Skip to main content

Cloudflare/cloudforce One

@swamp/cloudflare/cloudforce-onev2026.09.15.1· 1d agoMODELS
01README

Cloudflare cloudforce-one infrastructure models

02Release Notes
  • Added: events
  • Added: priority-intelligence
  • Added: backtests
  • Added: evaluations
03Models13
@swamp/cloudflare/cloudforce-one/backtestsv2026.09.15.1backtests.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
as_of?string
backtest_days?number
candidate_limit?number
dataset_ids?array
emerging_min_current_count?number
established_min_absolute_delta?number
established_min_prior_count?number
established_min_relative_delta?number
window_days?number
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Backtests
fn get(id: string)
Get a Backtests
ArgumentTypeDescription
idstringThe ID of the Backtests
fn lookup()
Look up an existing Backtests by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Backtests by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Backtests to import
fn sync(identifier?: string)
Sync Backtests state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Backtests by id (e.g. one discovered by list)

Resources

state(infinite)— Backtests resource state
@swamp/cloudflare/cloudforce-one/collectionsv2026.07.21.1collections.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
metadata?record
namestring
columns?array
description?string
project_id?string
tags?array
rows?array
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Collections
fn get(id: string)
Get a Collections
ArgumentTypeDescription
idstringThe ID of the Collections
fn lookup()
Look up an existing Collections by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Collections by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Collections to import
fn update(identifier?: string)
Update Collections attributes
ArgumentTypeDescription
identifier?stringTarget a specific Collections by id (e.g. one discovered by list)
fn delete(id: string)
Delete the Collections
ArgumentTypeDescription
idstringThe ID of the Collections
fn sync(identifier?: string)
Sync Collections state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Collections by id (e.g. one discovered by list)

Resources

state(infinite)— Collections resource state
@swamp/cloudflare/cloudforce-one/evaluationsv2026.09.15.1evaluations.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
as_of?string
candidate_limit?number
dataset_ids?array
emerging_min_current_count?number
established_min_absolute_delta?number
established_min_prior_count?number
established_min_relative_delta?number
window_days?number
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Evaluations
fn get(id: string)
Get a Evaluations
ArgumentTypeDescription
idstringThe ID of the Evaluations
fn lookup()
Look up an existing Evaluations by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Evaluations by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Evaluations to import
fn sync(identifier?: string)
Sync Evaluations state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Evaluations by id (e.g. one discovered by list)

Resources

state(infinite)— Evaluations resource state
@swamp/cloudflare/cloudforce-one/eventsv2026.09.15.1events.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
attacker?string
attackerCountry?string
category?string
createdAt?string
datasetId?arrayDataset UUIDs to query, or one standalone scope value: 'all'/'*' for the legacy all-datasets behavior, 'analytics' for isAnalytics=true datasets, or 'operational' for isAnalytics=false datasets. If not provided, uses the default dataset.
date?string
event?string
indicator?string
indicatorType?string
insight?string
raw?object
targetCountry?string
targetIndustry?string
tlp?string
cursor?stringCursor for pagination. When provided, filters are embedded in the cursor so you only need to pass cursor and pageSize.
order?enum
orderBy?string
page?number
pageSize?number
search?arrayStructured search as a JSON array of {field, op, value} objects. Use the 'in' operator with an array value to bulk-check up to 100 values. Multiple conditions are AND'd together. Max 10 conditions per request.
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Events
fn get(id: string)
Get a Events
ArgumentTypeDescription
idstringThe ID of the Events
fn lookup()
Look up an existing Events by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Events by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Events to import
fn update(identifier?: string)
Update Events attributes
ArgumentTypeDescription
identifier?stringTarget a specific Events by id (e.g. one discovered by list)
fn sync(identifier?: string)
Sync Events state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Events by id (e.g. one discovered by list)

Resources

state(infinite)— Events resource state
@swamp/cloudflare/cloudforce-one/groupsv2026.07.21.1groups.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
descriptionstring
namestring
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Groups
fn get(id: string)
Get a Groups
ArgumentTypeDescription
idstringThe ID of the Groups
fn lookup()
Look up an existing Groups by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Groups by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Groups to import
fn update(identifier?: string)
Update Groups attributes
ArgumentTypeDescription
identifier?stringTarget a specific Groups by id (e.g. one discovered by list)
fn delete(id: string)
Delete the Groups
ArgumentTypeDescription
idstringThe ID of the Groups
fn sync(identifier?: string)
Sync Groups state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Groups by id (e.g. one discovered by list)

