--- title: Schema Validation --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Schema Validation #### Schema ValidationSchemas ##### [List all uploaded schemas](https://developers.cloudflare.com/api/resources/schema_validation/subresources/schemas/methods/list) GET/zones/{zone\_id}/schema\_validation/schemas ##### [Get details of a schema](https://developers.cloudflare.com/api/resources/schema_validation/subresources/schemas/methods/get) GET/zones/{zone\_id}/schema\_validation/schemas/{schema\_id} ##### [Upload a schema](https://developers.cloudflare.com/api/resources/schema_validation/subresources/schemas/methods/create) POST/zones/{zone\_id}/schema\_validation/schemas ##### [Set schema validation state](https://developers.cloudflare.com/api/resources/schema_validation/subresources/schemas/methods/edit) PATCH/zones/{zone\_id}/schema\_validation/schemas/{schema\_id} ##### [Delete a schema](https://developers.cloudflare.com/api/resources/schema_validation/subresources/schemas/methods/delete) DELETE/zones/{zone\_id}/schema\_validation/schemas/{schema\_id} ##### ModelsExpand Collapse

PublicSchema object {created\_at, kind, name, 3 more } A schema used in schema validation

created\_at: string formatdate-time Link to this property kind: "openapi\_v3" The kind of the schema Link to this property name: string A human-readable name for the schema Link to this property schema\_id: string A unique identifier of this schema maxLength36 minLength36 formatuuid Link to this property source: string The raw schema, e.g., the OpenAPI schema, either as JSON or YAML Link to this property validation\_enabled: optional boolean An indicator if this schema is enabled Link to this property

[Link to this property](<#(resource)%20schema_validation.schemas%20%3E%20(model)%20public_schema%20%3E%20(schema)>) SchemaDeleteResponse = unknown Schema deletion returns no result body. [Link to this property](<#(resource)%20schema_validation.schemas%20%3E%20(model)%20schema_delete_response%20%3E%20(schema)>) #### Schema ValidationSettings ##### [Get global schema validation settings](https://developers.cloudflare.com/api/resources/schema_validation/subresources/settings/methods/get) GET/zones/{zone\_id}/schema\_validation/settings ##### [Update global schema validation settings](https://developers.cloudflare.com/api/resources/schema_validation/subresources/settings/methods/update) PUT/zones/{zone\_id}/schema\_validation/settings ##### [Edit global schema validation settings](https://developers.cloudflare.com/api/resources/schema_validation/subresources/settings/methods/edit) PATCH/zones/{zone\_id}/schema\_validation/settings ##### ModelsExpand Collapse

SettingGetResponse object {validation\_default\_mitigation\_action, validation\_override\_mitigation\_action }

validation\_default\_mitigation\_action: "none"or "log"or "block" The default mitigation action used Mitigation actions are as follows: - log - log request when request does not conform to schema - block - deny access to the site when request does not conform to schema - none - skip running schema validation

One of the following: "none" Link to this property "log" Link to this property "block" Link to this property

Link to this property validation\_override\_mitigation\_action: optional "none" When not null, this overrides global both zone level and operation level mitigation actions. This can serve as a quick way to disable schema validation for the whole zone. - "none" will skip running schema validation entirely for the request Link to this property

[Link to this property](<#(resource)%20schema_validation.settings%20%3E%20(model)%20setting_get_response%20%3E%20(schema)>)

SettingUpdateResponse object {validation\_default\_mitigation\_action, validation\_override\_mitigation\_action }

One of the following: "none" Link to this property "log" Link to this property "block" Link to this property

[Link to this property](<#(resource)%20schema_validation.settings%20%3E%20(model)%20setting_update_response%20%3E%20(schema)>)

SettingEditResponse object {validation\_default\_mitigation\_action, validation\_override\_mitigation\_action }

One of the following: "none" Link to this property "log" Link to this property "block" Link to this property

[Link to this property](<#(resource)%20schema_validation.settings%20%3E%20(model)%20setting_edit_response%20%3E%20(schema)>) #### Schema ValidationSettingsOperations ##### [List per-operation schema validation settings](https://developers.cloudflare.com/api/resources/schema_validation/subresources/settings/subresources/operations/methods/list) GET/zones/{zone\_id}/schema\_validation/settings/operations ##### [Get per-operation schema validation setting](https://developers.cloudflare.com/api/resources/schema_validation/subresources/settings/subresources/operations/methods/get) GET/zones/{zone\_id}/schema\_validation/settings/operations/{operation\_id} ##### [Update per-operation schema validation setting](https://developers.cloudflare.com/api/resources/schema_validation/subresources/settings/subresources/operations/methods/update) PUT/zones/{zone\_id}/schema\_validation/settings/operations/{operation\_id} ##### [Bulk edit per-operation schema validation settings](https://developers.cloudflare.com/api/resources/schema_validation/subresources/settings/subresources/operations/methods/bulk_edit) PATCH/zones/{zone\_id}/schema\_validation/settings/operations ##### [Delete per-operation schema validation setting](https://developers.cloudflare.com/api/resources/schema_validation/subresources/settings/subresources/operations/methods/delete) DELETE/zones/{zone\_id}/schema\_validation/settings/operations/{operation\_id} ##### ModelsExpand Collapse

OperationListResponse object {mitigation\_action, operation\_id }

mitigation\_action: "log"or "block"or "none" When set, this applies a mitigation action to this operation which supersedes a global schema validation setting just for this operation - "log" - log request when request does not conform to schema for this operation - "block" - deny access to the site when request does not conform to schema for this operation - "none" - will skip mitigation for this operation

One of the following: "log" Link to this property "block" Link to this property "none" Link to this property

Link to this property operation\_id: string UUID. maxLength36 minLength36 Link to this property

[Link to this property](<#(resource)%20schema_validation.settings.operations%20%3E%20(model)%20operation_list_response%20%3E%20(schema)>)

OperationGetResponse object {mitigation\_action, operation\_id }

One of the following: "log" Link to this property "block" Link to this property "none" Link to this property

Link to this property operation\_id: string UUID. maxLength36 minLength36 Link to this property

[Link to this property](<#(resource)%20schema_validation.settings.operations%20%3E%20(model)%20operation_get_response%20%3E%20(schema)>)

OperationUpdateResponse object {mitigation\_action, operation\_id }

One of the following: "log" Link to this property "block" Link to this property "none" Link to this property

Link to this property operation\_id: string UUID. maxLength36 minLength36 Link to this property

[Link to this property](<#(resource)%20schema_validation.settings.operations%20%3E%20(model)%20operation_update_response%20%3E%20(schema)>)

OperationBulkEditResponse = map\[object {mitigation\_action } ] Operation ID to updated mitigation action mapping

mitigation\_action: optional "log"or "block"or "none" When set, this applies a mitigation action to this operation - "log" - log request when request does not conform to schema for this operation - "block" - deny access to the site when request does not conform to schema for this operation - "none" - will skip mitigation for this operation - null - clears any mitigation action

One of the following: "log" Link to this property "block" Link to this property "none" Link to this property

Link to this property

[Link to this property](<#(resource)%20schema_validation.settings.operations%20%3E%20(model)%20operation_bulk_edit_response%20%3E%20(schema)>)

OperationDeleteResponse object {operation\_id }

operation\_id: optional string UUID. maxLength36 minLength36 Link to this property

[Link to this property](<#(resource)%20schema_validation.settings.operations%20%3E%20(model)%20operation_delete_response%20%3E%20(schema)>)