Cloudflare Developers•5mo ago

Help with removing __cf_bm

Hey everyone, I'm trying to get rid of all cookies on my websites. The only cookie I see left is cf_bm. I read the docs and it says I should be able to disable it via the page https://developers.cloudflare.com/api/operations/bot-management-for-a-zone-update-config however I see no option to do so. I'm on the free plan, I have no bots enabled yet I still see the cookie. My API request is below: curl --request PUT \ --url "https://api.cloudflare.com/client/v4/zones/ZONE_ID/bot_management" \ --header 'Authorization: Bearer ID' \ --header 'Content-Type: application/json' \ --data '{"cf_bm": false}'

Cloudflare API Documentation

Interact with Cloudflare's products and services via the Cloudflare API

14 Replies

Erisa•5mo ago

What response do you get back when you send that API call?

Asher Myers•5mo ago

Why would you even want to do this?

ChocoNanaKens•5mo ago

This is the response with my API call:

{
  "result": {
    "enable_js": false,
    "fight_mode": false,
    "using_latest_model": true
  },
  "success": true,
  "errors": [],
  "messages": []

{
  "result": {
    "enable_js": false,
    "fight_mode": false,
    "using_latest_model": true
  },
  "success": true,
  "errors": [],
  "messages": []

I still see the cookie afterwards though. We are updating a privacy policy and want to claim that we don't store any cookies on users. However, we can't claim that without this cookie being gone.

Erisa•5mo ago

I see, I think that the next step here would be to open a support ticket. Do you have a paid plan level?

ChocoNanaKens•5mo ago

Yes, I have the pro plan. I've opened a ticket before writing here. Just wanted to see if anyone had done this before. Hopefully I don't have to upgrade to enterprise to get rid of a simple cookie. lol

Erisa•5mo ago

I don't think so, even on free plan I would have found a way to get a ticket raised. Could you share the ticket number?

ChocoNanaKens•5mo ago

#3140493

Erisa•5mo ago

Thanks I'll have a look into this Could you try this api call with --data '{"suppress_session_score": true}' ? Actually, I think there is also something else at play that I can't discuss here as it relates to account configuration, let me follow up on the ticket with both of these

ChocoNanaKens•5mo ago

{
  "result": null,
  "success": false,
  "errors": [
    {
      "code": 10400,
      "message": "Bad Request"
    }
  ],
  "messages": [
    {
      "code": 10400,
      "message": "zone not entitled to enable: suppress_session_score"
    }
  ]
}

{
  "result": null,
  "success": false,
  "errors": [
    {
      "code": 10400,
      "message": "Bad Request"
    }
  ],
  "messages": [
    {
      "code": 10400,
      "message": "zone not entitled to enable: suppress_session_score"
    }
  ]
}

Erisa•5mo ago

Okay no problem

ChocoNanaKens•5mo ago

Oh sure thing!

Erisa•5mo ago

I'll follow up on the ticket

ChocoNanaKens•5mo ago

Thank you

Erisa•5mo ago

Replied

Gaming

Programming

Help with removing __cf_bm