导航|地址|刷新
Update or deploy a ruleset

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/ruleset-engine/llms.txt
Use this file to discover all available pages before exploring further.

Docs Directory API SDKs Changelog

Search

Log in

Ruleset Engine

/

Overview

About

Overview

Phases

Rulesets

Rules

Basic API operations

View rulesets

Add rules to phase entry point rulesets

Deploy rulesets

Work with managed rulesets

Overview

Deploy a managed ruleset

Override a managed ruleset

Override examples

Overview

Set WordPress rules to Block

Enable only Joomla rules

Enable only selected rules

Deploy a managed ruleset with ruleset, tag, and rule overrides

Adjust the sensitivity of an HTTP DDoS rule to Low

Adjust an L3/4 DDoS rule ↗

Create an exception

Work with custom rulesets

Overview

Create a custom ruleset

Add rules to a custom ruleset

Deploy a custom ruleset

Rules language

Overview

Expressions

Overview

Edit in the dashboard

Operators and grouping symbols

Values

Actions

Fields

Overview

Fields reference

Functions

Rulesets API

Overview

JSON objects

Endpoints

List and view rulesets

Create a ruleset

Update or deploy a ruleset

Add a rule to a ruleset

Update a rule in a ruleset

Delete a rule in a ruleset

Delete a ruleset

Reference

Phases list

Agent resources

Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

Ruleset Engine llms.txt ↗

Ruleset Engine llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗

Home

/Ruleset Engine

/Rulesets API

/Update or deploy a ruleset

Update or deploy a ruleset

Last updated Apr 16, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewExample - Set the rules of a rulesetExample - Deploy a rulesetExample - Update ruleset description

Use one of the following API endpoints to update a ruleset:

Update an account ruleset
PUT /accounts/{account_id}/rulesets/{ruleset_id}

Update an account entry point ruleset
PUT /accounts/{account_id}/rulesets/phases/{phase_name}/entrypoint

Update a zone ruleset
PUT /zones/{zone_id}/rulesets/{ruleset_id}

Update a zone entry point ruleset
PUT /zones/{zone_id}/rulesets/phases/{phase_name}/entrypoint

When updating a ruleset, you can update:

The basic properties of a ruleset (currently only the description)

The list of rules in a ruleset

You cannot update the name of the ruleset or its type. Do not include these fields in the data field of your PUT request.

To deploy a ruleset, add a rule with "action": "execute" to the list of rules of an entry point ruleset. Refer to Deploy a ruleset for an example.

Risk of replacing all rules

The update operations described in this page (PUT requests) replace the entire list of rules in the ruleset. If you omit existing rules from the request body, those rules will be removed. Always include every rule you want to keep in the rules array.

To add a single rule without replacing the entire list of rules in the ruleset, use one of the POST requests described in Add a rule to a ruleset instead.

Example - Set the rules of a ruleset

The following PUT request defines the list of rules of a ruleset, setting it to a single rule. You must include all the rules you want to associate with the ruleset in every request.

Required API token permissions
At least one of the following token permissions is required:
Response Compression Write

Config Settings Write

Dynamic URL Redirects Write

Cache Settings Write

Custom Errors Write

Origin Write

Managed headers Write

Zone Transform Rules Write

Mass URL Redirects Write

Magic Firewall Write

L4 DDoS Managed Ruleset Write

HTTP DDoS Managed Ruleset Write

Sanitize Write

Transform Rules Write

Select Configuration Write

Bot Management Write

Zone WAF Write

Account WAF Write

Account Rulesets Write

Logs Write

Logs Write
Update a zone rulesetbashcurl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets/$RULESET_ID" \ --request PUT \ --header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \ --json '{ "rules": [ { "action": "execute", "action_parameters": { "id": "<MANAGED_RULESET_ID>" }, "expression": "true" } ] }'{ "result": { "id": "<RULESET_ID>", "name": "Zone-level phase entry point ruleset", "description": "This ruleset executes a managed ruleset.", "kind": "zone", "version": "4", "rules": [ { "id": "<RULE_ID>", "version": "2", "action": "execute", "expression": "true", "action_parameters": { "id": "<MANAGED_RULESET_ID>" }, "last_updated": "2025-03-17T15:42:37.917815Z" } ], "last_updated": "2025-03-17T15:42:37.917815Z", "phase": "http_request_firewall_managed" }, "success": true, "errors": [], "messages": []}

Example - Deploy a ruleset

To deploy a ruleset, create a rule with "action": "execute" that executes the ruleset, and add the ruleset ID to the action_parameters field in the id parameter.

