generated: '2026-10-03'
method: derived
generator: derive-vocabulary.py
source:
- openapi/cloudflare-accounts-api-openapi.yml
- openapi/cloudflare-ai-inference-api-openapi.yml
- openapi/cloudflare-buckets-api-openapi.yml
- openapi/cloudflare-bulk-operations-api-openapi.yml
- openapi/cloudflare-certificates-api-openapi.yml
vocabulary:
  name: Cloudflare Domain Vocabulary
  description: 'Terms declared by Cloudflare''s own API contract: its resource groups, objects and enumerations, with the contract''s definitions.
    Derived, not authored.'
  version: '2026-10-03'
  terms:
  - term: AI Inference
    definition: Execute AI models for text generation, embeddings, image classification, and other machine learning tasks.
    tags:
    - Resource Group
    source: openapi/cloudflare-ai-inference-api-openapi.yml
  - term: Buckets
    definition: Create, list, and delete R2 storage buckets.
    tags:
    - Resource Group
    source: openapi/cloudflare-buckets-api-openapi.yml
  - term: Bulk Operations
    definition: Write, read, and delete multiple key-value pairs in a single request.
    tags:
    - Resource Group
    source: openapi/cloudflare-bulk-operations-api-openapi.yml
  - term: Configuration
    definition: Configure bucket settings including CORS, lifecycle rules, and public access.
    tags:
    - Resource Group
    source: openapi/cloudflare-configuration-api-openapi.yml
  - term: Configurations
    definition: Create, list, update, and delete Hyperdrive configurations that connect Workers to databases.
    tags:
    - Resource Group
    source: openapi/cloudflare-configurations-api-openapi.yml
  - term: Consumers
    definition: Manage consumers that process messages from queues.
    tags:
    - Resource Group
    source: openapi/cloudflare-consumers-api-openapi.yml
  - term: Databases
    definition: Create, list, update, and delete D1 serverless SQL databases.
    tags:
    - Resource Group
    source: openapi/cloudflare-databases-api-openapi.yml
  - term: Deployments
    definition: Manage deployments that direct traffic to specific Worker versions.
    tags:
    - Resource Group
    source: openapi/cloudflare-deployments-api-openapi.yml
  - term: Direct Uploads
    definition: Create one-time upload URLs for client-side image uploads.
    tags:
    - Resource Group
    source: openapi/cloudflare-direct-uploads-api-openapi.yml
  - term: DNS Analytics
    definition: Access DNS query analytics for a zone with aggregated and time-grouped metrics.
    tags:
    - Resource Group
    source: openapi/cloudflare-dns-analytics-api-openapi.yml
  - term: DNS Batch Operations
    definition: Execute multiple DNS record operations in a single API call.
    tags:
    - Resource Group
    source: openapi/cloudflare-dns-batch-operations-api-openapi.yml
  - term: DNS Record Import/Export
    definition: Import and export DNS records using BIND zone file format.
    tags:
    - Resource Group
    source: openapi/cloudflare-dns-record-import-export-api-openapi.yml
  - term: DNS Record Scanning
    definition: Scan for common DNS records on a domain and review discovered records.
    tags:
    - Resource Group
    source: openapi/cloudflare-dns-record-scanning-api-openapi.yml
  - term: DNS Records
    definition: Manage DNS records for a zone including A, AAAA, CNAME, MX, TXT, SRV, and other record types.
    tags:
    - Resource Group
    source: openapi/cloudflare-dns-records-api-openapi.yml
  - term: DNSSEC
    definition: Manage DNSSEC settings for a zone to protect against DNS spoofing.
    tags:
    - Resource Group
    source: openapi/cloudflare-dnssec-api-openapi.yml
  - term: Domains
    definition: Attach and detach custom domains to Worker scripts.
    tags:
    - Resource Group
    source: openapi/cloudflare-domains-api-openapi.yml
  - term: Gateways
    definition: Create, list, update, and delete AI Gateway instances.
    tags:
    - Resource Group
    source: openapi/cloudflare-gateways-api-openapi.yml
  - term: Images
    definition: Upload, list, update, and delete image assets.
    tags:
    - Resource Group
    source: openapi/cloudflare-images-api-openapi.yml
  - term: Import Export
    definition: Import SQL into and export SQL from D1 databases.
    tags:
    - Resource Group
    source: openapi/cloudflare-import-export-api-openapi.yml
  - term: Indexes
    definition: Create, list, update, and delete vector indexes.
    tags:
    - Resource Group
    source: openapi/cloudflare-indexes-api-openapi.yml
  - term: Key-Value Pairs
    definition: Read, write, and delete individual key-value pairs.
    tags:
    - Resource Group
    source: openapi/cloudflare-key-value-pairs-api-openapi.yml
  - term: Keys
    definition: List and manage keys within a namespace.