Resources

state(infinite)— Groups resource state
@swamp/cloudflare/cloudforce-one/priority-intelligencev2026.09.15.1priority-intelligence.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
labels?array
priority?number
requirementstring
tlp?string
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Priority-intelligence
fn get(id: string)
Get a Priority-intelligence
ArgumentTypeDescription
idstringThe ID of the Priority-intelligence
fn lookup()
Look up an existing Priority-intelligence by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Priority-intelligence by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Priority-intelligence to import
fn update(identifier?: string)
Update Priority-intelligence attributes
ArgumentTypeDescription
identifier?stringTarget a specific Priority-intelligence by id (e.g. one discovered by list)
fn delete(id: string)
Delete the Priority-intelligence
ArgumentTypeDescription
idstringThe ID of the Priority-intelligence
fn sync(identifier?: string)
Sync Priority-intelligence state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Priority-intelligence by id (e.g. one discovered by list)

Resources

state(infinite)— Priority-intelligence resource state
@swamp/cloudflare/cloudforce-one/priorityv2026.07.21.1priority.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
labels?arrayList of labels.
priority?numberPriority.
requirement?stringRequirement.
tlp?enumThe CISA defined Traffic Light Protocol (TLP).
pagenumberPage number of results.
per_pagenumberNumber of results per page.
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Priority
fn get(id: string)
Get a Priority
ArgumentTypeDescription
idstringThe ID of the Priority
fn lookup()
Look up an existing Priority by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Priority by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Priority to import
fn update(identifier?: string)
Update Priority attributes
ArgumentTypeDescription
identifier?stringTarget a specific Priority by id (e.g. one discovered by list)
fn delete(id: string)
Delete the Priority
ArgumentTypeDescription
idstringThe ID of the Priority
fn sync(identifier?: string)
Sync Priority state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Priority by id (e.g. one discovered by list)

Resources

state(infinite)— Priority resource state
@swamp/cloudflare/cloudforce-one/requestsv2026.07.21.1requests.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
content?stringRequest content.
priority?stringPriority for analyzing the request.
request_type?stringRequested information from request.
summary?stringBrief description of the request.
tlp?enumThe CISA defined Traffic Light Protocol (TLP).
completed_after?string
completed_before?string
created_after?string
created_before?string
pagenumberPage number of results.
per_pagenumberNumber of results per page.
sort_by?stringField to sort results by.
sort_order?enumSort order (asc or desc).
status?enumRequest Status.
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Requests
fn get(id: string)
Get a Requests
ArgumentTypeDescription
idstringThe ID of the Requests
fn lookup()
Look up an existing Requests by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Requests by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Requests to import
fn update(identifier?: string)
Update Requests attributes
ArgumentTypeDescription
identifier?stringTarget a specific Requests by id (e.g. one discovered by list)
fn delete(id: string)
Delete the Requests
ArgumentTypeDescription
idstringThe ID of the Requests
fn sync(identifier?: string)
Sync Requests state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Requests by id (e.g. one discovered by list)

Resources

state(infinite)— Requests resource state
@swamp/cloudflare/cloudforce-one/rulesv2026.08.27.1rules.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
commit_message?stringHuman-readable justification for this change. Required for internal-account submissions; optional for customer accounts and automated sync.
contentstring
description?stringHuman-readable description of the rule. Auto-extracted from YARA meta if present.
enabled?booleanWhether this rule is active for dice consumers.
is_public?booleanWhether this rule is visible to other internal accounts.
meta?arrayAdds YARA meta entries to the rule's meta block and stores them in rule_meta alongside content metadata. Use valid YARA identifiers for keys; exclude 'name', 'enabled', and 'description'. You may repeat keys.
namestring
namespaces?arrayOptional WfP deployment tags (customer rules only). Internal rules leave empty.
pathstring
actions?array
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Rules
fn get(id: string)
Get a Rules
ArgumentTypeDescription
idstringThe ID of the Rules
fn lookup()
Look up an existing Rules by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Rules by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Rules to import
fn update(identifier?: string)
Update Rules attributes
ArgumentTypeDescription
identifier?stringTarget a specific Rules by id (e.g. one discovered by list)
fn delete(id: string)
Delete the Rules
ArgumentTypeDescription
idstringThe ID of the Rules
fn sync(identifier?: string)
Sync Rules state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Rules by id (e.g. one discovered by list)

Resources

state(infinite)— Rules resource state
@swamp/cloudflare/cloudforce-one/skillsv2026.09.03.1skills.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
config?string
is_active?boolean
namestring
output_schemastring
promptstring
typeenum
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Skills
fn get(id: string)
Get a Skills
ArgumentTypeDescription
idstringThe ID of the Skills
fn lookup()
Look up an existing Skills by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Skills by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Skills to import
fn update(identifier?: string)
Update Skills attributes
ArgumentTypeDescription
identifier?stringTarget a specific Skills by id (e.g. one discovered by list)
fn delete(id: string)
Delete the Skills
ArgumentTypeDescription
idstringThe ID of the Skills
fn sync(identifier?: string)
Sync Skills state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Skills by id (e.g. one discovered by list)

Resources

state(infinite)— Skills resource state
@swamp/cloudflare/cloudforce-one/structuredv2026.09.11.1structured.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
conditionobjectNested condition groups support up to 10 levels of depth.
description?string
enabled?boolean
meta?array
namestring
status?enumDisposition for matching email. This emits status metadata with the selected value.
strings?array
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Structured
fn get(id: string)
Get a Structured
ArgumentTypeDescription
idstringThe ID of the Structured
fn lookup()
Look up an existing Structured by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Structured by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Structured to import
fn update(identifier?: string)
Update Structured attributes
ArgumentTypeDescription
identifier?stringTarget a specific Structured by id (e.g. one discovered by list)
fn delete(id: string)
Delete the Structured
ArgumentTypeDescription
idstringThe ID of the Structured
fn sync(identifier?: string)
Sync Structured state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Structured by id (e.g. one discovered by list)

Resources

state(infinite)— Structured resource state
@swamp/cloudflare/cloudforce-one/takedown-noticesv2026.07.21.1takedown-notices.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
domainstring
matchId?number
matchType?enum
queryId?number
status?enum
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Takedown-notices
fn get(id: string)
Get a Takedown-notices
ArgumentTypeDescription
idstringThe ID of the Takedown-notices
fn lookup()
Look up an existing Takedown-notices by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Takedown-notices by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Takedown-notices to import
fn update(identifier?: string)
Update Takedown-notices attributes
ArgumentTypeDescription
identifier?stringTarget a specific Takedown-notices by id (e.g. one discovered by list)
fn delete(id: string)
Delete the Takedown-notices
ArgumentTypeDescription
idstringThe ID of the Takedown-notices
fn sync(identifier?: string)
Sync Takedown-notices state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Takedown-notices by id (e.g. one discovered by list)

Resources

state(infinite)— Takedown-notices resource state
@swamp/cloudflare/cloudforce-one/templatesv2026.07.21.1templates.ts

Global Arguments

ArgumentTypeDescription
account_idstringCloudflare account ID
bodystring
categorystring
description?string
namestring
apiToken?stringCloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?stringCloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?stringCloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.
fn create()
Create a Templates
fn get(id: string)
Get a Templates
ArgumentTypeDescription
idstringThe ID of the Templates
fn lookup()
Look up an existing Templates by matching global argument values and import it into state
fn adopt(id: string)
Import an existing Templates by ID into state for management
ArgumentTypeDescription
idstringThe ID of the Templates to import
fn update(identifier?: string)
Update Templates attributes
ArgumentTypeDescription
identifier?stringTarget a specific Templates by id (e.g. one discovered by list)
fn delete(id: string)
Delete the Templates
ArgumentTypeDescription
idstringThe ID of the Templates
fn sync(identifier?: string)
Sync Templates state from Cloudflare
ArgumentTypeDescription
identifier?stringTarget a specific Templates by id (e.g. one discovered by list)

Resources

state(infinite)— Templates resource state
04Previous Versions14
2026.09.11.1
  • Updated: structured
2026.09.03.1
  • Added: skills

Added 1 models

2026.08.27.1
  • Updated: rules
  • Updated: structured
2026.08.25.2
  • Updated: rules
  • Added: structured

Added 1 models

2026.08.25.1
  • Updated: rules

Removed 1 models

2026.08.15.1
  • Added: structured

Added 1 models

2026.07.24.1
  • Updated: rules
2026.07.21.1
  • Updated: groups
  • Updated: requests
  • Updated: priority
  • Updated: rules
  • Updated: templates
  • Updated: takedown-notices
  • Updated: collections
2026.07.18.2

Modified 7 models

2026.07.16.1
  • Updated: rules
2026.06.24.1
  • Updated: rules
2026.06.08.2
  • Updated: groups
  • Updated: requests
  • Updated: priority
  • Updated: rules
  • Updated: templates
  • Updated: takedown-notices
  • Updated: collections
2026.05.29.1
  • Updated: groups
  • Updated: requests
  • Updated: priority
  • Updated: rules
  • Updated: templates
  • Updated: takedown-notices
  • Updated: collections
2026.05.22.1
  • Added: groups
  • Added: requests
  • Added: priority
  • Added: rules
  • Added: templates
  • Added: takedown-notices
  • Added: collections
05Stats
A
100 / 100
Downloads
0
Archive size
51.5 KB
Verified by Swamp
  • Has README or module doc2/2earned
  • README has a code example1/1earned
  • README is substantive1/1earned
  • Most symbols documented1/1earned
  • No slow types (deprecated)1/1earned
  • Dependencies pass trust audit2/2earned
  • Has description1/1earned
  • Platform support declared (or universal)2/2earned
  • License declared1/1earned
  • Verified public repository2/2earned
06Platforms
07Labels