Typed TypeScript and Python SDKs
OpenWAF now has typed SDKs generated from its OpenAPI description: a TypeScript client built on fetch with no dependencies and a Python client that only uses the standard library. They cover the operations an API token can call and are served by the API itself at /v1/sdk/openwaf.ts and /v1/sdk/openwaf.py.
See the SDK documentation and the API reference.
Purge-only API tokens
An API token can now be created as purge-only: it is limited to one zone and can only purge that zone's cache and list its purges. Any other route, MCP included, answers 403 token_scope. It is the token to give a CI job that purges after each deploy.
See the Cache documentation.