cloudflare · rotem-cloud · Jun 16, 2026 · Jun 17, 2026 · Jun 17, 2026 · Jun 17, 2026
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "5.4.0"
+  ".": "5.5.0"
 }
diff --git a/.stats.yml b/.stats.yml
@@ -1,4 +1 @@
-configured_endpoints: 2404
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare/cloudflare-874436f83bd9c383144c69da47c4b767bb9c6f4f2bb4945af58cf3b6015f0f62.yml
-openapi_spec_hash: beaf9a654991bf65d642e05c03460e4c
-config_hash: 2f529580a17438fc62cd0b47db41b6f1
+configured_endpoints: 2440
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,163 @@
 # Changelog
 
+## 5.5.0 (2026-07-10)
+
+Full Changelog: [v5.4.0...v5.5.0](https://github.com/cloudflare/cloudflare-python/compare/v5.4.0...v5.5.0)
+
+### Breaking Changes
+
+* **ssl:** The `recommendations` sub-resource has been removed. `client.ssl.recommendations.get()` and the `RecommendationGetResponse` type are no longer available.
+* **email_routing:** The `list` method has been removed from `client.email_routing.rules`. Only `create`, `update`, `delete`, and `get` remain. The `RuleListParams` type has been removed.
+* **zero_trust:** The `UserPolicyCheckGeo` type has been removed from `cloudflare.types.zero_trust.access.applications`. The geo information is now inlined as `UserIdentityGeo` within `UserPolicyCheckListResponse`.
+* **zero_trust:** The pagination type for `client.zero_trust.devices.ip_profiles.list()` changed from `SyncSinglePage` to `SyncV4PagePaginationArray`. Code that relied on single-page iteration semantics may need adjustment.
+* **aisearch:** The `SourceParamsWebCrawlerStoreOptions` type and the `store_options` field on `SourceParamsWebCrawler` have been removed from instance create/update params and responses. The `parse_type` enum value `"feed-rss"` has been removed (only `"sitemap"` and `"crawl"` remain). The `search_query` field on `InstanceSearchResponse` and `NamespaceSearchResponse` changed from required `str` to `Optional[str]`. A new required `query_kind` field (`Literal["text", "image", "multimodal"]`) has been added to search responses.
+* **zero_trust:** In `Organization` and related params, `MfaSSHPivKeyRequirements` has been renamed to `MfaPivKeyRequirements`, the `mfa_ssh_piv_key_requirements` field has been renamed to `mfa_piv_key_requirements`, and the `allowed_authenticators` enum value `"ssh_piv_key"` has been changed to `"piv_key"`.
+
+### Features
+
+* **email_auth:** add email_auth resource ([43fb66a](https://github.com/cloudflare/cloudflare-python/commit/43fb66a7e))
+* **moq:** add moq resource ([c409a18](https://github.com/cloudflare/cloudflare-python/commit/c409a1818))
+* **logs:** add log_explorer sub-resource with query, datasets, and available datasets ([b8896ca](https://github.com/cloudflare/cloudflare-python/commit/b8896ca79))
+* **email_security:** add bulk message operations to investigate ([e96350d](https://github.com/cloudflare/cloudflare-python/commit/e96350d9a))
+* **aisearch:** add multimodal support with image_url content parts and new `@cf/qwen/qwen3-vl-embedding-2b` embedding model ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+* **zero_trust:** add Worker destination types (`WorkerDestination`, `PreviewWorkerDestination`, `AllWorkersDestination`, `AllPreviewWorkersDestination`) to Access applications and `eager_redirect_cookie_setting` field to self-hosted applications ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+* **magic_transit:** add `primary` and `site_id` fields to connector create/edit params ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+* **rulesets:** add `Vary` cache settings with `ActionParametersVary`, `ActionParametersVaryDefault`, and `ActionParametersVaryHeaders` types ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+* **cloudforce_one:** `threat_events.datasets.list()` now accepts optional params ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+* **email_security:** add `expected_disposition` param to `investigate.move.create()` and `investigate.move.bulk()` ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+* **email_routing:** add `support_subaddress` field to `Settings` response type ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+* **zero_trust:** add `max_ttl_secs` field to `GatewayConfigurationSettings` and new `MaxTTL` type to gateway `Location` for DNS TTL cap control ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+* **zero_trust:** add `GlobalAcceleration` type to default and custom device policy settings ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+* **accounts:** add `category` field to `PermissionGroupGetResponse` and `PermissionGroupListResponse` for account and user tokens ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+
