---
title: Origin TLS Compliance Modes
---

[Skip to content](#%5Ftop) 

[API Reference](https://developers.cloudflare.com/api/python)

Copy Markdown

Open in **Claude**

Open in **ChatGPT**

Open in **Cursor**

---

**Copy Markdown**

**View as Markdown**

# Origin TLS Compliance Modes

##### [Get Origin TLS Compliance Modes setting](https://developers.cloudflare.com/api/python/resources/origin%5Ftls%5Fcompliance%5Fmodes/methods/get)

origin\_tls\_compliance\_modes.get(OriginTLSComplianceModeGetParams\*\*kwargs)  \-> [OriginTLSComplianceModeGetResponse](https://developers.cloudflare.com/api/python/resources/origin%5Ftls%5Fcompliance%5Fmodes#%28resource%29%20origin%5Ftls%5Fcompliance%5Fmodes%20%3E%20%28model%29%20origin%5Ftls%5Fcompliance%5Fmode%5Fget%5Fresponse%20%3E%20%28schema%29)

GET/zones/{zone\_id}/settings/origin\_tls\_compliance\_modes

##### [Replace Origin TLS Compliance Modes setting](https://developers.cloudflare.com/api/python/resources/origin%5Ftls%5Fcompliance%5Fmodes/methods/update)

origin\_tls\_compliance\_modes.update(OriginTLSComplianceModeUpdateParams\*\*kwargs)  \-> [OriginTLSComplianceModeUpdateResponse](https://developers.cloudflare.com/api/python/resources/origin%5Ftls%5Fcompliance%5Fmodes#%28resource%29%20origin%5Ftls%5Fcompliance%5Fmodes%20%3E%20%28model%29%20origin%5Ftls%5Fcompliance%5Fmode%5Fupdate%5Fresponse%20%3E%20%28schema%29)

PUT/zones/{zone\_id}/settings/origin\_tls\_compliance\_modes

##### [Change Origin TLS Compliance Modes setting](https://developers.cloudflare.com/api/python/resources/origin%5Ftls%5Fcompliance%5Fmodes/methods/edit)

origin\_tls\_compliance\_modes.edit(OriginTLSComplianceModeEditParams\*\*kwargs)  \-> [OriginTLSComplianceModeEditResponse](https://developers.cloudflare.com/api/python/resources/origin%5Ftls%5Fcompliance%5Fmodes#%28resource%29%20origin%5Ftls%5Fcompliance%5Fmodes%20%3E%20%28model%29%20origin%5Ftls%5Fcompliance%5Fmode%5Fedit%5Fresponse%20%3E%20%28schema%29)

PATCH/zones/{zone\_id}/settings/origin\_tls\_compliance\_modes

##### [Delete Origin TLS Compliance Modes setting](https://developers.cloudflare.com/api/python/resources/origin%5Ftls%5Fcompliance%5Fmodes/methods/delete)

origin\_tls\_compliance\_modes.delete(OriginTLSComplianceModeDeleteParams\*\*kwargs)  \-> [OriginTLSComplianceModeDeleteResponse](https://developers.cloudflare.com/api/python/resources/origin%5Ftls%5Fcompliance%5Fmodes#%28resource%29%20origin%5Ftls%5Fcompliance%5Fmodes%20%3E%20%28model%29%20origin%5Ftls%5Fcompliance%5Fmode%5Fdelete%5Fresponse%20%3E%20%28schema%29)

DELETE/zones/{zone\_id}/settings/origin\_tls\_compliance\_modes

##### ModelsExpand Collapse 

class OriginTLSComplianceModeGetResponse: …

id: Literal\["origin\_tls\_compliance\_modes"\]

The identifier of the caching setting.

editable: bool

Whether the setting is editable.

value: List\[str\]

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh` (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified\_on: Optional\[datetime\]

Last time this setting was modified.

formatdate-time

class OriginTLSComplianceModeUpdateResponse: …

id: Literal\["origin\_tls\_compliance\_modes"\]

The identifier of the caching setting.

editable: bool

Whether the setting is editable.

value: List\[str\]

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh` (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified\_on: Optional\[datetime\]

Last time this setting was modified.

formatdate-time

class OriginTLSComplianceModeEditResponse: …

id: Literal\["origin\_tls\_compliance\_modes"\]

The identifier of the caching setting.

editable: bool

Whether the setting is editable.

value: List\[str\]

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh` (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified\_on: Optional\[datetime\]

Last time this setting was modified.

formatdate-time

class OriginTLSComplianceModeDeleteResponse: …

id: Literal\["origin\_tls\_compliance\_modes"\]

The identifier of the caching setting.

editable: bool

Whether the setting is editable.

modified\_on: Optional\[datetime\]

Last time this setting was modified.

formatdate-time