Email Service - Suppress recipients for one sending domain
Email Sending suppressions now support domain-level scope in addition to account-level scope, allowing you to manage bounce and complaint suppressions per sending domain. This prevents issues with one domain from affecting suppressions across your entire account, with automatic creation of domain-level suppressions and API support for specifying scope.
Email Sending suppressions now have a scope:
account: The suppression applies to every sending domain and subdomain in your account. This is the default.sending_domain: The suppression applies to one sending domain only. A suppression formail.myappexample.comdoes not block mail frommyappexample.com.
Most importantly, Email Sending now automatically creates bounce and complaint suppressions at the sending-domain level. This provides greater granularity by preventing an issue with one sending domain from suppressing the recipient across your entire account.
To add a suppression for one sending domain in the dashboard, go to Email Sending > Suppressions and select Sending domain in Scope. Imports can also set a scope for each row or a default scope.
In the API, pass scope when you create the suppression:
curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/email/sending/suppressions \
--header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
--header "Content-Type: application/json" \
--data '{
"email": "user@example.net",
"scope": { "type": "sending_domain", "value": "mail.myappexample.com" }
}'
The suppressions API returns scope on every suppression. To list the suppressions for one domain, use scope_type=sending_domain&scope_value=mail.myappexample.com. If you omit scope, the API creates an account suppression, so existing integrations continue to work.
Refer to Suppression lists and Manage suppressions for details.
Source: original entry ↗
More from Cloudflare
Follow Cloudflare to get its new changes in your feed and email digest.
API Shield - Run schema learning on demand
API Shield now supports on-demand schema learning runs, allowing you to manually trigger learning after sending representative traffic to your API instead of waiting for the weekly schedule. This enables faster testing and validation cycles.
Cloudflare API MCP server now serves Cloudflare skills
The Cloudflare API MCP server now integrates with the Skills over MCP extension, allowing MCP clients to discover and access Cloudflare skills. Users can add the MCP server endpoint to compatible MCP clients to access these skills.
WAF failed detections field now available in Rules
A new cf.appsec.request.failed_detections field lets you control how rules handle requests when security detections fail. This array of detection IDs covers content scanning, WAF attack scoring, attack signatures, leaked credentials, and AI-based PII/prompt injection/custom topic detection failures, and works across custom rules, rate limiting rules, and request header transform rules.