Cloudflare Fundamentals

Service Key authentication for the Cloudflare API is deprecated. Service Keys will stop working on September 30, 2026. API Tokens replace Service Keys with fine-grained permissions, expiration, and revocation. What you need to do Replace any use of the X-Auth-User-Service-Key…

Cloudflare dashboard SCIM provisioning operations are now captured in Audit Logs v2, giving you visibility into user and group changes made by your identity provider. Logged actions: Action TypeDescriptionCreate SCIM UserUser provisioned from IdPReplace SCIM UserUser fully replaced (PUT)Update SCIM…

Fine-grained permissions for Access policies and Access service tokens are available. These new resource-scoped roles expand the existing RBAC model, enabling administrators to grant permissions scoped to individual resources. New roles Cloudflare Access policy admin: Can edit a specific Access…

Cloudflare-generated 1xxx error responses now include a standard Retry-After HTTP header when the error is retryable. Agents and HTTP clients can read the recommended wait time from response headers alone — no body parsing required. Changes Seven retryable error codes…

Cloudflare-generated 1xxx errors now return structured JSON when clients send Accept: application/json or Accept: application/problem+json. JSON responses follow RFC 9457 (Problem Details for HTTP APIs), so any HTTP client that understands Problem Details can parse the base members without Cloudflare-specific…

Cloudflare now returns structured Markdown responses for Cloudflare-generated 1xxx errors when clients send Accept: text/markdown. Each response includes YAML frontmatter plus guidance sections (What happened / What you should do) so agents can make deterministic retry and escalation decisions without…