The following PUT request deploys a managed ruleset to the http_request_firewall_managed phase of a zone ($ZONE_ID).

Required API token permissions
At least one of the following token permissions is required:
Response Compression Write

Config Settings Write

Dynamic URL Redirects Write

Cache Settings Write

Custom Errors Write

Origin Write

Managed headers Write

Zone Transform Rules Write

Mass URL Redirects Write

Magic Firewall Write

L4 DDoS Managed Ruleset Write

HTTP DDoS Managed Ruleset Write

Sanitize Write

Transform Rules Write

Select Configuration Write

Bot Management Write

Zone WAF Write

Account WAF Write

Account Rulesets Write

Logs Write

Logs Write
Update a zone entry point rulesetbashcurl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets/phases/http_request_firewall_managed/entrypoint" \ --request PUT \ --header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \ --json '{ "rules": [ { "action": "execute", "action_parameters": { "id": "<MANAGED_RULESET_ID>" }, "expression": "true", "description": "Execute Cloudflare Managed Ruleset on my phase entry point ruleset" } ] }'{ "result": { "id": "<RULESET_ID>", "name": "Zone-level phase entry point ruleset", "description": "", "kind": "zone", "version": "4", "rules": [ { "id": "<RULE_ID_1>", "version": "1", "action": "execute", "action_parameters": { "id": "<MANAGED_RULESET_ID>", "version": "latest" }, "expression": "true", "description": "Execute Cloudflare Managed Ruleset on my phase entry point ruleset", "last_updated": "2025-03-21T11:02:08.769537Z", "ref": "<RULE_REF_1>", "enabled": true } ], "last_updated": "2025-03-21T11:02:08.769537Z", "phase": "http_request_firewall_managed" }, "success": true, "errors": [], "messages": []}
For more information on deploying rulesets, refer to Deploy rulesets.

Example - Update ruleset description

The following PUT request updates the description of an existing ruleset or phase entry point.

The response will include the complete ruleset definition, including all the rules.

Note

You cannot update the description or the rules in a managed ruleset. You can only define overrides to customize the ruleset behavior.

Required API token permissions
At least one of the following token permissions is required:
Response Compression Write

Config Settings Write

Dynamic URL Redirects Write

Cache Settings Write

Custom Errors Write

Origin Write

Managed headers Write

Zone Transform Rules Write

Mass URL Redirects Write

Magic Firewall Write

L4 DDoS Managed Ruleset Write

HTTP DDoS Managed Ruleset Write

Sanitize Write

Transform Rules Write

Select Configuration Write

Bot Management Write

Zone WAF Write

Account WAF Write

Account Rulesets Write

Logs Write

Logs Write
Update a zone rulesetbashcurl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets/$RULESET_ID" \ --request PUT \ --header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \ --json '{ "description": "My updated phase entry point ruleset" }'{ "result": { "id": "<RULESET_ID>", "name": "Zone entry point", "description": "My updated phase entry point ruleset", "kind": "zone", "version": "4", "rules": [ // (...) ], "last_updated": "2025-03-30T10:49:11.006109Z", "phase": "http_request_firewall_managed" }, "success": true, "errors": [], "messages": []}

PreviousCreate a ruleset NextAdd a rule to a ruleset

Was this helpful?

YesNo

Edit page Report issue

On this page

Overview

Example - Set the rules of a ruleset

Example - Deploy a ruleset

Example - Update ruleset description

Edit pageReport issue

Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search

Company
AboutCareersInvestorsPressPress kitGlobal network

Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG

Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse

Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog

Developers
DocumentationLearning centerCommunity

Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform

Start BuildingLog In

© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices

Docs

------
导航页打开网址