ST-2026-090 · API endpoints & versions
Cloudflare schedules legacy CIDR route endpoint and Tunnel/Mesh connections-field removal
Cloudflare deprecated CIDR-encoded Zero Trust private-network route endpoints and will remove them on 5 October 2026; on the same date, Tunnel and Mesh list/get responses will stop embedding the connections array.
Previous state
Before 5 October 2026, the deprecated CIDR-encoded private-network route endpoints remain available alongside the route_id endpoints, and Cloudflare Tunnel and Mesh list/get responses still include the embedded connections array.
Current state
On 5 October 2026, Cloudflare will remove the CIDR-encoded route endpoints in favour of the route_id-based endpoints and will remove the connections array from cfd_tunnel and warp_connector list/get responses; connection details must then be queried through the dedicated connections endpoints.
Affected users
Who needs to care
API clients, scripts, backend services and CI/CD pipelines that call the CIDR-encoded Zero Trust route endpoints; cloudflared or Terraform workflows that manage those routes; and dashboards, monitoring scripts or automation that parse connections from cfd_tunnel or warp_connector list/get responses.
Required response
What to do
Before 5 October 2026, migrate route operations to the route_id-based endpoints, update route-management tooling as Cloudflare directs, and change Tunnel/Mesh connection readers to the dedicated /connections endpoints; test workflows that depend on the deprecated request paths or embedded response field.
Evidence boundary
What the source does not prove
Cloudflare proves the named API deprecations, replacements and 5 October 2026 removal date. It does not establish retirement of Cloudflare Tunnel or Cloudflare Mesh themselves, removal of unrelated Zero Trust APIs, or a connections-field migration requirement for cloudflared or Terraform.
Lifecycle history
Dated event sequence
- Deprecation and removal date published
Cloudflare deprecated the CIDR-encoded Zero Trust route endpoints, identified route_id-based replacements, and announced that Tunnel and Mesh list/get responses would stop embedding the connections array on 5 October 2026.
- API removals scheduled
The CIDR-encoded route endpoints are scheduled for removal, and cfd_tunnel and warp_connector list/get responses are scheduled to stop including the connections array.
Evidence ledger
First-party sources
- 01Cloudflare — API deprecations — Zero Trust Networks Route Endpoints and Cloudflare Tunnel Connections Field
Official Cloudflare API deprecation notice · 2026-07-09
Open official source ↗ - 02Cloudflare — Zero Trust Networks route endpoints and Cloudflare Tunnel connections field retiring on October 5, 2026
Official Cloudflare product changelog · 2026-07-09
Open official source ↗