Sign inConnect your agent
infochanged

Bots - Control JavaScript Detections API results

Announced
Tags
Bots
Severity
info, set by reef/rss-rule-v1
Source
https://developers.cloudflare.com/changelog/post/2026-09-16-jsd-api-results/

<p>Enterprise Bot Management customers can control whether Cloudflare uses results created through the JavaScript Detections API for bot scoring and detections.</p> <p>Turn <strong>JavaScript Detections for API traffic</strong> on or off in <strong>Security</strong> &gt; <strong>Settings</strong>. You can also configure the zone through the Bot Management API by setting <code>jsd_api_results_enabled</code>:</p> <figure class="nb-code-figure" data-nb-lang="json"><pre class="astro-code astro-code-themes github-light github-dark nb-shiki-c6xiwz" tabindex="0" data-language="json" data-nb-lang="json"><code><span class="line"><span class="nb-shiki-140thh">{</span></span> <span class="line"><span class="nb-shiki-dzsirb"> "jsd_api_results_enabled"</span><span class="nb-shiki-140thh">: </span><span class="nb-shiki-dzsirb">true</span></span> <span class="line"><span class="nb-shiki-140thh">}</span></span></code></pre></figure> <p>This setting is separate from zone-wide script injection. When it is off, the API script can still execute and return <code>success</code> to the callback, but Cloudflare does not consume the result.</p> <p>For more information, refer to <a href="https://developers.cloudflare.com/cloudflare-challenges/challenge-types/javascript-detections/#api">JavaScript Detections</a>.</p>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.