You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/changelog/resource-tagging/2026-01-28-resource-tagging-private-beta.mdx
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,10 +1,10 @@
1
1
---
2
-
title: Resource Tagging enters private beta
3
-
description: Enterprise customers can now attach key-value metadata to Cloudflare resources via API.
2
+
title: Resource Tagging enters public beta
3
+
description: Cloudflare customers can now attach key-value metadata to resources via API.
4
4
date: 2026-01-28
5
5
---
6
6
7
-
Resource Tagging is now available in private beta for Enterprise customers. The feature enables attaching custom key-value metadata to Cloudflare resources for organization, access control, and billing attribution.
7
+
Resource Tagging is now available in public beta. The feature enables attaching custom key-value metadata to Cloudflare resources for organization, access control, and billing attribution.
Copy file name to clipboardExpand all lines: src/content/changelog/resource-tagging/2026-03-25-expanded-roles-and-aot-updates.mdx
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,8 +14,8 @@ Tag management is no longer limited to Super Administrators. The following roles
14
14
15
15
### AOT provisioning change
16
16
17
-
Account Owned Tokens for tagging are now **created on behalf of customers** by the GRM team. Customers can view their tokens but cannot modify them directly. This simplifies onboarding and ensures tokens have the correct permissions from the start.
17
+
Account Owned Tokens for tagging are now **provisioned on behalf of customers**. Customers can view their tokens but cannot modify them directly. This simplifies onboarding and ensures tokens have the correct permissions from the start.
18
18
19
19
### Dashboard UI in development
20
20
21
-
The Stratus-based Dashboard UI for resource tagging is in active development. A staging preview is available behind the `resource-tagging-ui-experiments` gate. The Dashboard experience will complement (not replace) the existing API.
21
+
The Dashboard UI for resource tagging is in active development. The Dashboard experience will complement (not replace) the existing API.
Copy file name to clipboardExpand all lines: src/content/docs/resource-tagging/get-started.mdx
+12-33Lines changed: 12 additions & 33 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,37 +3,20 @@ title: Get started
3
3
pcx_content_type: get-started
4
4
sidebar:
5
5
order: 2
6
-
description: Enable Resource Tagging for a customer account and make your first API calls.
6
+
description: Set up authentication for Resource Tagging and make your first API calls.
7
7
---
8
8
9
-
This guide walks you through enabling tagging for an Enterprise account and verifying it works.
9
+
This guide walks you through verifying that tagging works on your account and making your first API calls.
10
10
11
11
## Prerequisites
12
12
13
-
Before enabling Resource Tagging, ensure the account meets these requirements:
14
-
15
-
-**Enterprise plan** -- Resource Tagging is only available to Enterprise customers.
16
13
-**Super Admin access** -- At least one user with the Super Administrator, Workers Admin, or Tag Admin role. These roles can create, update, and delete tags.
17
-
-**API familiarity** -- The feature is API-only during the private beta. Customers must be comfortable making authenticated HTTP requests.
18
-
19
-
## 1. Request enablement
20
-
21
-
Contact PM Wesley Evans to request tagging enablement for a customer account:
22
-
23
-
-**G-Chat**: Join the "Tags for Cloudflare" space for real-time support
24
-
-**Email**: wesley.evans@cloudflare.com
14
+
-**API familiarity** -- The feature is API-only during the beta. You should be comfortable making authenticated HTTP requests.
15
+
-**API token** -- An API token with the required [permissions](/resource-tagging/reference/api/#required-permissions). [Account Owned Tokens (AOTs)](/fundamentals/api/get-started/account-owned-tokens/) are recommended for automation.
25
16
26
-
Provide the following:
17
+
## 1. Verify tagging is enabled
27
18
28
-
-**Account ID** -- The customer's Cloudflare account ID, found in the Dashboard URL or via `GET /accounts`.
29
-
-**Use case** -- A brief description of how the customer plans to use tagging (1-2 sentences).
30
-
-**Products to be tagged** -- Which resource types the customer plans to tag initially (for example, `workers_script`, `zone`, `custom_hostnames`).
31
-
32
-
Wesley will enable the feature via [gates.cloudflare.com](https://gates.cloudflare.com). Typical turnaround is 1-2 business days.
