API

Self-Managed OAuth is now available to all developers on Cloudflare. Here's how we executed a zero-downtime migration of our core OAuth engine to make it happen.

Sam Cabell, Mike Escalante, Adam Bouhmad, and Nick Comer

Agents Week 2026 is a wrap. Let’s take a look at everything we announced, from compute and security to the agent toolbox, platform tools, and the emerging agentic web. Everything we shipped for the agentic cloud.

Ming Lu and Anni Wang

The Cloudflare Registrar API is now in beta. Developers and AI agents can search, check availability, and register domains at cost directly from their editor, their terminal, or their agent — without leaving their workflow.

Ankit Shah and Carlos Armada

We’re introducing cf, a new unified CLI designed for consistency across the Cloudflare platform, alongside Local Explorer for debugging local data. These tools simplify how developers and AI agents interact with our nearly 3,000 API operations.

Matt “TK” Taylor, Dimitri Mitropoulos, and Dan Carter

Cloudflare’s new Web and API Vulnerability Scanner helps teams proactively find logic flaws. By using AI to build API call graphs, we identify vulnerabilities that standard defensive tools miss.

John Cosgrove, Alex Povel, and Malte Reddig

The Web streams API has become ubiquitous in JavaScript runtimes but was designed for a different era. Here's what a modern streaming API could (should?) look like.

James M Snell

Announcing a new self-serve API for Bring Your Own IP (BYOIP), giving customers unprecedented control and flexibility to onboard, manage, and use their own IP prefixes with Cloudflare's services.

Ash Pallarito, Lynsey Haynes, and Gokul Unnikrishnan

Cloudflare Radar has evolved significantly since its 2020 launch, offering deeper insights into Internet security, routing, and traffic with new tools and data that help anyone understand what's happening online.

David Belson

We’ve partnered with marimo to bring their best-in-class Python notebook experience to your Cloudflare data.

Carlos Rodrigues, Jorge Pacheco, Keith Adler, Akshay Agrawal, and Myles Scolnick

IPv4 is expensive, and moving network resources around is hard. Previously, when customers wanted to use multiple Cloudflare services, they had to bring a new address range.

Mark Rodgers, Sphoorti Metri, and Ash Pallarito

We are closing the cleartext HTTP ports entirely for Cloudflare API traffic. This prevents the risk of clients unintentionally leaking their secret API keys in cleartext during the initial request.

Suleman Ahmad, Ash Pallarito, and Algin Martin

DNS records have moved to a new database, bringing improved performance and reliability to all customers.

Alex Fattouche and Corey Horton

The Cloudflare Terraform provider used to be manually maintained. With the help of our existing OpenAPI code generation pipeline, we’re now automatically generating the provider for better

Jacob Bednarz

In response to customer demand, we now support the ability to DELETE, PATCH, PUT and POST multiple DNS records in a single API call, enabling more efficient and reliable zone management.

Alex Fattouche

Cloudflare’s updated 2024 view on Internet cyber security trends spanning global traffic insights, bot traffic insights, API traffic insights, and client-side risks

Michael Tremante, Sabina Zejnilovic, and Catherine Newcomb

Developer Week 2024 has officially come to a close. Here’s a quick recap of the announcements and in-depth technical explorations that went out last week

Phillip Jones

Discover the enhanced URL Scanner API: Now with direct access from the Security Center Investigate Portal, enjoy unlisted scans, multi-device screenshots, and seamless integration within the Cloudflare ecosystem

Sofia Cardita and Alexandra Moraru

We are back with a quarterly update of our Application Security report. Read on to learn about new attack trends and insights visible from Cloudflare’s global network

Michael Tremante, David Belson, and Sabina Zejnilovic