Service Key authentication for the Cloudflare API is deprecated. Service Keys will stop working on September 30, 2026.
API Tokens replace Service Keys with fine-grained permissions, expiration, and revocation.
What you need to do
Replace any use of the X-Auth-User-Service-Key header with an API Token scoped to the permissions your integration requires.
If you use cloudflared, update to a version from November 2022 or later. These versions already use API Tokens.
If you use origin-ca-issuer, update to a version that supports API Token authentication.
For more information, refer to API deprecations.
Source: Cloudflare
Latest Posts
- Amazon ECS adds Amazon VPC Lattice support for blue/green, linear, and canary deployments
- MC1166852: Microsoft Viva Copilot Analytics Adds Agent Dashboard for Adoption and Credit Insights
- Access, Cloudflare One – New strict service token authentication setting for Access
- Rules – hash_in_range() is globally available for HTTP products
