apiPulse.app

Cloudflare

Cloudflare developer platform and API changelog updates

Cloudflare API Changelog Monitoring

Cloudflare changes can impact edge behavior, DNS workflows, security automation, and API-driven infrastructure management. This Cloudflare API Changelog Monitoring page gives teams one place to review new platform updates and assess operational risk quickly.

Effective Cloudflare API Changelog Monitoring gives infrastructure teams earlier visibility into changes that might influence deployment flows, zone automation, or security controls. The result is a tighter response loop when something needs testing, rollout planning, or internal communication.

The benefit of Cloudflare API Changelog Monitoring is simple: your team gets a repeatable way to watch changes, evaluate risk, and act before small upstream updates turn into customer-facing bugs. Cloudflare developer platform and API changelog updates

Cloudflare API down?

Cloudflare API down? Soon we will add direct API status monitoring alongside Cloudflare API Changelog Monitoring. For now, go to the official API status page on the Cloudflare website. In the future, we plan to detect potential outages even before the public status page is updated.

Recent changes

Showing the last 10 changes from this feed.

10-15-2026

Cloudflare One - Validate data loss prevention matches with Cloudflare Workers

Data loss prevention (DLP) custom pattern entries can use Cloudflare Workers in your account to validate matches with organization-specific logic. Your Worker can adjust a match's confidence or reject the match. For setup steps and the Worker contract, refer to Validate data loss prevention matches with Cloudflare Workers.

10-15-2026

Cloudflare One, Gateway - Application Library now supports custom applications

Starting today, you can create custom applications in the Application Library and reference them in Gateway DNS, Network, and HTTP policies. You can define an application with hostnames, IP subnets, or both. Then, optionally add TCP or UDP ports or port ranges to restrict HTTP and Network matching. This release also improves search and filtering in the Application Library, updates the interfaces, data, and metrics used to review applications, and makes it easier to select and manage applications in the Gateway policy builder. For more information, refer to Custom applications and Applications and app types.

10-15-2026

Cloudflare One, Workers, Gateway - Gateway and Workers integration is now in public beta

Cloudflare Gateway now integrates with Cloudflare Workers in public beta on all Zero Trust plans. You can use the Forward action in Gateway HTTP policies to run your own code on matching, permitted traffic without managing a separate proxy. The Forward action lets you transform HTTP requests and responses, return a coaching page, or run background tasks such as Slack notifications and R2 captures. Your Worker receives the request and Gateway context, including connection metadata, user identity, and device posture when available. Gateway handles the proxy connection, TLS decryption, and upstream routing. It evaluates HTTP request policies before Forward policies and inspects the final response before returning it to the user. Gateway inspects the original request body before delivering it to your Worker. A body-inspection Block decision can interrupt the Worker. To get started, deploy a Worker and configure a Forward policy, or adapt one of the Worker templates.

10-15-2026

Cloudflare WAN, Magic Transit, Cloudflare One - BGP route filtering for IPsec and GRE tunnels

Cloudflare WAN and Magic Transit IPsec and GRE tunnels now support BGP import and export filtering. Create reusable filter profiles that specify an allow or deny action and a list of Classless Inter-Domain Routing (CIDR) targets with exact, more-specific, or prefix-length matching. Each tunnel supports one import filter and one export filter. You can create and assign profiles through the dashboard, API, or Terraform. Profile changes apply without resetting the BGP session. For configuration details, refer to: Filter BGP routes for Cloudflare WAN Filter BGP routes for Magic Transit

