Overview
About
Actions
Order and priority
IP Lists
Manage rules in the dashboard
Create, edit, and delete rules
Edit rule expressions
Preview rules
Use IP Lists

Manage lists
Manage IP List items
Use lists in expressions

Create a mTLS rule
Manage rules via the APIs
Firewall Rules API

JSON object
Endpoints
POST example
GET examples
PUT examples
DELETE examples

Cloudflare Filters API

What is a filter?
JSON object
Endpoints
POST example
GET examples
PUT examples
DELETE examples
Expression validation

Rules Lists API

JSON object
Endpoints

Call sequence
Common use cases
Block Microsoft Exchange Autodiscover requests
Block requests based on IP reputation
Challenge bad bots
Exempt partners from Hotlink Protection
Require a specific cookie
Require a valid HMAC token
Require specific HTTP headers
Require specific HTTP ports
Site administration — Require known IP addresses
Stop R-U-Dead-Yet? (R.U.D.Y.) attacks
Update firewall rules for customers or partners
FAQ

Manage firewall rules via the APIs

When it comes to programmatic firewall rule management, Cloudflare offers APIs that work together to achieve the same effect as the UI-based Firewall rules feature in Security.

These APIs are the following:

Firewall Rules API : Manage firewall rules and their actions, based on criteria separately defined through filters.
Filters API : Manage the filters that enable rule matching.
Rules Lists API : Manage named lists of IP addresses that you can use within firewall rules to filter traffic.