---
title: Get a token validation rule
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[Token Validation](https://developers.cloudflare.com/api/resources/token_validation)
[Rules](https://developers.cloudflare.com/api/resources/token_validation/subresources/rules)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Get a token validation rule
GET/zones/{zone\_id}/token\_validation/rules/{rule\_id}
Returns a token validation rule by ID.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
**Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key
The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.
**Example:**X-Auth-Email: user@example.com
The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.
**Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required)
`Account API Gateway``Account API Gateway Read``Domain API Gateway``Domain API Gateway Read`
##### P ath ParametersExpand Collapse
zone\_id: string
Identifier.
maxLength32
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>)
rule\_id: string
UUID.
maxLength36
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20rule_id%20%3E%20(schema)>)
##### ReturnsExpand Collapse
errors: Message { code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: Message { code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
result: TokenValidationRule { action, description, enabled, 6 more }
A Token Validation rule that can enforce security policies using JWT Tokens.
action: "log"or "block"
Action to take on requests that match operations included in selector and fail expression.
One of the following:
"log"
Link to this property
"block"
Link to this property
Link to this property
description: string
A human-readable description that gives more details than title.
maxLength500
Link to this property
enabled: boolean
Toggle rule on or off.
Link to this property
expression: string
Rule expression. Requests that fail to match this expression will be subject to action.
For details on expressions, see the Cloudflare Docs.
Link to this property
selector: object {exclude, include }
Select operations covered by this rule.
For details on selectors, see the Cloudflare Docs.
exclude: optional array of object {operation\_ids }
Ignore operations that were otherwise included by include.
operation\_ids: optional array of string
Excluded operation IDs.
Link to this property
Link to this property
include: optional array of object {host }
Select all matching operations.
host: optional array of string
Included hostnames.
Link to this property
Link to this property
Link to this property
title: string
A human-readable name for the rule.
maxLength50
Link to this property
id: optional string
UUID.
maxLength36
minLength36
Link to this property
created\_at: optional string
formatdate-time
Link to this property
last\_updated: optional string
formatdate-time
Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
success: true
Whether the API call was successful.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
### Get a token validation rule
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/zones/$ZONE_ID/token_validation/rules/$RULE_ID \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
```
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"result": {
"action": "log",
"description": "Long description for Token Validation Rule",
"enabled": true,
"expression": "is_jwt_valid(\"52973293-cb04-4a97-8f55-e7d2ad1107dd\") or is_jwt_valid(\"46eab8d1-6376-45e3-968f-2c649d77d423\")",
"selector": {
"exclude": [
{
"operation_ids": [
"f9c5615e-fe15-48ce-bec6-cfc1946f1bec",
"56828eae-035a-4396-ba07-51c66d680a04"
]
}
],
"include": [
{
"host": [
"v1.example.com",
"v2.example.com"
]
}
]
},
"title": "Example Token Validation Rule",
"id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
"created_at": "2014-01-01T05:20:00.12345Z",
"last_updated": "2014-01-01T05:20:00.12345Z"
},
"success": true
}
```
##### Returns Examples
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"result": {
"action": "log",
"description": "Long description for Token Validation Rule",
"enabled": true,
"expression": "is_jwt_valid(\"52973293-cb04-4a97-8f55-e7d2ad1107dd\") or is_jwt_valid(\"46eab8d1-6376-45e3-968f-2c649d77d423\")",
"selector": {
"exclude": [
{
"operation_ids": [
"f9c5615e-fe15-48ce-bec6-cfc1946f1bec",
"56828eae-035a-4396-ba07-51c66d680a04"
]
}
],
"include": [
{
"host": [
"v1.example.com",
"v2.example.com"
]
}
]
},
"title": "Example Token Validation Rule",
"id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
"created_at": "2014-01-01T05:20:00.12345Z",
"last_updated": "2014-01-01T05:20:00.12345Z"
},
"success": true
}
```