Firewall Rules API

Use the Firewall Rules API to programmatically manage your rules.

Deprecation notice

Firewall rules have been deprecated. Cloudflare has moved existing firewall rules to WAF custom rules. For more information on this change, refer to the migration guide.

When working with the Firewall Rules API, refer to these topics for additional context:

• Firewall rules actions
• Cloudflare Filters API

To get started with the API, review the Firewall Rules API JSON object and Endpoints.

For more information on the Rules language used to write rule expressions, refer to Rules language in the Ruleset Engine documentation.

Differences from other Cloudflare APIs

The Firewall Rules API behaves differently from most Cloudflare APIs in two ways:

• API calls accept and return multiple items, and allow applying data changes to multiple items.
• Although API calls return the standard response, the error object follows the JSON API standard ↗, such that in an error condition, it is clear which item produced the error and why.