cf_get_entrypoint_ruleset
Retrieve the ordered list of rules deployed at a Cloudflare zone's entrypoint for a specified phase, showing what actually executes in sequence.
Instructions
Get the ordered list of rules deployed at a zone's entrypoint for a phase.
The "entrypoint ruleset" is the in-line custom ruleset Cloudflare runs
at a given phase. For most WAF/rate-limit investigations this is the
ruleset you want — it shows what's actually executing, in order.
Args:
zone_id: 32-char Cloudflare zone ID.
phase: phase name. Common values:
- http_request_firewall_custom (custom WAF rules)
- http_request_firewall_managed (managed WAF deployments)
- http_ratelimit (rate-limiting rules)
- http_request_sbfm (Super Bot Fight Mode rules)
- http_request_transform (Transform Rules — request)
- http_request_origin (Origin Rules)
Calls: GET /zones/{zone_id}/rulesets/phases/{phase}/entrypoint.
Returns: envelope with `data` = the entrypoint ruleset dict including
its ordered `rules[]`.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| zone_id | Yes | ||
| phase | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |