Cloudflare/ssl Certificates

@webframp/cloudflare/ssl-certificatesv2026.08.28.2· 13d agoMODELS

01README

Cloudflare SSL/TLS — certificate packs, custom certificates, certificate authority

02Release Notes

2026.08.28.2

Hardened codegen: instance names sanitized against path traversal; 429 rate-limit retry with Retry-After; string schema patterns emit regex validation; output schemas passthrough unknown fields; apiToken now optional and vault-wireable with CLOUDFLARE_API_TOKEN env fallback.

03Models1

@webframp/cloudflare/ssl-certificatesv2026.08.28.2cloudflare/ssl_certificates.ts

Global Arguments

Argument	Type	Required	Description
apiToken?	string	no	Cloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
zoneId	string	yes	Cloudflare zone ID

fn list_certificates(zone_id?: string, page?: number, per_page?: number, limit?: number, offset?: number)

List Certificates

Argument	Type	Required
zone_id?	string	no
page?	number	no
per_page?	number	no
limit?	number	no
offset?	number	no

fn create_certificate(csr: unknown, hostnames: unknown, request_type: unknown, requested_validity?: unknown)

Create Certificate

Argument	Type	Required
csr	unknown	yes
hostnames	unknown	yes
request_type	unknown	yes
requested_validity?	unknown	no

fn get_certificate(certificate_id: string)

Get Certificate

Argument	Type	Required	Description
certificate_id	string	yes

fn delete_origin_ca_revoke_certificate(certificate_id: string)

Revoke Certificate

Argument	Type	Required	Description
certificate_id	string	yes

fn list_ssl_configurations(page?: number, per_page?: number, match?: enum, status?: enum)

List SSL Configurations

Argument	Type	Required
page?	number	no
per_page?	number	no
match?	enum	no
status?	enum	no

fn create_ssl_configuration(bundle_method?: unknown, certificate: unknown, custom_csr_id?: unknown, deploy?: unknown, geo_restrictions?: unknown, policy?: unknown, private_key?: unknown, type?: unknown)

Create SSL Configuration

Argument	Type	Required
bundle_method?	unknown	no
certificate	unknown	yes
custom_csr_id?	unknown	no
deploy?	unknown	no
geo_restrictions?	unknown	no
policy?	unknown	no
private_key?	unknown	no
type?	unknown	no

fn update_custom_ssl_for_a_zone_re_prioritize_ssl_certificates(certificates: array)

Re-prioritize SSL Certificates

Argument	Type	Required	Description
certificates	array	yes	Array of ordered certificates.

fn get_custom_ssl_for_a_zone_ssl_configuration_details(custom_certificate_id: string)

SSL Configuration Details

Argument	Type	Required	Description
custom_certificate_id	string	yes

fn update_custom_ssl_for_a_zone_edit_ssl_configuration(custom_certificate_id: string, bundle_method?: unknown, certificate?: unknown, custom_csr_id?: unknown, deploy?: unknown, geo_restrictions?: unknown, policy?: unknown, private_key?: unknown)

Edit SSL Configuration

Argument	Type	Required
custom_certificate_id	string	yes
bundle_method?	unknown	no
certificate?	unknown	no
custom_csr_id?	unknown	no
deploy?	unknown	no
geo_restrictions?	unknown	no
policy?	unknown	no
private_key?	unknown	no

fn delete_ssl_configuration(custom_certificate_id: string)

Delete SSL Configuration

Argument	Type	Required	Description
custom_certificate_id	string	yes

fn create_analyze_certificate_analyze_certificate(bundle_method?: unknown, certificate?: unknown)

Analyze Certificate

Argument	Type	Required	Description
bundle_method?	unknown	no
certificate?	unknown	no

fn list_certificate_packs(page?: number, per_page?: number, status?: enum, deploy?: enum)

List Certificate Packs

Argument	Type	Required
page?	number	no
per_page?	number	no
status?	enum	no
deploy?	enum	no

fn create_certificate_packs_order_advanced_certificate_manager_certificate_pack(certificate_authority: unknown, cloudflare_branding?: unknown, hosts: unknown, type: unknown, validation_method: unknown, validity_days: unknown)

Order Advanced Certificate Manager Certificate Pack

Argument	Type	Required
certificate_authority	unknown	yes
cloudflare_branding?	unknown	no
hosts	unknown	yes
type	unknown	yes
validation_method	unknown	yes
validity_days	unknown	yes

fn get_certificate_pack_quotas()

Get Certificate Pack Quotas

fn get_certificate_pack(certificate_pack_id: string)

Get Certificate Pack

Argument	Type	Required	Description
certificate_pack_id	string	yes

fn update_certificate_packs_restart_validation_for_advanced_certificate_manager_certificate_pack(certificate_pack_id: string, cloudflare_branding?: unknown)

Restart Validation or Update Advanced Certificate Manager Certificate Pack

Argument	Type	Required	Description
certificate_pack_id	string	yes
cloudflare_branding?	unknown	no

fn delete_advanced_certificate_manager_certificate_pack(certificate_pack_id: string)

Delete Advanced Certificate Manager Certificate Pack

Argument	Type	Required	Description
certificate_pack_id	string	yes

fn get_universal_ssl_settings_for_a_zone_universal_ssl_settings_details()

Universal SSL Settings Details

fn update_universal_ssl_settings_for_a_zone_edit_universal_ssl_settings(enabled?: unknown)

Edit Universal SSL Settings

Argument	Type	Required	Description
enabled?	unknown	no

fn list_ssl_verification_ssl_verification_details(retry?: boolean)

SSL Verification Details

Argument	Type	Required	Description
retry?	boolean	no

fn update_ssl_verification_edit_ssl_certificate_pack_validation_method(certificate_pack_id: string, validation_method: unknown)

Edit SSL Certificate Pack Validation Method

Argument	Type	Required	Description
certificate_pack_id	string	yes
validation_method	unknown	yes

Resources

certificates(infinite)— List Certificates

certificate(infinite)— Create Certificate

ssl_configurations(infinite)— List SSL Configurations

ssl_configuration(infinite)— Create SSL Configuration

custom_ssl_for_a_zone_re_prioritize_ssl_certificates(infinite)— Re-prioritize SSL Certificates

custom_ssl_for_a_zone_ssl_configuration_details(infinite)— SSL Configuration Details

custom_ssl_for_a_zone_edit_ssl_configuration(infinite)— Edit SSL Configuration

analyze_certificate_analyze_certificate(infinite)— Analyze Certificate

certificate_packs(infinite)— List Certificate Packs

certificate_packs_order_advanced_certificate_manager_certificate_pack(infinite)— Order Advanced Certificate Manager Certificate Pack

certificate_pack_quotas(infinite)— Get Certificate Pack Quotas

certificate_pack(infinite)— Get Certificate Pack

certificate_packs_restart_validation_for_advanced_certificate_manager_certificate_pack(infinite)— Restart Validation or Update Advanced Certificate Manager Certificate Pack

universal_ssl_settings_for_a_zone_universal_ssl_settings_details(infinite)— Universal SSL Settings Details

universal_ssl_settings_for_a_zone_edit_universal_ssl_settings(infinite)— Edit Universal SSL Settings

ssl_verification_ssl_verification_details(infinite)— SSL Verification Details

ssl_verification_edit_ssl_certificate_pack_validation_method(infinite)— Edit SSL Certificate Pack Validation Method

04Previous Versions7

2026.08.28.1Aug 28, 2026

2026.08.28.1

Changed: Normalized the extension license to Apache-2.0 and corrected the copyright holder to "Sean Escriva". Extensions that previously shipped an MIT LICENSE.md are now Apache-2.0, consistent with the repository root and every other extension. No code or behavioral changes.

Upgrade note: License text only. No API, schema, or runtime behavior changed.

2026.08.26.2

Fixed: Restored inline npm:zod@4.4.3 import specifiers so the registry quality scorer can resolve dependencies and score the extension. An earlier release used a bare "zod" import-map specifier, which published but scored as unscored.

Changed: Retained explicit compilerOptions.strict in deno.json. No behavioral or schema changes.

2026.08.26.2Aug 27, 2026

2026.08.26.2

Changed: Retained explicit compilerOptions.strict in deno.json. No behavioral or schema changes.

2026.08.25.1Aug 26, 2026

2026.08.25.1

Changed: Updated labels for improved extension discoverability. Added cross-cutting category labels (security, observability, finops, infrastructure, networking, compliance, devops, ai, incident-response) where applicable.

updated labels

2026.08.24.1Aug 24, 2026

2026.08.24.1

Added: Output metadata attributes for observability.

durationMs: Method execution duration in milliseconds.
collectedBy: Extension name that produced the data.
fetchedAt: ISO 8601 timestamp when data was fetched (added to resources that previously lacked it).

2026.08.21.1Aug 22, 2026

2026.08.21.1

Changed: Errors and validation now say what went wrong and where.

Cloudflare API failures (HTTP errors and success: false API responses) now name the HTTP method and path that was attempted, in addition to the original status/message. Previously the error read only Cloudflare API error: <message>, with no indication of which endpoint the method call was hitting — now it reads Cloudflare API request failed: GET /zones/<zone>/custom_certificates/<id>: <message>. This applies to every method on this model, since they all share the same request helper.
certificate_id, custom_certificate_id, and certificate_pack_id are now validated as non-empty before any request is made. Passing an empty string previously sent a request to a malformed URL (e.g. /zones/<zone>/ssl/certificate_packs/) and produced a confusing 404 from Cloudflare; each now fails fast with a <field> must not be empty message.

Upgrade note: No method was added, removed, or renamed. Existing callers that always pass non-empty identifiers see no behavioral change beyond clearer error text.

2026.07.27.1Jul 27, 2026

2026.07.27.1

Fixed: Regenerated from scripts/cloudflare-codegen after two generator bugs were repaired (webframp/swamp-extensions#284).

Methods referencing an undeclared path parameter did not compile. The generator derived a method's arguments schema and execute signature from the OpenAPI parameters list, but built the request URL from the path template. Where the Cloudflare spec omits a declaration for a {placeholder} — which it does in several places — the result was a method with arguments: z.object({}) and an unused _args parameter whose body still interpolated args.<name>. Those methods failed type checking and were uncallable even if they had compiled, because the argument was never declared. Path-template placeholders are now unioned into the declared parameters, so the schema, the signature, and the body agree.
Generated tests could request a URL the mock server did not serve. Test arguments merged the request-body fixture over the path-parameter values, so a body property sharing a name with a path parameter (commonly id) substituted its own example value into the URL. The request then missed the mock and failed with Cloudflare API error: Not found. Path parameters now take precedence, matching what the generated model already does by excluding path-parameter names from the request body.

Upgrade note: No API surface change and no method was added or removed. If this extension type-checked and tested cleanly before, its behavior is unchanged and only the version moved. Extensions that previously failed deno check or deno task test now pass.

2026.07.19.1Jul 19, 2026

2026.07.19.1

Added: Initial code-generated release of @webframp/cloudflare/ssl-certificates with 21 methods covering the Cloudflare ssl certificates API surface.

05Stats

100 / 100

Downloads

Archive size

19.3 KB

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types (deprecated)1/1earned
Dependencies pass trust audit2/2earned
Has description1/1earned
Platform support declared (or universal)2/2earned
License declared1/1earned
Verified public repository2/2earned

Repository

https://github.com/webframp/swamp-extensions

06Platforms

linux · x86_64 linux · aarch64 macOS · x86_64 macOS · aarch64

07Labels

#cloudflare #ssl #tls #certificates