Endpoints

To invoke a Cloudflare Firewall Rules API operation, append the endpoint to the Cloudflare API base URL:

https://api.cloudflare.com/client/v4/

For authentication instructions, refer to Getting Started: Requests in the Cloudflare API documentation.

For help with endpoints and pagination, refer to Getting Started: Endpoints.

The Cloudflare Firewall Rules API supports the operations outlined below. Visit the pages in this section for examples.

Operation	Method & Endpoint	Notes
Create firewall rules	`POST zones/<ZONE_ID>/firewall/rules`	Handled as a single transaction. If there is an error, the entire operation fails.
List firewall rules	`GET zones/<ZONE_ID>/firewall/rules`	Lists all current firewall rules. Results return paginated with 25 items per page by default. Use optional parameters to narrow results.
Get a firewall rule	`GET zones/<ZONE_ID>/firewall/rules/<RULE_ID>`	Retrieve a single firewall rule by ID.
Update firewall rules	`PUT zones/<ZONE_ID>/firewall/rules`	Handled as a single transaction. All rules must exist for operation to succeed. If there is an error, the entire operation fails.
Update a firewall rule	`PUT zones/<ZONE_ID>/firewall/rules/<RULE_ID>`	Update a single firewall rule by ID.
Delete firewall rules	`DELETE zones/<ZONE_ID>/firewall/rules`	Delete existing firewall rules. Must specify list of firewall rule IDs. Empty requests result in no deletion. Returns HTTP status code 200 if a specified rule does not exist.
Delete a firewall rule	`DELETE zones/<ZONE_ID>/firewall/rules/<RULE_ID>`	Delete a firewall rule by ID.