PHP Client for Cloudflare API
Client Reference

DNSSEC

DNSSEC endpoint reference.

Get

Details about DNSSEC status and configuration.

ParamTypeRequiredDefaultDescription
zoneIdstringYesZone Identifier.
php
$response = $client->dnssec()->get('ZONE_ID');
View this operation on the Cloudflare API Reference

Edit

Enable or disable DNSSEC.

ParamTypeRequiredDefaultDescription
zoneIdstringYesZone Identifier.
statusstringYesStatus of DNSSEC, based on user-desired state and presence of necessary records. Allowed values: `active`, `disabled`
multiSignerboolNofalseIf true, multi-signer DNSSEC is enabled on the zone, allowing multiple providers to serve a DNSSEC-signed zone at the same time. This is required for DNSKEY records (except those automatically generated by Cloudflare) to be added to the zone. See [Multi-signer DNSSEC](https://developers.cloudflare.com/dns/dnssec/multi-signer-dnssec/) for details.
presignedboolNofalseIf true, allows Cloudflare to transfer in a DNSSEC-signed zone including signatures from an external provider, without requiring Cloudflare to sign any records on the fly. Note that this feature has some limitations. See [Cloudflare as Secondary](https://developers.cloudflare.com/dns/zone-setups/zone-transfers/cloudflare-as-secondary/setup/#dnssec) for details.
php
$response = $client->dnssec()->edit('ZONE_ID', 'STATUS', true, true);
View this operation on the Cloudflare API Reference

Delete

Delete DNSSEC.

ParamTypeRequiredDefaultDescription
zoneIdstringYesZone Identifier.
php
$response = $client->dnssec()->delete('ZONE_ID');
View this operation on the Cloudflare API Reference
Copyright © 2026