+#### New Resources
+
+**EmailAuth** (`client.email_auth`)
+
+DMARC report management and SPF inspection for email authentication.
+
+**DMARCReports** (`client.email_auth.dmarc_reports`)
+
+- `edit(*, zone_id, **params) -> Optional[DMARCReportEditResponse]`
+- `get(*, zone_id) -> Optional[DMARCReportGetResponse]`
+
+New types:
+```python
+from cloudflare.types.email_auth import DMARCReportEditResponse, DMARCReportGetResponse
+```
+
+**SPF Inspect** (`client.email_auth.spf.inspect`)
+
+- `get(*, zone_id, **params) -> Optional[InspectGetResponse]`
+
+New types:
+```python
+from cloudflare.types.email_auth.spf import InspectGetResponse
+```
+
+**MoQ** (`client.moq`)
+
+Media over QUIC relay management.
+
+**Relays** (`client.moq.relays`)
+
+- `create(*, account_id, **params) -> Optional[RelayCreateResponse]`
+- `update(relay_id, *, account_id, **params) -> Optional[RelayUpdateResponse]`
+- `list(*, account_id, **params) -> SyncSinglePage[RelayListResponse]`
+- `delete(relay_id, *, account_id) -> object`
+- `get(relay_id, *, account_id) -> Optional[RelayGetResponse]`
+
+New types:
+```python
+from cloudflare.types.moq import (
+    RelayCreateResponse,
+    RelayUpdateResponse,
+    RelayListResponse,
+    RelayGetResponse,
+)
+```
+
+**Tokens** (`client.moq.relays.tokens`)
+
+- `rotate(relay_id, *, account_id, **params) -> Optional[TokenRotateResponse]`
+
+New types:
+```python
+from cloudflare.types.moq.relays import TokenRotateResponse
+```
+
+**Log Explorer** (`client.logs.log_explorer`)
+
+SQL-based log querying and dataset management.
+
+**Query** (`client.logs.log_explorer.query`)
+
+- `sql(body, *, account_id, zone_id, **params) -> SyncSinglePage[QuerySqlResponse]`
+
+New types:
+```python
+from cloudflare.types.logs.log_explorer import QuerySqlResponse
+```
+
+**Datasets** (`client.logs.log_explorer.datasets`)
+
+- `create(*, account_id, zone_id, **params) -> Optional[Dataset]`
+- `update(dataset_id, *, account_id, zone_id, **params) -> Optional[Dataset]`
+- `list(*, account_id, zone_id, **params) -> SyncSinglePage[DatasetSummary]`
+- `get(dataset_id, *, account_id, zone_id) -> Optional[Dataset]`
+
+**Available** (`client.logs.log_explorer.datasets.available`)
+
+- `list(*, account_id, zone_id) -> SyncSinglePage[AvailableDataset]`
+
+New types:
+```python
+from cloudflare.types.logs.log_explorer import (
+    Dataset,
+    DatasetSummary,
+    CreateRequest,
+    UpdateRequest,
+)
+from cloudflare.types.logs.log_explorer.datasets import AvailableDataset, AvailableList
+```
+
+**Email Security Investigate Bulk** (`client.email_security.investigate.bulk`)
+
+Bulk message movement and quarantine release operations.
+
+- `create(*, account_id, **params) -> BulkCreateResponse`
+- `list(*, account_id, **params) -> SyncV4PagePaginationArray[BulkListResponse]`
+- `delete(job_id, *, account_id) -> BulkDeleteResponse`
+- `get(job_id, *, account_id) -> BulkGetResponse`
+
+**Cancel** (`client.email_security.investigate.bulk.cancel`)
+
+- `create(job_id, *, account_id) -> CancelCreateResponse`
+
+**Messages** (`client.email_security.investigate.bulk.messages`)
+
+- `list(job_id, *, account_id, **params) -> SyncV4PagePaginationArray[MessageListResponse]`
+
+New types:
+```python
+from cloudflare.types.email_security.investigate import (
+    BulkCreateResponse,
+    BulkListResponse,
+    BulkDeleteResponse,
+    BulkGetResponse,
+)
+from cloudflare.types.email_security.investigate.bulk import (
+    CancelCreateResponse,
+    MessageListResponse,
+)
+```
+
+### Chores
+
+* **billing:** update generated types and methods ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+* **pipelines:** update generated types and methods ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+* **workers:** update generated types and methods ([de12426](https://github.com/cloudflare/cloudflare-python/commit/de1242647))
+
 ## 5.4.0 (2026-06-16)
 
