Update bot protection
const url = 'https://qinto-api.blotout.io/teams/7b8d1a52-6c1e-4b6f-9a30-2f8a54d1c3e9/domains/3f2a9c81-5d47-4e0b-8c66-91b2a7f04d15/bot-protection';const options = { method: 'PATCH', headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'}, body: '{"minBotScore":30,"countries":{"mode":"block","list":["CN","RU"]},"blockVerifiedBots":false}'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request PATCH \ --url https://qinto-api.blotout.io/teams/7b8d1a52-6c1e-4b6f-9a30-2f8a54d1c3e9/domains/3f2a9c81-5d47-4e0b-8c66-91b2a7f04d15/bot-protection \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "minBotScore": 30, "countries": { "mode": "block", "list": [ "CN", "RU" ] }, "blockVerifiedBots": false }'Changes any of the site’s minimum bot score, country allow/block rule and verified-bot blocking in one call, which the site applies with a single redeploy. Send countries: null to clear country filtering.
How it works
Settings left out keep their value, and a value the site already has changes nothing. When blockVerifiedBots is false, verified bots skip the minimum bot score, but country rules still apply. deployed is false until the site serves every stored setting: deploy a site that has never deployed; a deployed one retries on its own.
Required permissions
domain:writeon all domains, or on the addressed domain when its id is in the route
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Unique id (UUID) of the team that owns the addressed resources, as shown in the team settings on the Blotout platform.
Example
7b8d1a52-6c1e-4b6f-9a30-2f8a54d1c3e9Unique id (UUID) of the team that owns the addressed resources, as shown in the team settings on the Blotout platform.
Unique id (UUID) of the site, as returned by the create and list operations.
Example
3f2a9c81-5d47-4e0b-8c66-91b2a7f04d15Unique id (UUID) of the site, as returned by the create and list operations.
Request Bodyrequired
Section titled “Request Bodyrequired”The bot protection settings to change.
Any of minBotScore, countries and blockVerifiedBots. Settings left out keep their current value.
object
Replacement minimum Cloudflare bot score, from 1 through 99.
Example
30Replacement country allow/block rule, or null to clear country filtering.
object
allow admits only the listed countries; block admits every country except those listed.
Example
blockISO 3166-1 alpha-2 country codes, plus EU for the Union as a whole. At least one.
Example
[ "CN", "RU"]Example
{ "mode": "block", "list": [ "CN", "RU" ]}true blocks verified bots; false lets them skip the minimum bot score.
Example
falseResponses
Section titled “Responses”The settings now stored, and whether the site already serves them.
object
The minimum bot score now stored for the site.
The country rule now stored for the site, or null when country filtering is off.
object
allow admits only the listed countries; block admits every country except those listed.
ISO 3166-1 alpha-2 country codes, plus EU for the Union as a whole.
Whether the site now blocks verified bots.
Whether the site already serves every setting stored for it. False on a site that has never deployed — call deploy — and false while a change has not reached the site yet, which retries on its own.
Example
{ "minBotScore": 30, "countries": null, "blockVerifiedBots": true, "deployed": true}invalid_params — A path parameter failed validation (for example a malformed UUID); details pinpoints the offending parameter. invalid_body — The JSON body is unparseable or failed schema validation; details pinpoints the offending fields when the body could be parsed. invalid_bot_protection — The bot score or country rule was rejected. message states which.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Human-readable reason for this specific failure, intended for display — do not parse it programmatically.
Field-level validation errors: a tree keyed by input property, each node carrying an errors array of human-readable messages. Render it to help the caller correct the request.
object
Example
{ "error": "invalid_params", "message": "The Cloudflare API token is invalid or expired.", "details": { "errors": [], "properties": { "teamId": { "errors": [ "Invalid UUID" ] } } }}unauthenticated — The Authorization: Bearer token is missing, malformed, or no longer valid. Generate a team API token or obtain a new OAuth access token.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "unauthenticated"}forbidden — The bearer credential lacks the required permission or belongs to another team, or its user lacks the organization role a developer operation needs. Update its policies, use a credential bound to the addressed team, or ask an organization owner for the role; message states the reason when one is known.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Human-readable reason for this specific failure, intended for display — do not parse it programmatically.
Example
{ "error": "forbidden", "message": "The Cloudflare API token is invalid or expired."}not_found — The addressed resource does not exist within this team; check the id and retry.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "not_found"}internal — Unexpected server error. Nothing is guaranteed to have been persisted; idempotent operations are safe to retry.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "internal"}