Enterprise Account Status

We had built a custom function so when users add their domains it should push the domain to our Zone custom host names but running into a 400 forbidden error.

Can someone upgrade our Zone: backlinkoo.com

or account to Enterprise? We signed up for the SaaS and want to do the pay as you go for 100 domain limit+increase 0.10 per domain name, but the API won't authenticate without having Enterprise status.

This would be for https://backlinkoo.com/domains so users can add more than 100 domains as we have a private blog network where some users have more than 100 domains (for just 1 user), so we need to be able to accommodate.

{"success":false,"error":[{"code":1456,"message":"Access to setting a custom origin SNI has not been granted for this zone or for this account. If you're already a paid SSL for SaaS customer, please contact your Customer Success Manager for additional provisioning. If you're not yet enrolled, please fill out this form and someone from our sales team will contact you: https://www.cloudflare.com/plans/enterprise/contact/"}]}

Backlink ∞

Professional backlink building platform

Peps•10/2/25, 12:18 PM

Can someone upgrade our Zone:

this is not something the community can help with. It's best to reach out to Cloudflare's sales team

alex•10/2/25, 1:04 PM

and you've got the link for that right at the end of your post in the error message

∞

∞OP•10/2/25, 8:23 PM

We've finally got a hold of someone and are continuing our back and forth after getting forwarded to one person after another. This is NOT a good look for us, we have users that buy backlinks from us daily that need our AI to get their keywords ranked on Google for search terms they otherwise wouldn't be able to.

Only we're able to do it because our technical proficiency and it sucks knowing that our capacity is limited by custom host name limitations, none of our partners can resolve their domain so their clients are also getting the short end of the stick. We need to be able to resolve TLS issues and the only way to do that is with an Enterprise plan so domains have a valid/wildcard SSL certificate issuance.

∞∞We've finally got a hold of someone and are continuing our back and forth after ...

Laudian•10/2/25, 10:10 PM

According to the error message you shared, you're trying to use an Enterprise-only feature (custom origin SNI).
Can you share the API call you're making?

LLaudian According to the error message you shared, you're trying to use an Enterprise-on...

∞

∞OP•10/2/25, 10:30 PM

We have read/write permissions for SSL and DNS and have our API generated and fully integrated with our function and API call. We're just trying to allow users to add their domains to resolve pages and posts that are generated utilizing our proprietary artificial intelligence ranking algorithm and synthesizing protocol.

We are receiving a postback from Cloudflare which means the end points are reaching but receiving a 403/400 error due to account restrictions and users are being denied from being able to add their domain to our zone ID. This would be impossible to manage manually and we need our API working I think this would be a far better resolution if Cloudflare would enable their API for SaaS plans without having to fully upgrade to Enterprise as this is the only feature we're lacking and most likely what other Cloudflare users are experiencing that are in the same industry (although I don't know anyone else doing what we're doing). We don't really need to want or pay for anything that we won't be using and this is the only feature we are trying to resolve and instead of going to our host to enable more than the 100 domain limit capacity, we prefer Cloudflare because of the additional robust features that can be integrated with our application.

The domain authentication protocol includes adding user added domains into key pairs and a Namespace for additional validation but we still need custom host names for TLS issues to resolve. Our system is already fully integrated with being able to remove unauthenticated domains, with a automated clean up and removal process for inactive domains that are integrated via the same API protocol so it's not like there are going to be millions of random domains or spam that will be pushed into our zone, this is something we're doing due diligence on and want to avoid. This is really getting frusrating because users are actively subscribed to our premium plan but unable to use the feature that should be available.

Peps•10/2/25, 10:31 PM

what plan is your zone?

∞

∞OP•10/2/25, 10:33 PM

We're on the SaaS plan and we're still getting 403/400 forbidden restrictions on API calls. We still need to enable wild cart authority SSL certificates and issuances with the zone but it would be redundant if we can't even get this issue to resolve.

Peps•10/2/25, 10:33 PM

I meant your zone

Peps•10/2/25, 10:33 PM

is it on free, pro, business or enterprise?

∞

∞OP•10/2/25, 10:34 PM

Peps•10/2/25, 10:34 PM

and why do you specifically require wildcard SSL certificates?

∞

∞OP•10/2/25, 10:41 PM

A wildcard would allow hundreds or thousands of domains to resolve SSL/TLS issues instead of having multiple SSL certificates for each domain, a Wildcard SSL would allow us to propagate all domains that would be added into our zone. Similarly to how Shopify has their DNS records for each user just adding a CNAME record, "myshop.shopify.com", users having their DNS settings and hosting resolve is the setup we're trying to reproduce. On top of a reverse proxy to match incoming header requests with a Cloudflare worker we strung up, there's just no way getting around TLS browser authentication without their being matching origin requests. Custom host names solves that problem but the issue is an API restriction for our function to execute that endpoint (editing custom host names).

Peps•10/2/25, 10:42 PM

not sure I really understand

Peps•10/2/25, 10:43 PM

but custom origins is not limited to enterprise customers. Pay-as-you-go customers can make use of that option with the base subscription of the Custom Hostnames feature

Peps•10/2/25, 10:43 PM

I just checked on a other free zone, and its giving me the option to specify a custom origin server, while using the base subscription

Peps•10/2/25, 10:44 PM

what is the exact API payload that you were sending?

Peps•10/2/25, 10:45 PM

try out manually creating a Custom Hostname via the dash using a custom origin, and see if that also fails or whether the field is greyed out for you

∞

∞OP•10/2/25, 10:45 PM

"-H "Content-Type: application/json" -d "{"hostname": "demo.backlinkoo.com", "ssl": {"type": "dv", "method": "http"}}""

∞

∞OP•10/2/25, 10:46 PM

We need to be able to use the API which has restrictions is the problem we're facing and why we've been trying to reach someone to help us figure out how we can either enable that for our zone or how to adjust the settings in our account, whether that be upgrading to Enterprise or finding a custom solution without having to be bombarded with radicalized provisions for features we don't need.

∞

∞OP•10/3/25, 5:47 AM

∞∞"-H "Content-Type: application/json" -d "{\"hostname\": \"demo.backlinkoo.com\",...

Laudian•10/3/25, 11:51 AM

Hmm, the following API call works fine for me on a free zone, though it's an Enterprise account...

curl https://api.cloudflare.com/client/v4/zones/MYZONEID/custom_hostnames \
    -H 'Content-Type: application/json' \
    -H "X-Auth-Email: MYEMAIL" \
    -H "X-Auth-Key: MYAPIKEY" \
    -d '{
          "hostname": "test.laudian.com",
          "ssl": {"type": "dv", "method": "http"}
        }'

curl https://api.cloudflare.com/client/v4/zones/MYZONEID/custom_hostnames \
    -H 'Content-Type: application/json' \
    -H "X-Auth-Email: MYEMAIL" \
    -H "X-Auth-Key: MYAPIKEY" \
    -d '{
          "hostname": "test.laudian.com",
          "ssl": {"type": "dv", "method": "http"}
        }'

Are you using API key or token?

curl https://api.cloudflare.com/client/v4/zones/MYZONEID/custom_hostnames \ -H 'Content-Type: application/json' \ -H "X-Auth-Email: MYEMAIL" \ -H "X-Auth-Key: MYAPIKEY" \ -d '{ "hostname": "test.laudian.com", "ssl": {"type": "dv", "method": "http"} }'

Enterprise Account Status

Similar Threads

Similar Threads

Similar Threads