10-15-2026

Stream - Ultra-low latency live with WebRTC is now Generally Available in Stream

Stream WebRTC support ↗︎ lets you deliver high quality live video to thousands of concurrent viewers in milliseconds. WebRTC is compatible with native Web APIs and standard protocols, so creators can go live from a browser ↗︎ without needing a separate broadcast application. This powers platforms to build custom experiences with deep feature integration for creators as well as viewers. Here's how to get started with a Stream live input and a browser. Usage-based billing for WebRTC begins today, October 15, 2026 and follows the standard rates for minutes of video delivered. Refer to pricing ↗︎ for rates. What changed While in beta, Stream’s WebRTC support was rebuilt from the ground up to leverage Cloudflare Realtime ↗︎’s primitives for stability and scale while managing these components in Stream’s familiar, unified API that makes it easy to build. We also adopted the latest WHIP and WHEP protocol standards for Trickle ICE, server and client offer modes, and counter-offer support for improved player library compatibility and network traversal adaptability. Finally, WebRTC delivery will now be visible in Stream’s analytics ↗︎ and billable usage charts. How does this relate to Cloudflare Realtime Realtime exposes a set of tools and primitives to build applications that connect people, AI systems, and devices together in many-to-many experiences powered by WebRTC. Stream leverages these building-blocks to deliver one-to-many broadcast capabilities, controlled and managed by a single, unified API with features like the built-in player ↗︎ and analytics ↗︎ that make it easy to get started. How do I get started First, create a live input ↗︎ using cf ↗︎, the API, or in the Stream Dashboard ↗︎: Creating a live input with cf or APIsh# Using cf, the new Cloudflare CLI cf stream live-inputs create # Using an API request, curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/stream/live_inputs \ -H 'Content-Type: application/json' \ -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \ -X POST The response will include webRTC and webRTCPlayback properties, each containing a url for WHIP (broadcast) and WHEP (playback) respectively. Next, you can go live using WHIP directly from a browser or supported broadcast software. Refer to our new tutorial ↗︎ that shows a dependency-free way to broadcast live video with browser-native JavaScript. Finally, you can play using WHEP using Stream’s built-in player ↗︎, a supported player app/library, or simple JavaScript: Abbreviated JavaScript playback examplejs const pc = new RTCPeerConnection(); // 1. Ask to receive one audio track and one video track. pc.addTransceiver("video", { direction: "recvonly" }); pc.addTransceiver("audio", { direction: "recvonly" }); // 2. Attach incoming media to the video element as it arrives. const stream = new MediaStream(); document.getElementById("playback-video").srcObject = stream; pc.ontrack = (event) => stream.addTrack(event.track); // 3. Create the SDP offer and set it as the local description. const offer = await pc.createOffer(); await pc.setLocalDescription(offer); // 4. POST the offer to the WHEP endpoint. const response = await fetch(WHEP_URL, { method: "POST", headers: { "Content-Type": "application/sdp" }, body: offer.sdp, }); // 5. Apply the SDP answer returned by Cloudflare. const answer = await response.text(); await pc.setRemoteDescription({ type: "answer", sdp: answer }); Learn more in the Stream WebRTC ↗︎ docs or try the all-in-one tutorial ↗︎ for yourself.

10-15-2026

Workers AI, Realtime - Pipecat PhoneLLM Mini now available on Workers AI

@cf/daily-co/phonellm-mini-alpha-2, a model from the Pipecat ↗︎ team at Daily, is now available on Workers AI. PhoneLLM is built for voice agents and other realtime AI applications, where a model has to reply quickly and call the right tool mid-conversation. In a voice agent, the language model sits between speech-to-text and text-to-speech, so every second it takes adds to the caller's wait. Developers usually choose between a fast model without reasoning mode, which can miss instructions or tool calls, and a slower model in reasoning mode, which handles both well. Pipecat post-trained NVIDIA Nemotron 3 Nano 30B on phone and customer support scenarios so PhoneLLM follows instructions and calls tools better without reasoning mode. You can use PhoneLLM through the Workers AI binding (env.AI.run()) or the REST API at /ai/run. Pipecat recommends temperature: 0. Also set chat_template_kwargs: { enable_thinking: false }. Run a voice agent with Pipecat on Workers Pipecat ↗︎ is an open-source Python framework for building voice agents. Now that Python Workers are generally available, you can run a Pipecat voice agent on Cloudflare. Our Pipecat voice agent example ↗︎ runs in a Durable Object and uses WebRTC as the voice transport through the Realtime SFU. It uses DeepSeek V4 Flash by default. To deploy it with PhoneLLM, give this prompt to your coding agent: Copy promptPrompt copied! For more information, refer to the PhoneLLM Mini model page, Pipecat's model card ↗︎, and Workers AI pricing.

