---
title: Origin TLS Compliance Modes
---

[Skip to content](#%5Ftop) 

[API Reference](https://developers.cloudflare.com/api)

Copy Markdown

Open in **Claude**

Open in **ChatGPT**

Open in **Cursor**

---

**Copy Markdown**

**View as Markdown**

# Origin TLS Compliance Modes

##### [Get Origin TLS Compliance Modes setting](https://developers.cloudflare.com/api/resources/origin%5Ftls%5Fcompliance%5Fmodes/methods/get)

GET/zones/{zone\_id}/settings/origin\_tls\_compliance\_modes

##### [Replace Origin TLS Compliance Modes setting](https://developers.cloudflare.com/api/resources/origin%5Ftls%5Fcompliance%5Fmodes/methods/update)

PUT/zones/{zone\_id}/settings/origin\_tls\_compliance\_modes

##### [Change Origin TLS Compliance Modes setting](https://developers.cloudflare.com/api/resources/origin%5Ftls%5Fcompliance%5Fmodes/methods/edit)

PATCH/zones/{zone\_id}/settings/origin\_tls\_compliance\_modes

##### [Delete Origin TLS Compliance Modes setting](https://developers.cloudflare.com/api/resources/origin%5Ftls%5Fcompliance%5Fmodes/methods/delete)

DELETE/zones/{zone\_id}/settings/origin\_tls\_compliance\_modes

##### ModelsExpand Collapse 

OriginTLSComplianceModeGetResponse object { id, editable, value, modified\_on } 

id: "origin\_tls\_compliance\_modes"

The identifier of the caching setting.

editable: boolean

Whether the setting is editable.

value: array of string

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh` (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified\_on: optional string

Last time this setting was modified.

formatdate-time

OriginTLSComplianceModeUpdateResponse object { id, editable, value, modified\_on } 

id: "origin\_tls\_compliance\_modes"

The identifier of the caching setting.

editable: boolean

Whether the setting is editable.

value: array of string

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh` (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified\_on: optional string

Last time this setting was modified.

formatdate-time

OriginTLSComplianceModeEditResponse object { id, editable, value, modified\_on } 

id: "origin\_tls\_compliance\_modes"

The identifier of the caching setting.

editable: boolean

Whether the setting is editable.

value: array of string

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh` (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified\_on: optional string

Last time this setting was modified.

formatdate-time

OriginTLSComplianceModeDeleteResponse object { id, editable, modified\_on } 

id: "origin\_tls\_compliance\_modes"

The identifier of the caching setting.

editable: boolean

Whether the setting is editable.

modified\_on: optional string

Last time this setting was modified.

formatdate-time