    tags:
    - Resource Group
    source: openapi/cloudflare-keys-api-openapi.yml
  - term: Live Inputs
    definition: Manage live streaming inputs for RTMPS and SRT ingestion.
    tags:
    - Resource Group
    source: openapi/cloudflare-live-inputs-api-openapi.yml
  - term: Logs
    definition: Access request logs and analytics for AI Gateway traffic.
    tags:
    - Resource Group
    source: openapi/cloudflare-logs-api-openapi.yml
  - term: Messages
    definition: Send, pull, and acknowledge messages.
    tags:
    - Resource Group
    source: openapi/cloudflare-messages-api-openapi.yml
  - term: Metadata
    definition: Read metadata associated with keys.
    tags:
    - Resource Group
    source: openapi/cloudflare-metadata-api-openapi.yml
  - term: Namespaces
    definition: Manage Durable Object namespaces that group related object instances.
    tags:
    - Resource Group
    source: openapi/cloudflare-namespaces-api-openapi.yml
  - term: Objects
    definition: List and manage individual Durable Object instances within a namespace.
    tags:
    - Resource Group
    source: openapi/cloudflare-objects-api-openapi.yml
  - term: OpenAI Compatible
    definition: OpenAI-compatible endpoints for chat completions, text completions, embeddings, and responses.
    tags:
    - Resource Group
    source: openapi/cloudflare-openai-compatible-api-openapi.yml
  - term: Purge
    definition: Purge all messages from a queue.
    tags:
    - Resource Group
    source: openapi/cloudflare-purge-api-openapi.yml
  - term: Queries
    definition: Execute SQL queries against D1 databases.
    tags:
    - Resource Group
    source: openapi/cloudflare-queries-api-openapi.yml
  - term: Queues
    definition: Create, list, update, and delete message queues.
    tags:
    - Resource Group
    source: openapi/cloudflare-queues-api-openapi.yml
  - term: Routes
    definition: Map URL patterns to Worker scripts within a zone.
    tags:
    - Resource Group
    source: openapi/cloudflare-routes-api-openapi.yml
  - term: Scripts
    definition: Upload, download, and manage Worker scripts by name.
    tags:
    - Resource Group
    source: openapi/cloudflare-scripts-api-openapi.yml
  - term: Secrets
    definition: Manage encrypted environment variables for Worker scripts.
    tags:
    - Resource Group
    source: openapi/cloudflare-secrets-api-openapi.yml
  - term: Signing Keys
    definition: Manage signing keys for signed video URLs.
    tags:
    - Resource Group
    source: openapi/cloudflare-signing-keys-api-openapi.yml
  - term: Time Travel
    definition: Browse and restore D1 databases to previous points in time.
    tags:
    - Resource Group
    source: openapi/cloudflare-time-travel-api-openapi.yml
  - term: Variants
    definition: Manage image variants that define transformation presets.
    tags:
    - Resource Group
    source: openapi/cloudflare-variants-api-openapi.yml
  - term: Vectors
    definition: Insert, upsert, query, get, and delete vectors within an index.
    tags:
    - Resource Group
    source: openapi/cloudflare-vectors-api-openapi.yml
  - term: Verification
    definition: Verify Turnstile challenge tokens on the server side.
    tags:
    - Resource Group
    source: openapi/cloudflare-verification-api-openapi.yml
  - term: Versions
    definition: Manage immutable snapshots of Worker code and configuration.
    tags:
    - Resource Group
    source: openapi/cloudflare-versions-api-openapi.yml
  - term: Videos
    definition: Upload, list, update, and delete video assets.
    tags:
    - Resource Group
    source: openapi/cloudflare-videos-api-openapi.yml
  - term: Webhooks
    definition: Configure webhooks for video processing notifications.
    tags:
    - Resource Group
    source: openapi/cloudflare-webhooks-api-openapi.yml
  - term: Widgets
    definition: Create, list, update, and delete Turnstile widget configurations.
    tags:
    - Resource Group
    source: openapi/cloudflare-widgets-api-openapi.yml
  - term: Workers
    definition: Manage Worker resources including creating, updating, and deleting Workers.
