API

Cloudflare OAuth now supports optional scopes, giving users more control over what an app can access and helping developers build secure consent flows around the task at hand.

Miller Vargas, Adam Bouhmad, and José Enrique Rodríguez

Cloudflare has launched a new Billable Usage API for accounts, giving developers and FinOps teams single-endpoint programmatic visibility into cost and usage across all self-serve products. Built around the FOCUS specification, track spend seamlessly alongside the rest of your cloud stack.

Ryan Noel, Zunayed Ali, and Filipa Nóbrega

Last year we made every Cloudflare server a Media over QUIC (MoQ) relay. Now the new provisioning API lets you create your own isolated relay and control who can publish and who can only watch.

Jacob Curtis, Manish Pandit, and Mike English

Self-Managed OAuth is now available to all developers on Cloudflare. Here's how we executed a zero-downtime migration of our core OAuth engine to make it happen.

Sam Cabell, Mike Escalante, Adam Bouhmad, and Nick Comer

Agents Week 2026 is a wrap. Let’s take a look at everything we announced, from compute and security to the agent toolbox, platform tools, and the emerging agentic web. Everything we shipped for the agentic cloud.

Ming Lu and Anni Wang

The Cloudflare Registrar API is now in beta. Developers and AI agents can search, check availability, and register domains at cost directly from their editor, their terminal, or their agent — without leaving their workflow.

Ankit Shah and Carlos Armada

We’re introducing cf, a new unified CLI designed for consistency across the Cloudflare platform, alongside Local Explorer for debugging local data. These tools simplify how developers and AI agents interact with our nearly 3,000 API operations.

Matt “TK” Taylor, Dimitri Mitropoulos, and Dan Carter

Cloudflare’s new Web and API Vulnerability Scanner helps teams proactively find logic flaws. By using AI to build API call graphs, we identify vulnerabilities that standard defensive tools miss.

John Cosgrove, Alex Povel, and Malte Reddig

The Web streams API has become ubiquitous in JavaScript runtimes but was designed for a different era. Here's what a modern streaming API could (should?) look like.

James M Snell

Announcing a new self-serve API for Bring Your Own IP (BYOIP), giving customers unprecedented control and flexibility to onboard, manage, and use their own IP prefixes with Cloudflare's services.

Ash Pallarito, Lynsey Haynes, and Gokul Unnikrishnan

Cloudflare Radar has evolved significantly since its 2020 launch, offering deeper insights into Internet security, routing, and traffic with new tools and data that help anyone understand what's happening online.

David Belson

We’ve partnered with marimo to bring their best-in-class Python notebook experience to your Cloudflare data.

Carlos Rodrigues, Jorge Pacheco, Keith Adler, Akshay Agrawal, and Myles Scolnick

IPv4 is expensive, and moving network resources around is hard. Previously, when customers wanted to use multiple Cloudflare services, they had to bring a new address range.

Mark Rodgers, Sphoorti Metri, and Ash Pallarito

We are closing the cleartext HTTP ports entirely for Cloudflare API traffic. This prevents the risk of clients unintentionally leaking their secret API keys in cleartext during the initial request.

Suleman Ahmad, Ash Pallarito, and Algin Martin

DNS records have moved to a new database, bringing improved performance and reliability to all customers.

Alex Fattouche and Corey Horton

The Cloudflare Terraform provider used to be manually maintained. With the help of our existing OpenAPI code generation pipeline, we’re now automatically generating the provider for better

Jacob Bednarz

In response to customer demand, we now support the ability to DELETE, PATCH, PUT and POST multiple DNS records in a single API call, enabling more efficient and reliable zone management.

Alex Fattouche

Cloudflare’s updated 2024 view on Internet cyber security trends spanning global traffic insights, bot traffic insights, API traffic insights, and client-side risks

Michael Tremante, Sabina Zejnilovic, and Catherine Newcomb