> ## Documentation Index
> Fetch the complete documentation index at: https://bunny.net/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Shield API Reference

> Configure WAF rules, rate limiting, and security settings via HTTP.

The Shield API provides a RESTful interface for managing security settings on your pull zones. Configure WAF rules, rate limiting, bot detection, and access controls programmatically.

## Base URL

```
https://api.bunny.net
```

## Authentication

Authenticate using the `AccessKey` header with your account API key:

```bash theme={null}
curl --request GET \
  --url https://api.bunny.net/shield/waf/{shieldZoneId} \
  --header 'AccessKey: YOUR_API_KEY'
```

> [!NOTE]
>
> Find your API key in the [account
> settings](https://dash.bunny.net/account/settings) under **API Keys**.

## Resources

> **[WAF](/docs/shield/waf)**
>
> Block exploits and OWASP Top 10 vulnerabilities

> **[Rate Limiting](/docs/shield/rate-limiting)**
>
> Control request rates per IP, user, or path

> **[Bot Detection](/docs/shield/bot-detection)**
>
> Detect and block malicious bots

> **[Access Lists](/docs/shield/access-lists)**
>
> Manage IP allowlists and blocklists


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.