    tags:
    - Resource Group
    source: openapi/cloudflare-workers-api-openapi.yml
  - term: workers_logpush
    definition: Whether Logpush is turned on for the Worker.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/workers_logpush
  - term: Bookmark application
    definition: 'Object declared by the contract with fields: app_launcher_visible, domain, logo_url, name, tags, type.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/access_bookmark_props
  - term: Update custom profile
    definition: 'Object declared by the contract with fields: allowed_match_count, context_awareness, description, entries, name, shared_entries.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/dlp_update_custom_profile
  - term: tls-certificates-and-hostnames_schemas-updated_at
    definition: This is the time the certificate was updated.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/tls-certificates-and-hostnames_schemas-updated_at
  - term: tunnel_connections
    definition: The Cloudflare Tunnel connections between your origin and Cloudflare's edge.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/tunnel_connections
  - term: calls_name
    definition: A short description of Calls app, not shown to end users.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/calls_name
  - term: intel-sinkholes_sinkhole_item
    definition: 'Object declared by the contract with fields: account_tag, created_on, id, modified_on, name, r2_bucket, r2_id.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/intel-sinkholes_sinkhole_item
  - term: tunnel_route_tunnel_id
    definition: UUID of the Cloudflare Tunnel serving the route.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/tunnel_route_tunnel_id
  - term: zero-trust-gateway_description
    definition: The description of the list.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/zero-trust-gateway_description
  - term: access_email
    definition: The email address of the authenticating user.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/access_email
  - term: SAML group
    definition: Matches a SAML group. Requires a SAML identity provider.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/access_saml_group_rule
  - term: teams-devices_workspace_one_config_response
    definition: The Workspace One Config Response.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/teams-devices_workspace_one_config_response
  - term: access_connection
    definition: The IdP used to authenticate.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/access_connection
  - term: access_certificates
    definition: 'Object declared by the contract with fields: associated_hostnames, created_at, expires_on, fingerprint, id, name, updated_at.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/access_certificates
  - term: load-balancing_allow_insecure
    definition: Do not validate the certificate when monitor use HTTPS. This parameter is currently only valid for HTTP and HTTPS monitors.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/load-balancing_allow_insecure
  - term: stream_captions
    definition: 'Object declared by the contract with fields: label, language.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/stream_captions
  - term: tunnel_route_virtual_network_id
    definition: UUID of the Tunnel Virtual Network this route belongs to. If no virtual networks are configured, the route is assigned to the
      default virtual network of the account.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/tunnel_route_virtual_network_id
  - term: r2_enable_sippy_aws
    definition: 'Object declared by the contract with fields: destination, source.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/r2_enable_sippy_aws
  - term: access_schemas-domain
    definition: The domain of the Bookmark application.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/access_schemas-domain
  - term: load-balancing_header
    definition: The HTTP request headers to send in the health check. It is recommended you set a Host header by default. The User-Agent header
      cannot be overridden. This parameter is only valid for HTTP and HTTPS monitors.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/load-balancing_header
  - term: request-tracer_api-response-common
    definition: 'Object declared by the contract with fields: errors, messages, result, success.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/request-tracer_api-response-common
  - term: dns-firewall_deprecate_any_requests
    definition: Deprecate the response to ANY requests.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/dns-firewall_deprecate_any_requests
  - term: magic_psk
    definition: A randomly generated or provided string for use in the IPsec tunnel.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/magic_psk
  - term: addressing_ipam-delegations
    definition: 'Object declared by the contract with fields: cidr, created_at, delegated_account_id, id, modified_at, parent_prefix_id.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/addressing_ipam-delegations
  - term: workers_do_binding
    definition: 'Object declared by the contract with fields: class_name, environment, name, namespace_id, script_name, type.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/workers_do_binding
  - term: access_groups
    definition: 'Object declared by the contract with fields: created_at, exclude, id, include, is_default, name, require, updated_at.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/access_groups
  - term: zero-trust-gateway_deleted_at
    definition: Date of deletion, if any.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/zero-trust-gateway_deleted_at
  - term: logpush_output_options
    definition: The structured replacement for `logpull_options`. When including this field, the `logpull_option` field will be ignored.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/logpush_output_options
  - term: aaa_integration-token
    definition: The token integration key
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/aaa_integration-token
  - term: Pattern
    definition: A pattern that matches an entry
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/dlp_pattern
  - term: rum_modify-rules-request
    definition: 'Object declared by the contract with fields: delete_rules, rules.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/rum_modify-rules-request
  - term: legacy-jhs_egs-pagination
    definition: 'Object declared by the contract with fields: page, per_page.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/legacy-jhs_egs-pagination
  - term: load-balancing_path
    definition: The endpoint path you want to conduct a health check against. This parameter is only valid for HTTP and HTTPS monitors.
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/load-balancing_path
  - term: stream_position
    definition: 'The location of the image. Valid positions are: `upperRight`, `upperLeft`, `lowerLeft`, `lowerRight`, and `center`. Note that
      `center` ignores the `padding` parameter.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/stream_position
  - term: access_users
    definition: 'Object declared by the contract with fields: access_seat, active_device_count, created_at, email, gateway_seat, id, last_successful_login,
      name, seat_uid, uid, updated_at.'
    tags:
    - Object
    source: openapi/cloudflare-accounts-api-openapi.yml#/components/schemas/access_users