PHP Client for Cloudflare API

Coverage

How much of the Cloudflare API this package covers, measured against Cloudflare's OpenAPI schema.

This package implements 465 of the 3054 operations Cloudflare documents (15%), across 39 of its 166 API resources.

Measured against Cloudflare's published OpenAPI schema — version 4.0.0, read 2026-08-15 — by matching every request path in this package against the paths the schema documents. The 280 operations Cloudflare marks deprecated are left out of the counts below.

Generated by composer docs:generate-coverage. Every number is computed from the endpoint classes and the schema, so this page cannot drift from the code.

Covered

ResourceOperationsEndpoints
Zone Settings53 / 53allzones/settings accounts/settings google-tag-gateway zaraz
User47 / 47alluser/access-rules user/load-balancers/monitors user/load-balancers/pools user/subscriptions user/tokens user user/audit-logs user/communication-preferences user/invites user/load-balancers user/tenants user/tokens/permission-groups user/tokens/value
Load Balancers42 / 42allload-balancers/monitor-groups load-balancers/monitors load-balancers/pools load-balancers load-balancers/previews load-balancers/regions load-balancers/searches
Workers37 / 11432%workers/domains workers/scripts workers/logs workers/routes workers/settings durable-objects workers/deployments workers/cron workers/versions workers/subdomain
R233 / 33allr2/buckets r2/cors r2/custom-domains r2/objects r2/sippy r2/managed-domain r2/jobs r2/lifecycle r2/local-uploads r2/lock r2/metrics
Rulesets32 / 32allrulesets rulesets/rules rulesets/versions rulesets/phases
Firewall19 / 19allaccounts/access-rules firewall/access-rules firewall/lockdowns firewall/ua-rules
Organizations18 / 18allorganizations organizations/members accounts organizations/billing/usage organizations/logs/audit organizations/profile
IAM17 / 17alliam/resource-groups iam/user-groups iam/user-groups/members iam/permission-groups
DNS Records14 / 14alldns
Workers KV13 / 13allkv
Cache13 / 13allcache/smart-tiered-cache cache/variants cache/cache-reserve cache/regional-tiered-cache
D112 / 12alld1
Tunnel Routing11 / 11allzero-trust/networks/routes zero-trust/networks/virtual-networks
SSL/TLS11 / 11allssl/certificate-packs ssl
Tokens8 / 8allaccounts/tokens accounts/tokens/permission-groups accounts/tokens/value
Tenants8 / 8alltenants/custom-nameservers tenants tenants/account-types tenants/accounts tenants/entitlements tenants/memberships
OAuth Clients7 / 7alliam/oauth-clients
Zones7 / 7allzones zones/transformation-flows
SSO Connectors6 / 6alliam/sso
Page Rules6 / 6allpage-rules
Subscriptions5 / 863%accounts/subscriptions
Accounts5 / 683%accounts
Members5 / 5allaccounts/members
R2 Event Notifications4 / 4allr2/event-notifications
Origin CA Certificates4 / 4allorigin-ca-certificates
Memberships4 / 4allmemberships
Subscription4 / 4allzones/subscriptions
Logpull3 / 2711%accounts/logs/audit
Zone Holds3 / 560%zones/holds
DNSSEC3 / 475%dns/dnssec
Bot Management2 / 450%bot-management
Account Profile2 / 2allaccounts
Cloud Connector2 / 2allcloud-connector
IPs1 / 1allips
OAuth1 / 1alliam/oauth-scopes
Move1 / 1allaccounts
Cache Purge1 / 1allzones
Activation Check1 / 1allzones

Not covered yet

The remaining 127 resources — 2479 operations — have no endpoint here, largest first. Any of them can still be called with custom requests.

Cloudforce One (181)Pipelines (14)Challenges (6)
Magic Transit & WAN (177)Vectorize (14)Diagnostics (6)
Zero Trust Access (157)Agent Memory (13)Total TLS (ACM) (6)
Radar (150)Flagship (13)Custom Certificates (6)
DLP (93)Web Analytics (13)Connectivity (5)
Devices (65)Origin TLS Client Auth (13)Event Subscriptions (5)
Email Security (63)Page Shield (13)mTLS Certificates (5)
AI Gateway (62)R2 Data Catalog (13)Client Certificates (5)
Realtime (62)Cloudflare Tunnel (12)Keyless Certificates (5)
Zero Trust Gateway (56)Secrets Store (12)Botnet Feed (4)
Stream (50)Slurper (12)Browser Extension (4)
AI Search (49)Web3 (12)Triggers (4)
Email (44)One (11)Hostnames (4)
Images (41)Rules (11)AI Security (4)
Addressing (39)WARP Connector (11)Argo (4)
Brand Protection (39)Zero Trust Risk Scoring (11)Custom Nameservers (3)
Intel (34)Custom Hostnames (11)Managed Transforms (3)
Logpush (34)Calls (10)URL Normalization (3)
Builds (31)Tags (10)Analytics Engine (2)
Digital Experience Monitoring (31)Smart Shield (10)Billable Usage (2)
API Gateway (31)Speed (10)Billable (2)
Data Security (30)Registrar Sandbox (10)Entitlements (2)
Secondary DNS (28)Registrar (10)Media (2)
Browser Rendering (27)DNS Firewall (9)AI Audit (2)
Pages (26)DNS Settings (9)Available Plans (2)
Security Center (26)PCAPs (9)Certificate Authorities (2)
Alerting (25)Healthchecks (9)Certificate Transparency (2)
Waiting Rooms (24)Custom CSRs (8)DNS Analytics (2)
Queues (23)Hyperdrive (8)Fraud Detection (2)
Vulnerability Scanner (22)MoQ (8)Precursor (2)
Workflows (21)Snippets (8)Audit Logs (1)
Shares (20)Spectrum (8)Billing (1)
Containers (18)URL Scanner (8)Tunnels (1)
Custom Pages (18)Analytics (8)Live (1)
Artifacts (17)DLS (7)Ready (1)
Pay Per Crawl (17)Infrastructure (7)Signed Url (1)
Network Interconnects (16)Resource Library (7)Available Rate Plans (1)
Magic Network Monitoring (16)Content Upload Scan (7)DCV Delegation (1)
SCIM (16)Environments (7)Bulk (1)
Zero Trust (15)Leaked Credential Checks (7)Request Tracer (1)
Schema Validation (15)Origin (7)Internal (1)
Token Validation (15)Abuse Reports (7)
Workers AI (14)Autorag (7)

Deprecated operations still implemented

Cloudflare marks these deprecated in the schema. They still answer, and this package still exposes them, but reach for the replacement where there is one.

  • GET /zones/{}/pagerules/settingspage-rules
  • POST /zones/{}/dns_records/scandns
Copyright © 2026