Replace Cloudflare zone security
GET: the zone's security defaults, read live from Cloudflare and graded by the shared Cloudflare Checkup checks, falling back per setting to the latest checkup. The eight pre-2026-10 top-level fields (ssl, waf, ...) stay, with the same values as settings. PUT answers with the same view, read again after the write.
One accepts this request only with a recent sign-in; renewing a token doesn't count, and MCP sessions and API keys are always refused. See changes that need a recent sign-in.
Authorizations
Bearer access token from Vigilbase Identity (auth.vigilbase.com), sent as Authorization: Bearer <token>. The CLI gets one with vigilbase login. Organisation API keys can't call this endpoint: it needs a recent sign-in by a person.
Path Parameters
Body
application/jsonThe catalog doesn't describe this body's fields.
Response
Success