API
Cloudflare
Two related Cloudflare Zero Trust / Tunnel API changes reach end-of-life on 5 October 2026: the CIDR-encoded route endpoints (/accounts/{account_id}/teamnet/routes/network/{ip_network_encoded}) are removed in favor of the route_id-based /teamnet/routes endpoints, and the connections array is removed from cfd_tunnel and warp_connector list/get responses
departs 5 Oct 2026
Quick answers
- Is it true that Cloudflare deprecates CIDR-encoded Zero Trust route endpoints and the Tunnel connections field — end-of-life 5 October 2026?
- Yes. Cloudflare has officially announced it, effective 5 Oct 2026. This affects code that manages Cloudflare Zero Trust private network routes or reads Cloudflare Tunnel / Cloudflare Mesh connection state through the API.
- When does it take effect?
- 5 Oct 2026. Verified against the vendor's own announcement.
- What should I use instead?
- Move any route management that targets /accounts/{account_id}/teamnet/routes/network/{ip_network_encoded} (POST, PATCH, or DELETE) to the route_id-based endpoints: POST /accounts/{account_id}/teamnet/routes to create, and PATCH or DELETE /accounts/{account_id}/teamnet/routes/{route_id} to update or remove.
What this means for you
This affects code that manages Cloudflare Zero Trust private network routes or reads Cloudflare Tunnel / Cloudflare Mesh connection state through the API. Cloudflare's deprecations page lists both changes as deprecated on 9 July 2026 with an end-of-life date of 5 October 2026. First, the CIDR-encoded route endpoints — POST/PATCH/DELETE on /accounts/{account_id}/teamnet/routes/network/{ip_network_encoded} — are deprecated in favor of the standard route_id-based endpoints that already exist today (POST /accounts/{account_id}/teamnet/routes, and PATCH/DELETE /accounts/{account_id}/teamnet/routes/{route_id}). Second, the connections array is removed from the list and get responses for Cloudflare Tunnel and Cloudflare Mesh nodes (the cfd_tunnel and warp_connector resources); code must query the dedicated connections endpoint instead of reading the field off the tunnel or node object. The practical risk is unattended automation: Terraform providers, provisioning scripts, and monitoring that address routes by CIDR or parse connections off the tunnel object will start failing after 5 October 2026.
Where to go
Move any route management that targets /accounts/{account_id}/teamnet/routes/network/{ip_network_encoded} (POST, PATCH, or DELETE) to the route_id-based endpoints: POST /accounts/{account_id}/teamnet/routes to create, and PATCH or DELETE /accounts/{account_id}/teamnet/routes/{route_id} to update or remove. Where code currently keys routes by their CIDR block, capture and store the route_id returned on creation and use it thereafter. Separately, stop reading the connections array off cfd_tunnel or warp_connector list/get responses; call the dedicated connections endpoint to enumerate a tunnel's or node's active connections. Update generated clients, vendored wrappers, Terraform, and any CI or monitoring that touches these paths, and re-test before 5 October 2026.
- The route_id-based endpoints POST /accounts/{account_id}/teamnet/routes and PATCH/DELETE /accounts/{account_id}/teamnet/routes/{route_id} — Cloudflare's named replacement for the CIDR-encoded route endpoints
- The dedicated Cloudflare Tunnel connections endpoint, in place of reading the connections array off the tunnel or node object
Cloudflare has scheduled two related Zero Trust / Tunnel API changes to take effect on the same day. On the API deprecations page, both are listed as deprecated on 9 July 2026 with an end-of-life date of 5 October 2026.
Route endpoints. The CIDR-encoded route endpoints are being removed in favor of the standard, route_id-based endpoints that already exist today. The deprecated calls are POST, PATCH, and DELETE on /accounts/{account_id}/teamnet/routes/network/{ip_network_encoded}. Their replacements are POST /accounts/{account_id}/teamnet/routes to create a route, and PATCH/DELETE /accounts/{account_id}/teamnet/routes/{route_id} to update or remove one. The catch for automation: where code currently addresses a route by its CIDR block, it must switch to storing and using the route_id returned when the route is created.
Tunnel and Mesh connections. Separately, the connections array is removed from the list and get responses for Cloudflare Tunnel and Cloudflare Mesh nodes — the cfd_tunnel and warp_connector API resources. Instead of reading that field off the tunnel or node object, code must query Cloudflare’s dedicated connections endpoint to enumerate active connections.
Neither change touches the Cloudflare dashboard; both bite in unattended code. Terraform providers, provisioning scripts, and monitoring that manage private-network routes by CIDR or parse connections off the tunnel object will start failing after 5 October 2026. Move route management to the route_id-based endpoints and switch connection lookups to the dedicated endpoint, then update generated clients, vendored wrappers, and CI before the deadline.
This is one of several DNS- and Zero-Trust-related API changes Cloudflare lists on the same deprecations page, alongside the foundation_dns boolean end-of-life on 23 November 2026 and the REST DNS Analytics API retirement on 1 December 2026. If you provision Cloudflare through the API, it is worth reading the page in full.
Entry changelog
- — last reviewed.
- — Entry created from Cloudflare's official API deprecations page (developers.cloudflare.com/fundamentals/api/reference/deprecations). The 9 July 2026 deprecation date, the 5 October 2026 end-of-life date, the deprecated CIDR-encoded route endpoints and their route_id-based replacements, and the removal of the connections array from cfd_tunnel and warp_connector responses are all quoted from that page. Added a detect: fingerprint (text:teamnet/routes/network) so the lastcall CLI flags code still calling the deprecated CIDR-encoded route path. Closes the last untracked dated Cloudflare deprecation row (B-077).
Put this countdown in your README
Building on Cloudflare? Drop this badge into a project’s README or docs — it shows the days left and
refreshes on its own every night from this page. 
[](https://lastcall.dev/entries/cloudflare-zero-trust-route-endpoints-eol)Spot an error or a changed date? Tell us and it’s corrected the same night.