Cloudflare Tunnel, Cloudflare Tunnel for SASE - Cloudflare Tunnel and Networks API will no longer return deleted resources by default starting December 1, 2025

Starting December 1, 2025 , list endpoints for the Cloudflare Tunnel API and Zero Trust Networks API will no longer return deleted tunnels, routes, subnets and virtual networks by default. This change makes the API behavior more intuitive by only returning active resources unless otherwise specified. No action is required if you already explicitly set is_deleted=false or if you only need to list active resources. This change affects the following API endpoints: List all tunnels: GET /accounts/{account_id}/tunnels List Cloudflare Tunnels : GET /accounts/{account_id}/cfd_tunnel List WARP Connector tunnels: GET /accounts/{account_id}/warp_connector List tunnel routes: GET /accounts/{account_id}/teamnet/routes List subnets: GET /accounts/{account_id}/zerotrust/subnets List virtual networks: GET /accounts/{account_id}/teamnet/virtual_networks What is changing? The default behavior of the is_deleted query parameter will be updated. Scenario Previous behavior (before December 1, 2025) New behavior (from December 1, 2025) is_deleted parameter is omitted Returns active & deleted tunnels, routes, subnets and virtual networks Returns only active tunnels, routes, subnets and virtual networks Action required If you need to retrieve deleted (or all) resources, please update your API calls to explicitly include the is_deleted parameter before December 1, 2025 . To get a list of only deleted resources, you must now explicitly add the is_deleted=true query parameter to your request: # Example: Get ONLY deleted Tunnels curl " $ACCOUNT_ID /tunnels?is_deleted=true" \ -H "Authorization: Bearer $API_TOKEN " # Example: Get ONLY deleted Virtual Networks curl " $ACCOUNT_ID /teamnet/virtual_networks?is_deleted=true" \ -H "Authorization: Bearer $API_TOKEN " Following this change, retrieving a complete list of both active and deleted resources will require two separate API calls: one to get active items (by omitting the parameter or using is_deleted=false ) and one to get deleted items ( is_deleted=true ). Why we’re making this change This update is based on user feedback and aims to: Create a more intuitive default: Aligning with common API design principles where list operations return only active resources by default. Reduce unexpected results: Prevents users from accidentally operating on deleted resources that were returned unexpectedly. Improve performance: For most users, the default query result will now be smaller and more relevant. To learn more, please visit the Cloudflare Tunnel API and Zero Trust Networks API documentation.