 Full Changelog: [v5.3.0...v5.4.0](https://github.com/cloudflare/cloudflare-python/compare/v5.3.0...v5.4.0)

diff --git a/README.md b/README.md
@@ -9,15 +9,6 @@ and offers both synchronous and asynchronous clients powered by [httpx](https://
 
 It is generated with [Stainless](https://www.stainless.com/).
 
-## MCP Server
-
-Use the Cloudflare MCP Server to enable AI assistants to interact with this API, allowing them to explore endpoints, make test requests, and use documentation to help integrate this SDK into your application.
-
-[![Add to Cursor](https://cursor.com/deeplink/mcp-install-dark.svg)](https://cursor.com/en-US/install-mcp?name=cloudflare-mcp&config=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)
-[![Install in VS Code](https://img.shields.io/badge/_-Add_to_VS_Code-blue?style=for-the-badge&logo=data:image/svg%2bxml;base64,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)](https://vscode.stainless.com/mcp/%7B%22name%22%3A%22cloudflare-mcp%22%2C%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22cloudflare-mcp%22%5D%2C%22env%22%3A%7B%22CLOUDFLARE_API_TOKEN%22%3A%22Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY%22%2C%22CLOUDFLARE_API_KEY%22%3A%22144c9defac04969c7bfad8efaa8ea194%22%2C%22CLOUDFLARE_EMAIL%22%3A%22user%40example.com%22%2C%22CLOUDFLARE_API_USER_SERVICE_KEY%22%3A%22v1.0-144c9defac04969c7bfad8ef-631a41d003a32d25fe878081ef365c49503f7fada600da935e2851a1c7326084b85cbf6429c4b859de8475731dc92a9c329631e6d59e6c73da7b198497172b4cefe071d90d0f5d2719%22%7D%7D)
-
-> Note: You may need to set environment variables in your MCP client.
-
 ## Documentation
 
 The REST API documentation can be found on [developers.cloudflare.com](https://developers.cloudflare.com/api). The full API of this library can be found in [api.md](api.md).
@@ -471,8 +462,12 @@ with Cloudflare() as client:
 This package generally follows [SemVer](https://semver.org/spec/v2.0.0.html) conventions, though certain backwards-incompatible changes may be released as minor versions:
 
 1. Changes that only affect static types, without breaking runtime behavior.
-1. Changes to library internals which are technically public but not intended or documented for external use. 
-1. Changes that we do not expect to impact the vast majority of users in practice.
+2. Changes to library internals which are technically public but not intended or documented for external use. _(Please open a GitHub issue to let us know if you are relying on such internals.)_
+3. Changes that we do not expect to impact the vast majority of users in practice.
+
+We take backwards-compatibility seriously and work hard to ensure you can rely on a smooth upgrade experience.
+
+We are keen for your feedback; please open an [issue](https://www.github.com/cloudflare/cloudflare-python/issues) with questions, bugs, or suggestions.
 
