- src/content/docs/ruleset-engine/managed-rulesets/override-examples/override-ddos-rule-sensitivity.mdx
- src/content/docs/ruleset-engine/managed-rulesets/override-examples/override-ruleset-tag-rule.mdx
- src/content/docs/ruleset-engine/custom-rulesets/add-rules-ruleset.mdx
- src/content/docs/ruleset-engine/custom-rulesets/create-custom-ruleset.mdx
- src/content/docs/ruleset-engine/custom-rulesets/deploy-custom-ruleset.mdx
- src/content/docs/ruleset-engine/basic-operations/add-rule-phase-rulesets.mdx
- src/content/docs/ruleset-engine/basic-operations/deploy-rulesets.mdx
- src/content/docs/ruleset-engine/basic-operations/view-rulesets.mdx
- src/content/docs/rules/url-forwarding/single-redirects/create-api.mdx
- src/content/docs/rules/url-forwarding/bulk-redirects/create-api.mdx
- src/content/docs/rules/transform/url-rewrite/create-api.mdx
- src/content/docs/rules/transform/response-header-modification/create-api.mdx
- src/content/docs/rules/transform/request-header-modification/create-api.mdx
- src/content/docs/rules/transform/managed-transforms/configure.mdx
- src/content/docs/rules/snippets/create-api.mdx
- src/content/docs/rules/origin-rules/create-api.mdx
- src/content/docs/rules/custom-errors/api-calls.mdx
- src/content/docs/rules/custom-errors/create-rules.mdx
- src/content/docs/rules/custom-errors/example-rules.mdx
- src/content/docs/rules/configuration-rules/create-api.mdx
- src/content/docs/rules/compression-rules/examples/disable-all-brotli.mdx
- src/content/docs/rules/compression-rules/examples/disable-compression-avif.mdx
- src/content/docs/rules/compression-rules/examples/enable-zstandard.mdx
- src/content/docs/rules/compression-rules/examples/gzip-for-csv.mdx
- src/content/docs/rules/compression-rules/examples/only-brotli-url-path.mdx
- src/content/docs/rules/cloud-connector/create-api.mdx
- src/content/docs/page-shield/reference/page-shield-api.mdx
- src/content/docs/magic-wan/configuration/connector/network-options/network-segmentation.mdx
- src/content/docs/magic-wan/configuration/connector/network-options/dhcp/dhcp-relay.mdx
- src/content/docs/magic-wan/configuration/connector/network-options/dhcp/dhcp-server.mdx
- src/content/docs/magic-wan/configuration/connector/network-options/dhcp/dhcp-static-address-reservation.mdx
- src/content/docs/magic-network-monitoring/get-started.mdx
- src/content/docs/magic-network-monitoring/tutorials/encrypt-network-flow-data.mdx
- src/content/docs/dns/zone-setups/zone-transfers/cloudflare-as-secondary/dnssec-for-secondary.mdx
- src/content/docs/dns/zone-setups/zone-transfers/cloudflare-as-secondary/proxy-traffic.mdx
- src/content/docs/dns/zone-setups/zone-transfers/cloudflare-as-primary/dnssec-for-primary.mdx
- src/content/docs/dns/zone-setups/zone-transfers/cloudflare-as-primary/setup.mdx
- src/content/docs/dns/nameservers/custom-nameservers/tenant-custom-nameservers.mdx
- src/content/docs/dns/foundation-dns/setup.mdx
- src/content/docs/dns/dnssec/dnssec-active-migration.mdx
- src/content/docs/dns/dnssec/enable-nsec3.mdx
- src/content/docs/dns/dnssec/multi-signer-dnssec/setup.mdx
- src/content/docs/dns/dns-firewall/random-prefix-attacks/setup.mdx
- src/content/docs/cloudflare-one/identity/service-tokens.mdx
- src/content/docs/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles.mdx
- src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/waf-for-saas/index.mdx
- src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/performance/early-hints-for-saas.mdx
- src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/domain-support/custom-metadata.mdx
- src/content/docs/china-network/reference/infrastructure.mdx
- src/content/docs/byoip/service-bindings/cdn-and-spectrum.mdx
- src/content/docs/byoip/address-maps/setup.mdx
- src/content/docs/aegis/setup.mdx
import { APIRequest } from "~/components";
Required API token permissions
At least one of the following token permissions
is required:
Account API Gateway
Domain API Gateway
curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/api_gateway/settings/schema_validation" \ --request PUT \ --header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \ --json '{ "validation_default_mitigation_action": "block" }'
Required API token permissions
At least one of the following token permissions
is required:
SSL and Certificates Write
curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/hostnames/settings/ciphers/$HOSTNAME" \ --request DELETE \ --header "X-Auth-Email: $CLOUDFLARE_EMAIL" \ --header "X-Auth-Key: $CLOUDFLARE_API_KEY"
Required API token permissions
At least one of the following token permissions
is required:
Images Write
curl "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/images/v2/direct_upload" \ --request POST \ --header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \ --form "requireSignedURLs=true" \ --form "metadata={\"key\":\"value\"}"
Required API token permissions
At least one of the following token permissions
is required:
Cloud Connector Write
curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/cloud_connector/rules" \ --request PUT \ --header "X-Auth-Email: $CLOUDFLARE_EMAIL" \ --header "X-Auth-Key: $CLOUDFLARE_API_KEY" \ --json '[ { "expression": "http.request.uri.path wildcard \"/images/*\"", "provider": "cloudflare_r2", "description": "Connect to R2 bucket containing images", "parameters": { "host": "mybucketcustomdomain.example.com" } } ]'
Required API token permissions
At least one of the following token permissions
is required:
Page Shield
Domain Page Shield Read
Domain Page Shield
Page Shield Read
Zone Settings Write
Zone Settings Read
curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/page_shield/scripts?direction=asc" \ --request GET \ --header "X-Auth-Email: $CLOUDFLARE_EMAIL" \ --header "X-Auth-Key: $CLOUDFLARE_API_KEY"
import { APIRequest } from "~/components";
<APIRequest path="/zones/{zone_id}/api_gateway/settings/schema_validation" method="PUT" json={{ validation_default_mitigation_action: "block", }} code={{ mark: [5, "block"] }}/>
<APIRequest path="/zones/{zone_id}/hostnames/settings/{setting_id}/{hostname}" method="DELETE" parameters={{ setting_id: "ciphers", }}/>
<APIRequest path="/accounts/{account_id}/images/v2/direct_upload" method="POST" form={{ requireSignedURLs: true, metadata: '{"key":"value"}', }}/>
<APIRequest path="/zones/{zone_id}/cloud_connector/rules" method="PUT" json={[ { expression: 'http.request.uri.path wildcard "/images/*"', provider: "cloudflare_r2", description: "Connect to R2 bucket containing images", parameters: { host: "mybucketcustomdomain.example.com", }, }, ]}/>
<APIRequest path="/zones/{zone_id}/page_shield/scripts" method="GET" parameters={{ direction: "asc", }}/>
required
type: string
The path for the API endpoint.
This can be found in our API documentation ↗, under the name of the endpoint.
required
type: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD"
The HTTP method to use.
type: Record<string, any>
The parameters to substitute - either in the URL path or as query parameters.
For example, /zones/{zone_id}/page_shield/scripts
can be transformed into /zones/123/page_shield/scripts?direction=asc
with the following:
parameters={{ zone_id: "123", direction: "asc"}}
If not provided, the component will default to an environment variable. For example, {setting_id}
will be replaced with $SETTING_ID
.
type: Record<string, any> | Record<string, any>[]
The JSON payload to send.
If required properties are missing, the component will throw an error.
type: Record<string, any>
The FormData payload to send.
This field is not currently validated against the schema.
type: object
An object of Expressive Code props, the following props are available:
Was this helpful?
- Resources
- API
- New to Cloudflare?
- Products
- Sponsorships
- Open Source
- Support
- Help Center
- System Status
- Compliance
- GDPR
- Company
- cloudflare.com
- Our team
- Careers
- 2025 Cloudflare, Inc.
- Privacy Policy
- Terms of Use
- Report Security Issues
- Trademark