SecuritySettings

Source: src/Cloudflare/AI/SecuritySettings.ts

AI Security for Apps (Firewall for AI) settings on a Cloudflare zone (/zones/{zone_id}/ai-security/settings).

The settings object is a zone singleton — it always exists and is never created or deleted, only toggled. Reconcile PUTs the desired enabled value when the observed value differs; destroy restores the value the zone had before Alchemy first managed it.

Declare at most one SecuritySettings per zone — two instances managing the same zone would fight over the single underlying setting.

AI Security for Apps is entitlement-gated: on accounts without the feature every call fails with the typed AiSecurityNotEntitled error (Cloudflare error code 13101).

Enabling AI Security

Enable AI Security for Apps on a zone

const securitySettings = yield* Cloudflare.AI.SecuritySettings("AiSecurity", {
  zoneId: zone.zoneId,
  enabled: true,
});

Pin AI Security off

yield* Cloudflare.AI.SecuritySettings("AiSecurity", {
  zoneId: zone.zoneId,
  enabled: false,
});