33
-
34
-
## 2. Verify tagging is enabled
35
-
36
-
After receiving enablement confirmation, test the API:
19
+
Test the API to confirm tagging is active on your account:
37
20
38
21
```bash
39
22
curl -X GET "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/tags/keys" \
@@ -45,17 +28,13 @@ curl -X GET "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/tags/keys
45
28
46
29
| Response | Meaning | Action |
47
30
| --- | --- | --- |
48
-
|**200 OK** with `{"success": true, "result": [...]}`| Tagging is enabled. An empty array is normal if no tags exist yet. | Proceed with onboarding. |
49
-
|**403** mentioning "permission" or "role" | The caller lacks required permissions. This is not a gating issue. | Verify the caller has Super Adminrole or the token has `#com.cloudflare.api.account.tag.list` scope. |
50
-
|**403** mentioning "feature" or "gate" | Tagging is not enabled for this account. |Confirm the Account ID matches what was provided to Wesley. Contact the Tags for Cloudflare G-Chat space. |
31
+
|**200 OK** with `{"success": true, "result": [...]}`| Tagging is enabled. An empty array is normal if no tags exist yet. | Proceed to the next step. |
32
+
|**403** mentioning "permission" or "role" | The caller lacks required permissions. | Verify the caller has a Super Admin, Workers Admin, or Tag Admin role, or that the token has `#com.cloudflare.api.account.tag.list` scope. |
33
+
|**403** mentioning "feature" or "gate" | Tagging is not enabled for this account. | Contact [Cloudflare support](/support/contacting-cloudflare-support/) for assistance. |
51
34
|**401 Unauthorized**| Authentication failed. | Verify the token is valid, not expired, and formatted correctly in the `Authorization: Bearer` header. |
52
-
| Any other response | Unexpected error. | Capture the full response body and escalate to the Tags for Cloudflare G-Chat space with the Account ID, request details, and timestamp. |
53
-
54
-
:::note
55
-
Gate changes typically propagate within seconds, but may take up to 15 minutes in rare cases. If you receive a gating error immediately after enablement, wait briefly and retry.
56
-
:::
35
+
| Any other response | Unexpected error. | Capture the full response body and contact [Cloudflare support](/support/contacting-cloudflare-support/) with the Account ID, request details, and timestamp. |
57
36
58
-
## 3. Create your first tags
37
+
## 2. Create your first tags
59
38
60
39
Set tags on a resource using `PUT`:
61
40
@@ -81,7 +60,7 @@ curl -X GET "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/tags?reso
81
60
-H "Content-Type: application/json"
82
61
```
83
62
84
-
## 4. List tagged resources
63
+
## 3. List tagged resources
85
64
86
65
Query all tagged resources in the account, optionally filtering by tag:
Copy file name to clipboardExpand all lines: src/content/docs/resource-tagging/index.mdx
+5-13Lines changed: 5 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,22 +16,14 @@ Attach custom key-value metadata to Cloudflare resources for organization, acces
16
16
17
17
</Description>
18
18
19
-
<Plantype="enterprise" />
19
+
<Plantype="all" />
20
20
21
21
Resource Tagging lets you attach key-value pairs to Cloudflare resources like Workers scripts, zones, custom hostnames, and Access application policies. Tags are stored separately from the resources themselves, enabling cross-resource queries and policy enforcement without modifying underlying resource configurations.
22
22
23
-
:::note[Private beta]
24
-
Resource Tagging is currently in private beta and available exclusively to Enterprise customers. The API is stable, but behavior may change as we iterate based on feedback.
23
+
:::note[Public beta]
24
+
Resource Tagging is in public beta. The API is stable, but behavior may change as we iterate based on feedback.
25
25
:::
26
26
27
-
## Key use cases
28
-
29
-
-**Resource grouping** -- Track and manage resources across teams, products, or projects. Tag all resources belonging to a team or product line for bulk operations and inventory management.
30
-
-**Access control** -- Implement fine-grained permission policies based on tags. Restrict user access to resources tagged with specific values like `environment=production` or `team=platform-engineering`.
31
-
-**Billing attribution** -- Allocate costs by business context. Tag resources with cost centers, departments, or projects for chargeback reports.
32
-
-**Environment management** -- Distinguish production from non-production resources. Apply tags like `environment=staging` to enforce different policies or deployment workflows.
33
-
-**Ownership tracking** -- Identify resource owners and responsible teams for incident response and maintenance scheduling.
34
-
35
27
## How it works
36
28
37
29
Tags are simple key-value string pairs stored as a JSON object:
-**API-only** -- There is no Dashboard UI during the private beta. A Dashboard experience is in active development.
45
+
-**API-only** -- There is no Dashboard UI during the beta. A Dashboard experience is in active development.
54
46
-**PUT replaces all tags** -- There is no PATCH endpoint. The `PUT` operation replaces all tags on a resource. Use the [GET, merge, PUT workflow](/resource-tagging/how-to/manage-tags/#add-a-single-tag) to modify individual tags.
55
47
-**DELETE removes all tags** -- There is no way to delete a single tag. Use `PUT` with the remaining tags instead.
56
48
-**500 on untagged resources** -- Querying tags for a resource that has never been tagged returns a `500` error instead of `404`. This is a known beta limitation.
57
49
58
50
## Get started
59
51
60
-
Follow the [Get started guide](/resource-tagging/get-started/) to enable tagging for a customer account and make your first API calls.
52
+
Follow the [Get started guide](/resource-tagging/get-started/) to set up authentication and make your first API calls.
0 commit comments