--- title: Create token validation rules --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Token Validation](https://developers.cloudflare.com/api/go/resources/token_validation) [Rules](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/rules) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Create token validation rules client.TokenValidation.Rules.BulkNew(ctx, params) (\*SinglePage\[[TokenValidationRule]()], error) POST/zones/{zone\_id}/token\_validation/rules/bulk Creates multiple token validation rules for the zone in one request. ##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194

##### Accepted Permissions (at least one required) `Account API Gateway``Domain API Gateway` ##### ParametersExpand Collapse

params RuleBulkNewParams

ZoneID param.Field\[string] Path param: Identifier. maxLength32 Link to this property

Body param.Field\[\[]RuleBulkNewParamsBody] Body param

Action RuleBulkNewParamsBodyAction Action to take on requests that match operations included in selector and fail expression.

One of the following: const RuleBulkNewParamsBodyActionLog RuleBulkNewParamsBodyAction = "log" Link to this property const RuleBulkNewParamsBodyActionBlock RuleBulkNewParamsBodyAction = "block" Link to this property

Link to this property Description string A human-readable description that gives more details than title. maxLength500 Link to this property Enabled bool Toggle rule on or off. Link to this property Expression string Rule expression. Requests that fail to match this expression will be subject to action. For details on expressions, see the Cloudflare Docs. Link to this property

Selector RuleBulkNewParamsBodySelector Select operations covered by this rule. For details on selectors, see the Cloudflare Docs.

Exclude \[]RuleBulkNewParamsBodySelectorExcludeOptional Ignore operations that were otherwise included by include.

OperationIDs \[]stringOptional Excluded operation IDs. Link to this property

Link to this property

Include \[]RuleBulkNewParamsBodySelectorIncludeOptional Select all matching operations.

Host \[]stringOptional Included hostnames. Link to this property

Link to this property

Link to this property Title string A human-readable name for the rule. maxLength50 Link to this property

Link to this property

[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20bulk_create%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse

type TokenValidationRule struct{…} A Token Validation rule that can enforce security policies using JWT Tokens.

Action TokenValidationRuleAction Action to take on requests that match operations included in selector and fail expression.

One of the following: const TokenValidationRuleActionLog TokenValidationRuleAction = "log" Link to this property const TokenValidationRuleActionBlock TokenValidationRuleAction = "block" Link to this property

Selector TokenValidationRuleSelector Select operations covered by this rule. For details on selectors, see the Cloudflare Docs.

Exclude \[]TokenValidationRuleSelectorExcludeOptional Ignore operations that were otherwise included by include.

OperationIDs \[]stringOptional Excluded operation IDs. Link to this property

Link to this property

Include \[]TokenValidationRuleSelectorIncludeOptional Select all matching operations.

Host \[]stringOptional Included hostnames. Link to this property

Link to this property

Link to this property Title string A human-readable name for the rule. maxLength50 Link to this property ID stringOptional UUID. maxLength36 minLength36 Link to this property CreatedAt TimeOptional formatdate-time Link to this property LastUpdated TimeOptional formatdate-time Link to this property

[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(model)%20token_validation_rule%20%3E%20(schema)>) ### Create token validation rules Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/option" "github.com/cloudflare/cloudflare-go/token_validation" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) page, err := client.TokenValidation.Rules.BulkNew(context.TODO(), token_validation.RuleBulkNewParams{ ZoneID: cloudflare.F("023e105f4ecef8ad9ca31a8372d0c353"), Body: []token_validation.RuleBulkNewParamsBody{token_validation.RuleBulkNewParamsBody{ Action: cloudflare.F(token_validation.RuleBulkNewParamsBodyActionLog), Description: cloudflare.F("Long description for Token Validation Rule"), Enabled: cloudflare.F(true), Expression: cloudflare.F(`is_jwt_valid("52973293-cb04-4a97-8f55-e7d2ad1107dd") or is_jwt_valid("46eab8d1-6376-45e3-968f-2c649d77d423")`), Selector: cloudflare.F(token_validation.RuleBulkNewParamsBodySelector{ }), Title: cloudflare.F("Example Token Validation Rule"), }}, }) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", page) } ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": [ { "action": "log", "description": "Long description for Token Validation Rule", "enabled": true, "expression": "is_jwt_valid(\"52973293-cb04-4a97-8f55-e7d2ad1107dd\") or is_jwt_valid(\"46eab8d1-6376-45e3-968f-2c649d77d423\")", "selector": { "exclude": [ { "operation_ids": [ "f9c5615e-fe15-48ce-bec6-cfc1946f1bec", "56828eae-035a-4396-ba07-51c66d680a04" ] } ], "include": [ { "host": [ "v1.example.com", "v2.example.com" ] } ] }, "title": "Example Token Validation Rule", "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "created_at": "2014-01-01T05:20:00.12345Z", "last_updated": "2014-01-01T05:20:00.12345Z" } ], "success": true, "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": [ { "action": "log", "description": "Long description for Token Validation Rule", "enabled": true, "expression": "is_jwt_valid(\"52973293-cb04-4a97-8f55-e7d2ad1107dd\") or is_jwt_valid(\"46eab8d1-6376-45e3-968f-2c649d77d423\")", "selector": { "exclude": [ { "operation_ids": [ "f9c5615e-fe15-48ce-bec6-cfc1946f1bec", "56828eae-035a-4396-ba07-51c66d680a04" ] } ], "include": [ { "host": [ "v1.example.com", "v2.example.com" ] } ] }, "title": "Example Token Validation Rule", "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "created_at": "2014-01-01T05:20:00.12345Z", "last_updated": "2014-01-01T05:20:00.12345Z" } ], "success": true, "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ```