---
title: Configuration
---

[Skip to content](#%5Ftop) 

[API Reference](https://developers.cloudflare.com/api/typescript)

[Token Validation](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation)

Copy Markdown

Open in **Claude**

Open in **ChatGPT**

Open in **Cursor**

---

**Copy Markdown**

**View as Markdown**

# Configuration

##### [List token validation configurations](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation/subresources/configuration/methods/list)

client.tokenValidation.configuration.list(ConfigurationListParams { zone\_id, page, per\_page } params, RequestOptionsoptions?): V4PagePaginationArray<[TokenConfig](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation#%28resource%29%20token%5Fvalidation.configuration%20%3E%20%28model%29%20token%5Fconfig%20%3E%20%28schema%29) { id, created\_at, credentials, 5 more } \>

GET/zones/{zone\_id}/token\_validation/config

##### [Get a token validation configuration](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation/subresources/configuration/methods/get)

client.tokenValidation.configuration.get(stringconfigID, ConfigurationGetParams { zone\_id } params, RequestOptionsoptions?): [TokenConfig](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation#%28resource%29%20token%5Fvalidation.configuration%20%3E%20%28model%29%20token%5Fconfig%20%3E%20%28schema%29) { id, created\_at, credentials, 5 more } 

GET/zones/{zone\_id}/token\_validation/config/{config\_id}

##### [Create a token validation configuration](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation/subresources/configuration/methods/create)

client.tokenValidation.configuration.create(ConfigurationCreateParams { zone\_id, credentials, description, 3 more } params, RequestOptionsoptions?): [TokenConfig](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation#%28resource%29%20token%5Fvalidation.configuration%20%3E%20%28model%29%20token%5Fconfig%20%3E%20%28schema%29) { id, created\_at, credentials, 5 more } 

POST/zones/{zone\_id}/token\_validation/config

##### [Edit a token validation configuration](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation/subresources/configuration/methods/edit)

client.tokenValidation.configuration.edit(stringconfigID, ConfigurationEditParams { zone\_id, description, title, token\_sources } params, RequestOptionsoptions?): [ConfigurationEditResponse](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation#%28resource%29%20token%5Fvalidation.configuration%20%3E%20%28model%29%20configuration%5Fedit%5Fresponse%20%3E%20%28schema%29) { id, description, title, token\_sources } 

PATCH/zones/{zone\_id}/token\_validation/config/{config\_id}

##### [Delete a token validation configuration](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation/subresources/configuration/methods/delete)

client.tokenValidation.configuration.delete(stringconfigID, ConfigurationDeleteParams { zone\_id } params, RequestOptionsoptions?): [ConfigurationDeleteResponse](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation#%28resource%29%20token%5Fvalidation.configuration%20%3E%20%28model%29%20configuration%5Fdelete%5Fresponse%20%3E%20%28schema%29) { id } 

DELETE/zones/{zone\_id}/token\_validation/config/{config\_id}

##### ModelsExpand Collapse 

TokenConfig { id, created\_at, credentials, 5 more } 

id: string

UUID.

maxLength36

minLength36

created\_at: string

formatdate-time

credentials: Credentials { keys } 

keys: Array<APIShieldCredentialsJWTKeyRSA { alg, e, kid, 2 more } | APIShieldCredentialsJWTKeyEcEs256 { alg, crv, kid, 3 more } | APIShieldCredentialsJWTKeyEcEs384 { alg, crv, kid, 3 more } | APIShieldCredentialsJWTKeyOctResponse { alg, kid, kty } \>

One of the following:

APIShieldCredentialsJWTKeyRSA { alg, e, kid, 2 more } 

JSON representation of an RSA key.

alg: "RS256" | "RS384" | "RS512" | 3 more

Algorithm

One of the following:

"RS256"

"RS384"

"RS512"

"PS256"

"PS384"

"PS512"

e: string

RSA exponent

kid: string

Key ID

kty: "RSA"

Key Type

n: string

RSA modulus

APIShieldCredentialsJWTKeyEcEs256 { alg, crv, kid, 3 more } 

JSON representation of an ES256 key

alg: "ES256"

Algorithm

crv: "P-256"

Curve

kid: string

Key ID

kty: "EC"

Key Type

x: string

X EC coordinate

y: string

Y EC coordinate

APIShieldCredentialsJWTKeyEcEs384 { alg, crv, kid, 3 more } 

JSON representation of an ES384 key

alg: "ES384"

Algorithm

crv: "P-384"

Curve

kid: string

Key ID

kty: "EC"

Key Type

x: string

X EC coordinate

y: string

Y EC coordinate

APIShieldCredentialsJWTKeyOctResponse { alg, kid, kty } 

JSON representation of a symmetric verification key in API responses (secret material is redacted).

alg: "HS256" | "HS384" | "HS512"

Algorithm

One of the following:

"HS256"

"HS384"

"HS512"

kid: string

Key ID

kty: "oct"

Key Type

description: string

maxLength500

last\_updated: string

formatdate-time

title: string

maxLength50

token\_sources: Array<string\>

token\_type: "JWT"

ConfigurationEditResponse { id, description, title, token\_sources } 

id?: string

UUID.

maxLength36

minLength36

description?: string

maxLength500

title?: string

maxLength50

token\_sources?: Array<string\>

ConfigurationDeleteResponse { id } 

id?: string

UUID.

maxLength36

minLength36

#### ConfigurationCredentials

##### [Replace token validation credentials](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation/subresources/configuration/subresources/credentials/methods/update)

client.tokenValidation.configuration.credentials.update(stringconfigID, CredentialUpdateParams { zone\_id, keys } params, RequestOptionsoptions?): [CredentialUpdateResponse](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation#%28resource%29%20token%5Fvalidation.configuration.credentials%20%3E%20%28model%29%20credential%5Fupdate%5Fresponse%20%3E%20%28schema%29) { keys } 

PUT/zones/{zone\_id}/token\_validation/config/{config\_id}/credentials

##### [Edit token validation credentials](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation/subresources/configuration/subresources/credentials/methods/edit)

client.tokenValidation.configuration.credentials.edit(stringconfigID, CredentialEditParams { zone\_id, keys } params, RequestOptionsoptions?): [CredentialEditResponse](https://developers.cloudflare.com/api/typescript/resources/token%5Fvalidation#%28resource%29%20token%5Fvalidation.configuration.credentials%20%3E%20%28model%29%20credential%5Fedit%5Fresponse%20%3E%20%28schema%29) { keys } 

PATCH/zones/{zone\_id}/token\_validation/config/{config\_id}/credentials

##### ModelsExpand Collapse 

CredentialUpdateResponse { keys } 

keys: Array<APIShieldCredentialsJWTKeyRSA { alg, e, kid, 2 more } | APIShieldCredentialsJWTKeyEcEs256 { alg, crv, kid, 3 more } | APIShieldCredentialsJWTKeyEcEs384 { alg, crv, kid, 3 more } | APIShieldCredentialsJWTKeyOctResponse { alg, kid, kty } \>

One of the following:

APIShieldCredentialsJWTKeyRSA { alg, e, kid, 2 more } 

JSON representation of an RSA key.

alg: "RS256" | "RS384" | "RS512" | 3 more

Algorithm

One of the following:

"RS256"

"RS384"

"RS512"

"PS256"

"PS384"

"PS512"

e: string

RSA exponent

kid: string

Key ID

kty: "RSA"

Key Type

n: string

RSA modulus

APIShieldCredentialsJWTKeyEcEs256 { alg, crv, kid, 3 more } 

JSON representation of an ES256 key

alg: "ES256"

Algorithm

crv: "P-256"

Curve

kid: string

Key ID

kty: "EC"

Key Type

x: string

X EC coordinate

y: string

Y EC coordinate

APIShieldCredentialsJWTKeyEcEs384 { alg, crv, kid, 3 more } 

JSON representation of an ES384 key

alg: "ES384"

Algorithm

crv: "P-384"

Curve

kid: string

Key ID

kty: "EC"

Key Type

x: string

X EC coordinate

y: string

Y EC coordinate

APIShieldCredentialsJWTKeyOctResponse { alg, kid, kty } 

JSON representation of a symmetric verification key in API responses (secret material is redacted).

alg: "HS256" | "HS384" | "HS512"

Algorithm

One of the following:

"HS256"

"HS384"

"HS512"

kid: string

Key ID

kty: "oct"

Key Type

CredentialEditResponse { keys } 

keys: Array<APIShieldCredentialsJWTKeyRSA { alg, e, kid, 2 more } | APIShieldCredentialsJWTKeyEcEs256 { alg, crv, kid, 3 more } | APIShieldCredentialsJWTKeyEcEs384 { alg, crv, kid, 3 more } | APIShieldCredentialsJWTKeyOctResponse { alg, kid, kty } \>

One of the following:

APIShieldCredentialsJWTKeyRSA { alg, e, kid, 2 more } 

JSON representation of an RSA key.

alg: "RS256" | "RS384" | "RS512" | 3 more

Algorithm

One of the following:

"RS256"

"RS384"

"RS512"

"PS256"

"PS384"

"PS512"

e: string

RSA exponent

kid: string

Key ID

kty: "RSA"

Key Type

n: string

RSA modulus

APIShieldCredentialsJWTKeyEcEs256 { alg, crv, kid, 3 more } 

JSON representation of an ES256 key

alg: "ES256"

Algorithm

crv: "P-256"

Curve

kid: string

Key ID

kty: "EC"

Key Type

x: string

X EC coordinate

y: string

Y EC coordinate

APIShieldCredentialsJWTKeyEcEs384 { alg, crv, kid, 3 more } 

JSON representation of an ES384 key

alg: "ES384"

Algorithm

crv: "P-384"

Curve

kid: string

Key ID

kty: "EC"

Key Type

x: string

X EC coordinate

y: string

Y EC coordinate

APIShieldCredentialsJWTKeyOctResponse { alg, kid, kty } 

JSON representation of a symmetric verification key in API responses (secret material is redacted).

alg: "HS256" | "HS384" | "HS512"

Algorithm

One of the following:

"HS256"

"HS384"

"HS512"

kid: string

Key ID

kty: "oct"

Key Type