Create a Cloudflare URL access restriction from WhatsApp
Send a precise request with the zone, URL pattern, and permitted IPs or CIDR ranges. Notis creates the lockdown rule and reports the run.
Trigger
New Message Received
Triggered in real time when your WhatsApp Business number receives an inbound message from a customer (text, media, location, or contact). Delivered via the Cloud API webhook.
Action
Create Zone Lockdown Rule
Tool to create a Zone Lockdown rule. Use when you need to restrict access to specific URL patterns to defined IPs/CIDR ranges. Use after confirming zone_id.
Why this helps
Restricting access can be delayed when the URL pattern and permitted IP ranges are scattered across messages.
- Capture a specific access restriction request in WhatsApp.
- Require the zone and allowed IP or CIDR ranges in the instruction.
- Receive a run report for the lockdown rule creation.
Setup
Build it in a few focused steps.
- 1Connect WhatsApp and Cloudflare api key once in the Notis portal.
- 2Create an automation by telling Notis the outcome in plain language, or use Automations, New Automation in the portal.
- 3In one instruction, require an authorized request to specify the Cloudflare zone, URL pattern, and permitted IP addresses or CIDR ranges.
- 4Pick the WhatsApp New Message Received trigger and choose where run reports go.
- 5Test with one real example and review the new lockdown rule in Cloudflare.
Questions about this workflow
What details are required?
The request should provide the Cloudflare zone, the URL pattern to restrict, and the IP addresses or CIDR ranges allowed to access it.
Does this workflow apply a restriction account-wide?
The action creates a Zone Lockdown rule for a specified zone and URL pattern. Supply the correct zone details in the request.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Whatsapp to Cloudflare api key. A trigger fires from one place; an action lands in another.
Whatsapp triggers
Cloudflare api key actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create DNS Record
Tool to create a new DNS record in a Cloudflare zone. Use when you need to add a record (A, CNAME, TXT, MX, etc.) to a specified zone.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Create Zone Lockdown Rule
Tool to create a Zone Lockdown rule. Use when you need to restrict access to specific URL patterns to defined IPs/CIDR ranges. Use after confirming zone_id.
Message Status Updated
Triggers when a WhatsApp message status changes. IMPORTANT LIMITATION: WhatsApp Cloud API does not provide a native polling endpoint for message status. Status updates are ONLY delivered via webhooks in real-time. This trigger cannot directly poll the WhatsApp API for status updates. This trigger will return empty results as WhatsApp does not support this operation. To track message status updates, you must: 1. Set up a webhook endpoint to receive status notifications from WhatsApp 2. Store the webhook data in your own database 3. Use a different mechanism to query your stored webhook data For more information, see: - https://developers.facebook.com/docs/whatsapp/cloud-api/webhooks
Create Rule in Ruleset
Tool to add a rule to an existing ruleset. Use when you need to append or insert a new rule in a Cloudflare ruleset.
New Message Received
Triggered in real time when your WhatsApp Business number receives an inbound message from a customer (text, media, location, or contact). Delivered via the Cloud API webhook.
Create Ruleset
Tool to create an account- or zone-scoped ruleset. Use after defining your ruleset details and selecting the correct scope.
Interactive Reply Received
Triggered when a customer taps a quick-reply button or selects an option from an interactive list message you sent.
Delete DNS Record
Tool to delete a DNS record. Use when you need to remove a specific DNS record from a zone after confirming both zone and record IDs.
Message Template Status Update
Triggered when the review status of a WhatsApp message template changes — for example approved, rejected, or flagged — on your WhatsApp Business Account.
Delete DNSSEC
Tool to delete DNSSEC records for a zone. Use after disabling DNSSEC at the registrar to remove DNSSEC configuration.
Delete Rule from Ruleset
Tool to delete a specific rule from a ruleset. Use when you need to remove an outdated or incorrect rule from an account or zone ruleset after confirming IDs.
Delete Ruleset
Tool to delete all versions of a ruleset. Use when you need to remove a ruleset from an account or zone after confirming no references exist.
Connect any two apps with Notis in the middle.
Whatsapp and Cloudflare api key, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare api key.