---
title: Get Auto-Origin TLS KEX enrollment status for the given zone
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[SSL](https://developers.cloudflare.com/api/resources/ssl)
[Auto Origin TLS Kex](https://developers.cloudflare.com/api/resources/ssl/subresources/auto_origin_tls_kex)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Get Auto-Origin TLS KEX enrollment status for the given zone
GET/zones/{zone\_id}/settings/auto\_origin\_tls\_kex
When enabled, Cloudflare automatically selects the preferred TLS key-exchange algorithm to use when establishing the TLS connection to the zone’s origin, picking from the algorithms permitted by the zone’s `origin_tls_compliance_modes` setting. When disabled, the default key-exchange ordering is used.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
**Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key
The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.
**Example:**X-Auth-Email: user@example.com
The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.
**Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### P ath ParametersExpand Collapse
zone\_id: string
maxLength32
[Link to this property](<#(resource)%20ssl.auto_origin_tls_kex%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>)
##### ReturnsExpand Collapse
errors: array of ResponseInfo { code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20ssl.auto_origin_tls_kex%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: array of ResponseInfo { code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20ssl.auto_origin_tls_kex%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
result: object {id, enabled, modified\_on }
id: string
Link to this property
enabled: boolean
Whether Auto-Origin TLS KEX selection is enabled for the zone.
Link to this property
modified\_on: string
Last time this setting was modified.
formatdate-time
Link to this property
[Link to this property](<#(resource)%20ssl.auto_origin_tls_kex%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
success: boolean
Indicates the API call’s success or failure.
[Link to this property](<#(resource)%20ssl.auto_origin_tls_kex%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
### Get Auto-Origin TLS KEX enrollment status for the given zone
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/zones/$ZONE_ID/settings/auto_origin_tls_kex \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
```
200 example
200 example
4XX example
```
{
"errors": [],
"messages": [],
"result": {
"enabled": false,
"id": "auto_origin_tls_kex",
"modified_on": "2014-01-01T05:20:00.12345Z"
},
"success": true
}
```
```
{
"errors": [],
"messages": [],
"result": {
"enabled": true,
"id": "auto_origin_tls_kex",
"modified_on": "2014-01-01T05:20:00.12345Z"
},
"success": true
}
```
```
{
"errors": [
{
"code": 1009,
"message": "Missing field 'enabled' in JSON body"
}
],
"messages": [],
"result": {
"enabled": false,
"id": "auto_origin_tls_kex",
"modified_on": "2014-01-01T05:20:00.12345Z"
},
"success": false
}
```
##### Returns Examples
200 example
200 example
4XX example
```
{
"errors": [],
"messages": [],
"result": {
"enabled": false,
"id": "auto_origin_tls_kex",
"modified_on": "2014-01-01T05:20:00.12345Z"
},
"success": true
}
```
```
{
"errors": [],
"messages": [],
"result": {
"enabled": true,
"id": "auto_origin_tls_kex",
"modified_on": "2014-01-01T05:20:00.12345Z"
},
"success": true
}
```
```
{
"errors": [
{
"code": 1009,
"message": "Missing field 'enabled' in JSON body"
}
],
"messages": [],
"result": {
"enabled": false,
"id": "auto_origin_tls_kex",
"modified_on": "2014-01-01T05:20:00.12345Z"
},
"success": false
}
```