--- title: Create token validation rules --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/python) [Token Validation](https://developers.cloudflare.com/api/python/resources/token_validation) [Rules](https://developers.cloudflare.com/api/python/resources/token_validation/subresources/rules) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Create token validation rules token\_validation.rules.bulk\_create(RuleBulkCreateParams\*\*kwargs) -> SyncSinglePage\[[TokenValidationRule]()] POST/zones/{zone\_id}/token\_validation/rules/bulk Creates multiple token validation rules for the zone in one request. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `Account API Gateway``Domain API Gateway` ##### ParametersExpand Collapse zone\_id: str Identifier. maxLength32 [Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20bulk_create%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>)
body: Iterable\[Body]
action: Literal\["log", "block"] Action to take on requests that match operations included in selector and fail expression. One of the following: "log" Link to this property "block" Link to this property
Link to this property description: str A human-readable description that gives more details than title. maxLength500 Link to this property enabled: bool Toggle rule on or off. Link to this property expression: str Rule expression. Requests that fail to match this expression will be subject to action. For details on expressions, see the Cloudflare Docs. Link to this property
selector: BodySelector Select operations covered by this rule. For details on selectors, see the Cloudflare Docs.
exclude: Optional\[Iterable\[BodySelectorExclude]] Ignore operations that were otherwise included by include. operation\_ids: Optional\[Sequence\[str]] Excluded operation IDs. Link to this property
Link to this property
include: Optional\[Iterable\[BodySelectorInclude]] Select all matching operations. host: Optional\[Sequence\[str]] Included hostnames. Link to this property
Link to this property
Link to this property title: str A human-readable name for the rule. maxLength50 Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20bulk_create%20%3E%20(params)%20default%20%3E%20(param)%20body%20%3E%20(schema)>) ##### ReturnsExpand Collapse
class TokenValidationRule: … A Token Validation rule that can enforce security policies using JWT Tokens.
action: Literal\["log", "block"] Action to take on requests that match operations included in selector and fail expression. One of the following: "log" Link to this property "block" Link to this property
Link to this property description: str A human-readable description that gives more details than title. maxLength500 Link to this property enabled: bool Toggle rule on or off. Link to this property expression: str Rule expression. Requests that fail to match this expression will be subject to action. For details on expressions, see the Cloudflare Docs. Link to this property
selector: Selector Select operations covered by this rule. For details on selectors, see the Cloudflare Docs.
exclude: Optional\[List\[SelectorExclude]] Ignore operations that were otherwise included by include. operation\_ids: Optional\[List\[str]] Excluded operation IDs. Link to this property
Link to this property
include: Optional\[List\[SelectorInclude]] Select all matching operations. host: Optional\[List\[str]] Included hostnames. Link to this property
Link to this property
Link to this property title: str A human-readable name for the rule. maxLength50 Link to this property id: Optional\[str] UUID. maxLength36 minLength36 Link to this property created\_at: Optional\[datetime] formatdate-time Link to this property last\_updated: Optional\[datetime] formatdate-time Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(model)%20token_validation_rule%20%3E%20(schema)>) ### Create token validation rules Python HTTPTypeScriptPythonGoTerraform ``` import os from cloudflare import Cloudflare client = Cloudflare( api_token=os.environ.get("CLOUDFLARE_API_TOKEN"), # This is the default and can be omitted ) page = client.token_validation.rules.bulk_create( zone_id="023e105f4ecef8ad9ca31a8372d0c353", body=[{ "action": "log", "description": "Long description for Token Validation Rule", "enabled": True, "expression": "is_jwt_valid(\"52973293-cb04-4a97-8f55-e7d2ad1107dd\") or is_jwt_valid(\"46eab8d1-6376-45e3-968f-2c649d77d423\")", "selector": {}, "title": "Example Token Validation Rule", }], ) page = page.result[0] print(page.id) ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": [ { "action": "log", "description": "Long description for Token Validation Rule", "enabled": true, "expression": "is_jwt_valid(\"52973293-cb04-4a97-8f55-e7d2ad1107dd\") or is_jwt_valid(\"46eab8d1-6376-45e3-968f-2c649d77d423\")", "selector": { "exclude": [ { "operation_ids": [ "f9c5615e-fe15-48ce-bec6-cfc1946f1bec", "56828eae-035a-4396-ba07-51c66d680a04" ] } ], "include": [ { "host": [ "v1.example.com", "v2.example.com" ] } ] }, "title": "Example Token Validation Rule", "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "created_at": "2014-01-01T05:20:00.12345Z", "last_updated": "2014-01-01T05:20:00.12345Z" } ], "success": true, "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": [ { "action": "log", "description": "Long description for Token Validation Rule", "enabled": true, "expression": "is_jwt_valid(\"52973293-cb04-4a97-8f55-e7d2ad1107dd\") or is_jwt_valid(\"46eab8d1-6376-45e3-968f-2c649d77d423\")", "selector": { "exclude": [ { "operation_ids": [ "f9c5615e-fe15-48ce-bec6-cfc1946f1bec", "56828eae-035a-4396-ba07-51c66d680a04" ] } ], "include": [ { "host": [ "v1.example.com", "v2.example.com" ] } ] }, "title": "Example Token Validation Rule", "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "created_at": "2014-01-01T05:20:00.12345Z", "last_updated": "2014-01-01T05:20:00.12345Z" } ], "success": true, "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ```