Cloudflare Tunnel, Cloudflare Tunnel for SASE, Cloudflare Mesh - Zero Trust Networks route endpoints and Cloudflare Tunnel connections field retiring on October 5, 2026

On October 5, 2026 , two changes take effect across the Zero Trust Networks API and Cloudflare Tunnel API : the CIDR-encoded route endpoints are removed, and tunnel list and get responses no longer include the connections field. If you manage private network routes or read tunnel connection details through the API, cloudflared , Terraform, or another integration, review the changes in the following sections and migrate before the removal date. Route endpoints The CIDR-encoded route endpoints are deprecated in favor of the standard, route_id -based endpoints that already exist today. Both sets of endpoints route a private network through Cloudflare Tunnel or Cloudflare Mesh (the API still refers to Mesh nodes as warp_connector ) — only the request shape changes. Deprecated endpoints (removed October 5, 2026): Create a tunnel route (CIDR Endpoint): POST /accounts/{account_id}/teamnet/routes/network/{ip_network_encoded} Update a tunnel route (CIDR Endpoint): PATCH /accounts/{account_id}/teamnet/routes/network/{ip_network_encoded} Delete a tunnel route (CIDR Endpoint): DELETE /accounts/{account_id}/teamnet/routes/network/{ip_network_encoded} Replacement endpoints: Create a tunnel route: POST /accounts/{account_id}/teamnet/routes Update a tunnel route: PATCH /accounts/{account_id}/teamnet/routes/{route_id} Delete a tunnel route: DELETE /accounts/{account_id}/teamnet/routes/{route_id} What is changing Deprecated (CIDR-encoded path) Replacement Route identifier URL-encoded CIDR in the path ( /network/{ip_network_encoded} ) route_id in the path ( network moves to the request body on create) Create POST .../teamnet/routes/network/{ip_network_encoded} POST .../teamnet/routes with network and tunnel_id in the body Update PATCH .../teamnet/routes/network/{ip_network_encoded} PATCH .../teamnet/routes/{route_id} Delete DELETE .../teamnet/routes/network/{ip_network_encoded} DELETE .../teamnet/routes/{route_id} Action required Capture each route's route_id by calling List tunnel routes , or read it from the response the first time you create a route with the replacement endpoint. Update any scripts, backend services, or CI/CD pipelines that call the CIDR-encoded endpoints directly. If you manage routes with the cloudflared tunnel route ip add