'%3e%3crect%20x='16'%20y='51'%20width='68'%20height='27'%20rx='13.5'/%3e%3ccircle%20cx='32'%20cy='53'%20r='15'/%3e%3ccircle%20cx='53'%20cy='43'%20r='20'/%3e%3ccircle%20cx='71'%20cy='57'%20r='12'/%3e%3c/g%3e%3c/svg%3e){kind=small}
Cloud Changelog
Cloudflare Fundamentals changelog
76 announcements since February 2025 · 4 GA · 3 previews · 12 deprecations
Free. One email a day, only on days when something you follow has an announcement, or one a week if you switch it in your preferences. You confirm your email with a one-time code; there is no password.
RSS feed for Cloudflare Fundamentals
October 20267
Grants read access and log streaming for specific Tunnels without write accessGA
Client-cancelled requests stop sooner and are recorded as 499, so more 499s may appear
Creating an organization now shows a dismissible setup checklist
Members with API Token Provisioning role can create tokens, limited to their own permissions
September 20262
August 20267
403 Forbidden responses include a documentation_url field linking to the denied endpoint's docs
Users can save up to five login profiles per device for faster sign-in
Group replacement via HTTP PUT syncs a group's full state in one request
OAuth clients can mark scopes optional, and consent screen adds templates and searchGA
Members with only resource-scoped roles can list resources limited to their policy scopes
Shield icons show app owner and whether domain ownership is verified
July 20263
June 20264
Resource-scoped roles for Gateway policies and Zero Trust lists, complementing account-level roles
Tokens can be searched by name in the dashboard and through a name query parameter
Product overview pages show current-period spend and let you create budget alerts
Developers can build third-party apps that integrate with Cloudflare via OAuth, private or public
May 20262
April 20268
Pay Cloudflare services from a bank account via Link, for US-based self-serve accounts
Custom key-value tags on resources, queryable account-wide with up to 20 filtersPreview
Ten Cloudflare-generated 5xx errors return structured JSON or Markdown per RFC 9457
New dashboard page as a starting point for network security and connectivity products
Daily usage cost dashboard and email alerts when projected spend crosses a dollar threshold
Authorize OAuth apps for specific accounts, clearer consent screens, and revoke access from profile
Tokens use an identifiable format so secret scanning tools detect leaks and token is deactivated
March 20265
Service Keys stop working September 30, 2026; replaced by API TokensDeprecation
Authentik supported as an identity provider, alongside Okta and Microsoft Entra IDGA
SCIM user and group operations are recorded in Audit Logs v2
Seven retryable 1xxx error codes now return a Retry-After header, on all plans
Errors return RFC 9457 JSON on Accept header; http_status renamed to statusDeprecation
February 20266
Returns structured Markdown for 1xxx errors when clients send Accept: text/markdown
Origin response limit raised from 1 MB to 2 MB; content-encoded origin responses supported
New roles to edit a specific Access policy or service tokenPreview
Beta with many breaking changes from OpenAPI updates and new API resourcesDeprecation
Network converts HTML to markdown on request via Accept text/markdown header for enabled zones
Adds AI Search data sources, Workers script targeted placement, and many bug fixes