Structural Comparison Matrix
| # | Deprecation | API surface | Deadline | Status |
|---|---|---|---|---|
| 1 | Legacy Workers KV namespace routes | /accounts/{account_id}/workers/namespaces/* | 2026-10-15 | Upcoming |
| 2 | Zero Trust CIDR route endpoints | Zero Trust Networks routes API | 2026-10-05 | Upcoming |
| 3 | connections field dropped from Tunnel API | Tunnel/Mesh list and get responses | 2026-10-05 | Upcoming |
| 4 | Zone Settings Batch API | /zones/{zone_id}/settings (batch) | 2026-09-15 | Upcoming |
| 5 | 65-character account name limit enforced | Account creation/update APIs | 2026-09-27 | Upcoming |
| 6 | foundation_dns setting | DNS settings endpoints | 2026-11-23 | Upcoming |
| 7 | Account Roles API | /accounts/{account_id}/roles | 2026-07-21 (no published EOL yet) | Deprecated |
| 8 | AMP/SXG API | /zones/{zone_id}/amp/sxg | 2026-06-23 | Already ended |
| 9 | Legacy Registrar domain API | /accounts/{account_id}/registrar/domains | 2026-09-27 | Upcoming |
| 10 | Gateway Audit SSH rules | Gateway network policy audit_ssh action | 2026-07-15 | Already ended |
Every deadline above is Cloudflare’s own stated date, cross-checked against its official changelog entry for that deprecation. Two (AMP/SXG and Gateway Audit SSH) already reached end of life before this guide was published - if automation calling either has been failing with no obvious cause, that is why.
The 10 deprecations, in detail
- Cloudflare Deprecates Legacy Workers KV API Routes: the legacy
/workers/namespaces/*routes stop 2026-10-15. This site’s own KV bindings are the dogfooded example. - Cloudflare Removes Zero Trust CIDR Route Endpoints: CIDR-encoded Tunnel/WARP Connector routing goes away 2026-10-05.
- Cloudflare Drops connections Field From Tunnel API: a schema change on the same 2026-10-05 date, distinct from cluster 2: a missing response field, not a removed endpoint.
- Cloudflare Deprecates the Zone Settings Batch API: batched zone-settings reads/writes end 2026-09-15; migrate to per-setting calls.
- Cloudflare Now Enforces a 65-Char Account Name Limit: a new validation constraint on account creation/rename APIs, effective 2026-09-27.
- Cloudflare Deprecates the foundation_dns DNS Setting: the
foundation_dnsboolean stops working 2026-11-23. - Cloudflare Deprecates the Account Roles API: already in effect since 2026-07-21; migrate to the Permission Groups API, a genuinely different data model.
- Cloudflare AMP/SXG API Has Reached End of Life: already ended 2026-06-23, with no replacement.
- Cloudflare Deprecates Legacy Registrar Domain API: domain registration/renewal automation loses its endpoint 2026-09-27.
- Cloudflare Deprecates Gateway Audit SSH Rules: a staged rollout that fully ended 2026-07-15, three separate dates where a policy-as-code pipeline could have quietly broken.
Why this happened in one window
Cloudflare is consolidating storage APIs under a unified /storage/ namespace and tightening validation across account management, alongside routine Zero Trust and Gateway feature retirements. None of the dates or endpoint paths above are estimated - they come directly from Cloudflare’s official API deprecations reference and its changelog, cross-checked per cluster against the individual changelog post.
Browse the rest of the Data Automation archive for more Cloudflare API and pipeline coverage.
