{"uid":"cap_aoiZFmeXQKr7TBWnpC9vT","slug":"cloudflare-zero-trust-access-policy-auditor-c3be6cef","name":"Cloudflare Zero Trust Access Policy Auditor","description":"Analyze Cloudflare Zero Trust Access policy JSON for bypass rules, allow-everyone patterns, and weak identity constraints.","url":"https://x402-hono-api.inraby.workers.dev/api/v1/cloudflare-zero-trust-audit","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"policyText":{"type":"string","description":"Cloudflare Zero Trust Access policy JSON"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_XmPL54ftmN6DtEXEBDtDM","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes Cloudflare Zero Trust Access policy JSON for bypass rules, allow-everyone patterns, and weak identity constraints","exampleAgentPrompt":"Can you audit this Cloudflare Zero Trust Access policy JSON for me and flag any bypass rules, allow-everyone patterns, or weak identity constraints? Here's the policy: {\"policies\": [{\"name\": \"allow-all\", \"decision\": \"allow\", \"include\": [{\"everyone\": {}}]}]}","exampleUseCases":null,"resultDescription":"Returns a structured audit report identifying bypass rules, allow-everyone patterns, weak identity constraints, and other security misconfigurations found in the submitted Cloudflare Zero Trust Access policy JSON, with severity indicators and specific findings per rule.","failureModes":["Invalid or malformed JSON submitted — returns parsing error","Empty policyText field — returns validation error","Policy JSON does not match Cloudflare Zero Trust schema — may return empty findings or schema mismatch error","Payment not included or insufficient — returns 402 Payment Required","Request timeout for very large policy documents"],"whenToPreferThis":"Use this endpoint when you need targeted security analysis specifically for Cloudflare Zero Trust Access policies, particularly to detect bypass rules, allow-everyone configurations, and weak identity constraints. It complements the sibling general IAM/Zero Trust validator by focusing deeper on Cloudflare Access-specific misconfigurations rather than general wildcard or scope risks.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T06:38:27.263Z","isFirstParty":false}