--- title: Update Zone Bot Management Config --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/typescript) [Bot Management](https://developers.cloudflare.com/api/typescript/resources/bot_management) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Update Zone Bot Management Config client.botManagement.update(BotManagementUpdateParamsparams, RequestOptionsoptions?): [BotManagementUpdateResponse]() PUT/zones/{zone\_id}/bot\_management Updates the Bot Management configuration for a zone. This API is used to update: - **Bot Fight Mode** - **Super Bot Fight Mode** - **Bot Management for Enterprise** See [Bot Plans](https://developers.cloudflare.com/bots/plans/) for more information on the different plans If you recently upgraded or downgraded your plan, refer to the following examples to clean up old configurations. Copy and paste the example body to remove old zone configurations based on your current plan. #### Clean up configuration for Bot Fight Mode plan ```json { "sbfm_likely_automated": "allow", "sbfm_definitely_automated": "allow", "sbfm_verified_bots": "allow", "sbfm_static_resource_protection": false, "optimize_wordpress": false, "suppress_session_score": false } ``` #### Clean up configuration for SBFM Pro plan ```json { "sbfm_likely_automated": "allow", "fight_mode": false } ``` #### Clean up configuration for SBFM Biz plan ```json { "fight_mode": false } ``` #### Clean up configuration for BM Enterprise Subscription plan It is strongly recommended that you ensure you have [custom rules](https://developers.cloudflare.com/waf/custom-rules/) in place to protect your zone before disabling the SBFM rules. Without these protections, your zone is vulnerable to attacks. ```json { "sbfm_likely_automated": "allow", "sbfm_definitely_automated": "allow", "sbfm_verified_bots": "allow", "sbfm_static_resource_protection": false, "optimize_wordpress": false, "fight_mode": false } ``` ##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194

##### Accepted Permissions (at least one required) `Bot Management Write` ##### ParametersExpand Collapse

BotManagementUpdateParams = BotFightModeConfiguration| SuperBotFightModeDefinitelyConfiguration| SuperBotFightModeLikelyConfiguration| SubscriptionConfiguration

BotManagementUpdateParamsBase {zone\_id, ai\_bots\_migration\_opt\_out, ai\_bots\_protection, 11 more }

zone\_id: string Path param: Identifier. maxLength32 Link to this property ai\_bots\_migration\_opt\_out?: boolean Body param: Temporary migration flag tracking zones opted out of AI bots managed-rule updates. Link to this property

ai\_bots\_protection?: "block"| "disabled"| "only\_on\_ad\_pages" Body param: Enable rule to block AI Scrapers and Crawlers.

One of the following: "block" Link to this property "disabled" Link to this property "only\_on\_ad\_pages" Link to this property