 ### Determining the installed version
 

diff --git a/api.md b/api.md
@@ -75,6 +75,8 @@ from cloudflare.types import (
 
 # [EmailSecurity](src/cloudflare/resources/email_security/api.md)
 
+# [EmailAuth](src/cloudflare/resources/email_auth/api.md)
+
 # [EmailRouting](src/cloudflare/resources/email_routing/api.md)
 
 # [EmailSending](src/cloudflare/resources/email_sending/api.md)
@@ -153,6 +155,8 @@ from cloudflare.types import (
 
 # [Registrar](src/cloudflare/resources/registrar/api.md)
 
+# [RegistrarSandbox](src/cloudflare/resources/registrar_sandbox/api.md)
+
 # [RequestTracers](src/cloudflare/resources/request_tracers/api.md)
 
 # [Rules](src/cloudflare/resources/rules/api.md)
@@ -211,6 +215,8 @@ from cloudflare.types import (
 
 # [Calls](src/cloudflare/resources/calls/api.md)
 
+# [MoQ](src/cloudflare/resources/moq/api.md)
+
 # [CloudforceOne](src/cloudflare/resources/cloudforce_one/api.md)
 
 # [AIGateway](src/cloudflare/resources/ai_gateway/api.md)

diff --git a/bin/check-release-environment b/bin/check-release-environment
@@ -2,6 +2,10 @@
 
 errors=()
 
+if [ -z "${RELEASE_PLEASE_TOKEN}" ]; then
+  errors+=("The RELEASE_PLEASE_TOKEN secret has not been set. Create a fine-grained GitHub PAT and add it as a repository secret.")
+fi
+
 if [ -z "${PYPI_TOKEN}" ]; then
   errors+=("The PYPI_TOKEN secret has not been set. Please set it in either this repository's secrets or your organization secrets.")
 fi

diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "cloudflare"
-version = "5.4.0"
+version = "5.5.0"
 description = "The official Python library for the cloudflare API"
 dynamic = ["readme"]
 license = "Apache-2.0"

diff --git a/release-please-config.json b/release-please-config.json
diff --git a/scripts/mock b/scripts/mock
diff --git a/src/cloudflare/_base_client.py b/src/cloudflare/_base_client.py
@@ -14,6 +14,7 @@
 from types import TracebackType
 from random import random
 from typing import (
+    IO,
     TYPE_CHECKING,
     Any,
     Dict,
@@ -1405,10 +1406,11 @@ def get_api_list(
         model: Type[object],
         page: Type[SyncPageT],
         body: Body | None = None,
+        content: bytes | bytearray | IO[bytes] | Iterable[bytes] | None = None,
         options: RequestOptions = {},
         method: str = "get",
     ) -> SyncPageT:
-        opts = FinalRequestOptions.construct(method=method, url=path, json_data=body, **options)
+        opts = FinalRequestOptions.construct(method=method, url=path, json_data=body, content=content, **options)
         return self._request_api_list(model, page, opts)
 
 
@@ -1984,10 +1986,11 @@ def get_api_list(
         model: Type[_T],
         page: Type[AsyncPageT],
         body: Body | None = None,
+        content: bytes | bytearray | IO[bytes] | Iterable[bytes] | None = None,
         options: RequestOptions = {},
         method: str = "get",
     ) -> AsyncPaginator[_T, AsyncPageT]:
-        opts = FinalRequestOptions.construct(method=method, url=path, json_data=body, **options)
+        opts = FinalRequestOptions.construct(method=method, url=path, json_data=body, content=content, **options)
         return self._request_api_list(model, page, opts)