Accidentally created a Zero Trust app without payment method and banned myself from my site

Clover Yan · 2025-12-20T02:47:05.969Z

I do not have a payment method attached to my account. However I could still create Zero Trust app in the dashboard homepage while I can't access the main dashboard. I used an email ending policy for the application, but it doesn't work as intended, and I'm not able to access the site now. Since I don't have a payment method, I can't access Zero Trust Application Dashboard, therefore unable to delete the application. I need some help

C

Clover YanOP•12/20/25, 3:17 AM

And admin here

C

Clover YanOP•12/20/25, 3:18 AM

I cannot do this via REST API, the list and get actions are all good

curl https://api.cloudflare.com/client/v4/$ACCOUNTS_OR_ZONES/$ACCOUNT_OR_ZONE_ID/access/apps/$APP_ID \
>     -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
{
  "result": {
    "id": "b0d9bad0-183f-458d-bb3e-1a25db400c4b",
    "uid": "b0d9bad0-183f-458d-bb3e-1a25db400c4b",
    "type": "self_hosted",
    "name": "档案馆",
    "aud": "e2b37825f536e84a54cace3f1fee1fc426c7a8be153767b99127e22dc98c48c4",
    "created_at": "2025-12-20T02:21:01Z",
    "updated_at": "2025-12-20T02:21:01Z",
    "domain": "lib.khyan.top",
    "self_hosted_domains": [
      "lib.khyan.top"
    ],
    "destinations": [
      {
        "type": "public",
        "uri": "lib.khyan.top"
      }
    ],
    "app_launcher_visible": true,
    "allowed_idps": [],
    "tags": [],
    "auto_redirect_to_identity": false,
    "policies": [],
    "session_duration": "24h",
    "enable_binding_cookie": false,
    "http_only_cookie_attribute": false,
    "options_preflight_bypass": false
  },
  "success": true,
  "errors": [],
  "messages": []
}

curl https://api.cloudflare.com/client/v4/$ACCOUNTS_OR_ZONES/$ACCOUNT_OR_ZONE_ID/access/apps/$APP_ID \
>     -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
{
  "result": {
    "id": "b0d9bad0-183f-458d-bb3e-1a25db400c4b",
    "uid": "b0d9bad0-183f-458d-bb3e-1a25db400c4b",
    "type": "self_hosted",
    "name": "档案馆",
    "aud": "e2b37825f536e84a54cace3f1fee1fc426c7a8be153767b99127e22dc98c48c4",
    "created_at": "2025-12-20T02:21:01Z",
    "updated_at": "2025-12-20T02:21:01Z",
    "domain": "lib.khyan.top",
    "self_hosted_domains": [
      "lib.khyan.top"
    ],
    "destinations": [
      {
        "type": "public",
        "uri": "lib.khyan.top"
      }
    ],
    "app_launcher_visible": true,
    "allowed_idps": [],
    "tags": [],
    "auto_redirect_to_identity": false,
    "policies": [],
    "session_duration": "24h",
    "enable_binding_cookie": false,
    "http_only_cookie_attribute": false,
    "options_preflight_bypass": false
  },
  "success": true,
  "errors": [],
  "messages": []
}

curl https://api.cloudflare.com/client/v4/$ACCOUNTS_OR_ZONES/$ACCOUNT_OR_ZONE_ID/access/apps/$APP_ID \
>     -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
{
  "result": {
    "id": "b0d9bad0-183f-458d-bb3e-1a25db400c4b",
    "uid": "b0d9bad0-183f-458d-bb3e-1a25db400c4b",
    "type": "self_hosted",
    "name": "档案馆",
    "aud": "e2b37825f536e84a54cace3f1fee1fc426c7a8be153767b99127e22dc98c48c4",
    "created_at": "2025-12-20T02:21:01Z",
    "updated_at": "2025-12-20T02:21:01Z",
    "domain": "lib.khyan.top",
    "self_hosted_domains": [
      "lib.khyan.top"
    ],
    "destinations": [
      {
        "type": "public",
        "uri": "lib.khyan.top"
      }
    ],
    "app_launcher_visible": true,
    "allowed_idps": [],
    "tags": [],
    "auto_redirect_to_identity": false,
    "policies": [],
    "session_duration": "24h",
    "enable_binding_cookie": false,
    "http_only_cookie_attribute": false,
    "options_preflight_bypass": false
  },
  "success": true,
  "errors": [],
  "messages": []
}

curl https://api.cloudflare.com/client/v4/$ACCOUNTS_OR_ZONES/$ACCOUNT_OR_ZONE_ID/access/apps/$APP_ID \
>     -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
{
  "result": {
    "id": "b0d9bad0-183f-458d-bb3e-1a25db400c4b",
    "uid": "b0d9bad0-183f-458d-bb3e-1a25db400c4b",
    "type": "self_hosted",
    "name": "档案馆",
    "aud": "e2b37825f536e84a54cace3f1fee1fc426c7a8be153767b99127e22dc98c48c4",
    "created_at": "2025-12-20T02:21:01Z",
    "updated_at": "2025-12-20T02:21:01Z",
    "domain": "lib.khyan.top",
    "self_hosted_domains": [
      "lib.khyan.top"
    ],
    "destinations": [
      {
        "type": "public",
        "uri": "lib.khyan.top"
      }
    ],
    "app_launcher_visible": true,
    "allowed_idps": [],
    "tags": [],
    "auto_redirect_to_identity": false,
    "policies": [],
    "session_duration": "24h",
    "enable_binding_cookie": false,
    "http_only_cookie_attribute": false,
    "options_preflight_bypass": false
  },
  "success": true,
  "errors": [],
  "messages": []
}

but when it comes to update or delete, I just get

curl https://api.cloudflare.com/client/v4/$ACCOUNTS_OR_ZONES/$ACCOUNT_OR_ZONE_ID/access/apps/$APP_ID \
>     -X DELETE \
>     -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
{
  "result": null,
  "success": false,
  "errors": [
    {
      "code": 1010,
      "error": "auth.forbidden"
    }
  ]
}

curl https://api.cloudflare.com/client/v4/$ACCOUNTS_OR_ZONES/$ACCOUNT_OR_ZONE_ID/access/apps/$APP_ID \
>     -X DELETE \
>     -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
{
  "result": null,
  "success": false,
  "errors": [
    {
      "code": 1010,
      "error": "auth.forbidden"
    }
  ]
}

curl https://api.cloudflare.com/client/v4/$ACCOUNTS_OR_ZONES/$ACCOUNT_OR_ZONE_ID/access/apps/$APP_ID \
>     -X DELETE \
>     -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
{
  "result": null,
  "success": false,
  "errors": [
    {
      "code": 1010,
      "error": "auth.forbidden"
    }
  ]
}

curl https://api.cloudflare.com/client/v4/$ACCOUNTS_OR_ZONES/$ACCOUNT_OR_ZONE_ID/access/apps/$APP_ID \
>     -X DELETE \
>     -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
{
  "result": null,
  "success": false,
  "errors": [
    {
      "code": 1010,
      "error": "auth.forbidden"
    }
  ]
}

C

Clover YanOP•12/20/25, 3:19 AM

I just want to disable Zero Trust access control

C

Clover YanOP•12/20/25, 3:19 AM

I don't have a credit card valid for Cloudflare

C

Clover YanOP•12/20/25, 3:20 AM

@797524744156086293

I

Isaac McFadyen•12/20/25, 3:20 AM

?pings

S

SuperHelpflare•12/20/25, 3:20 AM

Please do not ping community members for non-moderation reasons. Doing so will not solve your issue faster and will make people less likely to want to help you.

IIsaac McFadyen ?pings

C

Clover YanOP•12/20/25, 3:21 AM

Sorry

C

Clover YanOP•12/20/25, 3:23 AM

I've done some research and it seems that it's a historical issue

https://community.cloudflare.com/t/cannot-access-zero-trust-access-applications-on-free-plan-payment-method-re/850872
https://community.cloudflare.com/t/disable-zero-trust-without-payment-method/785183
https://www.answeroverflow.com/m/1296107800811802675

Answer Overflow

Accidentally turned on access policy; can't turn off without a cred...

I accidentally turned on the Access Policy in my cloudflare page settings. When I try to turn it back off, it redirects me to the Cloudflare Zero Trust page, & to pick a plan I have to provide a credit card. Now my preview sites are also behind the access lock, which I can't remove.

Example: https://65158e2c.ttc-bus-eta.pages.dev/

I don't have...

Accidentally created a Zero Trust app without payment method and banned myself from my site

Similar Threads

Similar Threads

Similar Threads