10-15-2026

Workers, Pages - GitHub repository picker reflects your access

When you connect a GitHub repository to Workers Builds or Pages, Cloudflare may ask you to authenticate or reauthenticate with GitHub. The repository picker then shows only the organizations and repositories that your GitHub user can access. Existing repository connections remain connected. Builds from those connections continue without requiring reauthentication. For more information, refer to the Workers Builds GitHub integration and Pages GitHub integration.

10-14-2026

Access, Cloudflare One - Account context in Access deny redirects

App-aware Cloudflare Access deny redirects include an account_id query parameter when account context is available. Custom block pages can use it to identify the account that owns the application represented by kid. For example, a custom redirect can include: https://denied.example.com/?kid=&account_id=&original_url=app.example.com%2Fadmin The account ID helps block-page integrations look up applications through account-scoped APIs. It is context, not proof of authentication or authorization. For parameter descriptions and an example, refer to Custom redirect URL parameters.

10-14-2026

Cloudflare One, Access - Infrastructure applications support a configurable session duration

Infrastructure applications now have a configurable session duration with a default value of 24 hours. You can set the session duration when creating or editing an infrastructure application in the dashboard or via the API. When the session duration elapses, any active SSH connections through that application will be closed, and users will need to reconnect. Previously, infrastructure applications did not enforce a session duration limit. Sessions could persist beyond 24 hours in some cases, but were never guaranteed beyond 10 hours due to Gateway connection limits. When a target matches multiple infrastructure applications, the shortest session duration applies. For more information, refer to Session duration.

10-14-2026

DNS - Configure Advanced Custom Nameservers with nameserver sets (beta)

Nameserver sets are now available in beta to Enterprise accounts. A nameserver set groups two to five custom nameserver names with Cloudflare-assigned IP addresses. You can assign the set to zones in the same account. Enterprise customers using Cloudflare DNS can create Advanced Custom Nameserver sets. These sets distribute addresses across Advanced anycast network groups to improve resiliency. Compared to legacy custom_ns sets, modern nameserver sets offer several advantages: Sets are reusable objects. Accounts are no longer limited to 5 numbered sets. Create a set once and assign it to one or more zones in the same account. Custom address counts. Assign each nameserver up to 3 IPv4 and 3 IPv6 addresses. This allows for more flexible setups. Diverse addresses. IPv4 and IPv6 addresses are now both selected from a diverse set of prefixes for increased redundancy. Support for Advanced Custom Nameservers. Set advanced to true to allocate addresses from Advanced anycast network groups, providing the same benefits as Cloudflare branded Advanced nameservers to your custom nameservers. Explicit changes. Sets are immutable, so adding or removing a nameserver name never changes the configuration of zones that already use a set. Create a set by sending a POST request to /accounts/{account_id}/dns_settings/nameserver_sets with the following body: { "advanced": true, "ip_set": 1, "nameservers": [ { "name": "ns1.example.com" }, { "name": "ns2.example.com" }, { "name": "ns3.example.com" } ] } Then, send a PATCH request to /zones/{zone_id}/dns_settings with the returned nameserver set ID: { "nameservers": { "type": "custom", "nameserver_set_id": "0123456789abcdef0123456789abcdef" } } This configures the zone to use the nameserver set. For more information, including other setup steps, refer to Nameserver sets. Legacy custom_ns sets remain supported. A single account can use both.