--- title: Edit token validation rules --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) [Token Validation](https://developers.cloudflare.com/api/resources/token_validation) [Rules](https://developers.cloudflare.com/api/resources/token_validation/subresources/rules) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Edit token validation rules PATCH/zones/{zone\_id}/token\_validation/rules/bulk Updates and reorders multiple token validation rules in one request, then returns the updated rules. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `Account API Gateway``Domain API Gateway` ##### P ath ParametersExpand Collapse zone\_id: string Identifier. maxLength32 [Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20bulk_edit%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>) ##### Body ParametersJSONExpand Collapse
body: array of object {id, action, description, 5 more } id: string Rule ID this patch applies to formatuuid maxLength36 Link to this property
action: optional "log"or "block" Action to take on requests that match operations included in selector and fail expression. One of the following: "log" Link to this property "block" Link to this property
Link to this property description: optional string A human-readable description that gives more details than title. maxLength500 Link to this property enabled: optional boolean Toggle rule on or off. Link to this property expression: optional string Rule expression. Requests that fail to match this expression will be subject to action. For details on expressions, see the Cloudflare Docs. Link to this property
position: optional object {index } or object {before } or object {after } Update rule order among zone rules. One of the following:
APIShieldIndex object {index } index: number Move rule to this position minimum1 Link to this property
Link to this property
APIShieldBefore object {before } Move rule to after rule with ID. before: optional string Move rule to before rule with this ID. formatuuid maxLength36 Link to this property
Link to this property
APIShieldAfter object {after } Move rule to before rule with ID. after: optional string Move rule to after rule with this ID. formatuuid maxLength36 Link to this property
Link to this property
Link to this property
selector: optional object {exclude, include } Select operations covered by this rule. For details on selectors, see the Cloudflare Docs.
exclude: optional array of object {operation\_ids } Ignore operations that were otherwise included by include. operation\_ids: optional array of string Excluded operation IDs. Link to this property
Link to this property
include: optional array of object {host } Select all matching operations. host: optional array of string Included hostnames. Link to this property
Link to this property
Link to this property title: optional string A human-readable name for the rule. maxLength50 Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20bulk_edit%20%3E%20(params)%200%20%3E%20(param)%20body%20%3E%20(schema)>) ##### ReturnsExpand Collapse
errors: Message { code, message, documentation\_url, source } code: number minimum1000 Link to this property message: string Link to this property documentation\_url: optional string Link to this property
source: optional object {pointer } pointer: optional string Link to this property
Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20bulk_edit%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: Message { code, message, documentation\_url, source } code: number minimum1000 Link to this property message: string Link to this property documentation\_url: optional string Link to this property
source: optional object {pointer } pointer: optional string Link to this property
Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20bulk_edit%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
result: array of TokenValidationRule { action, description, enabled, 6 more }
action: "log"or "block" Action to take on requests that match operations included in selector and fail expression. One of the following: "log" Link to this property "block" Link to this property
Link to this property description: string A human-readable description that gives more details than title. maxLength500 Link to this property enabled: boolean Toggle rule on or off. Link to this property expression: string Rule expression. Requests that fail to match this expression will be subject to action. For details on expressions, see the Cloudflare Docs. Link to this property
selector: object {exclude, include } Select operations covered by this rule. For details on selectors, see the Cloudflare Docs.
exclude: optional array of object {operation\_ids } Ignore operations that were otherwise included by include. operation\_ids: optional array of string Excluded operation IDs. Link to this property
Link to this property
include: optional array of object {host } Select all matching operations. host: optional array of string Included hostnames. Link to this property
Link to this property
Link to this property title: string A human-readable name for the rule. maxLength50 Link to this property id: optional string UUID. maxLength36 minLength36 Link to this property created\_at: optional string formatdate-time Link to this property last\_updated: optional string formatdate-time Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20bulk_edit%20%3E%20(network%20schema)%20%3E%20(property)%20result>) success: true Whether the API call was successful. [Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20bulk_edit%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
result\_info: optional object {count, page, per\_page, 2 more } count: optional number Total number of results for the requested service. Link to this property page: optional number Current page within paginated list of results. Link to this property per\_page: optional number Number of results per page of results. Link to this property total\_count: optional number Total results available without any search parameters. Link to this property total\_pages: optional number The number of total pages in the entire result set. Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20bulk_edit%20%3E%20(network%20schema)%20%3E%20(property)%20result_info>) ### Edit token validation rules HTTP HTTPTypeScriptPythonGoTerraform ``` curl https://api.cloudflare.com/client/v4/zones/$ZONE_ID/token_validation/rules/bulk \ -X PATCH \ -H 'Content-Type: application/json' \ -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \ -d '[ { "id": "0d9bf70c-92e1-4bb3-9411-34a3bcc59003", "action": "log", "description": "Long description for Token Validation Rule", "enabled": true, "expression": "is_jwt_valid(\\"52973293-cb04-4a97-8f55-e7d2ad1107dd\\") or is_jwt_valid(\\"46eab8d1-6376-45e3-968f-2c649d77d423\\")", "position": { "index": 2 }, "selector": { "exclude": [ { "operation_ids": [ "f9c5615e-fe15-48ce-bec6-cfc1946f1bec", "56828eae-035a-4396-ba07-51c66d680a04" ] } ], "include": [ { "host": [ "v1.example.com", "v2.example.com" ] } ] }, "title": "Example Token Validation Rule" } ]' ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": [ { "action": "log", "description": "Long description for Token Validation Rule", "enabled": true, "expression": "is_jwt_valid(\"52973293-cb04-4a97-8f55-e7d2ad1107dd\") or is_jwt_valid(\"46eab8d1-6376-45e3-968f-2c649d77d423\")", "selector": { "exclude": [ { "operation_ids": [ "f9c5615e-fe15-48ce-bec6-cfc1946f1bec", "56828eae-035a-4396-ba07-51c66d680a04" ] } ], "include": [ { "host": [ "v1.example.com", "v2.example.com" ] } ] }, "title": "Example Token Validation Rule", "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "created_at": "2014-01-01T05:20:00.12345Z", "last_updated": "2014-01-01T05:20:00.12345Z" } ], "success": true, "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": [ { "action": "log", "description": "Long description for Token Validation Rule", "enabled": true, "expression": "is_jwt_valid(\"52973293-cb04-4a97-8f55-e7d2ad1107dd\") or is_jwt_valid(\"46eab8d1-6376-45e3-968f-2c649d77d423\")", "selector": { "exclude": [ { "operation_ids": [ "f9c5615e-fe15-48ce-bec6-cfc1946f1bec", "56828eae-035a-4396-ba07-51c66d680a04" ] } ], "include": [ { "host": [ "v1.example.com", "v2.example.com" ] } ] }, "title": "Example Token Validation Rule", "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "created_at": "2014-01-01T05:20:00.12345Z", "last_updated": "2014-01-01T05:20:00.12345Z" } ], "success": true, "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ```