---
title: "Remove App WAF Rule"
method: DELETE
path: "/app/{app_id}/waf/rules"
tags: ["apps"]
---

# Remove App WAF Rule

`DELETE /app/{app_id}/waf/rules`

## Request

- Base URL: `https://api.faable.com`
- URL: `https://api.faable.com/app/{app_id}/waf/rules`
- Auth: one of:
  - OAuth 2 (authorization code, authorization URL `https://faable.auth.faable.link/authorize`, token URL `https://faable.auth.faable.link/oauth/token`)
  - HTTP bearer
  - OAuth 2 (client credentials, token URL `https://faable.auth.faable.link/oauth/token`)
  - HTTP bearer
  - HTTP basic
  - API key in query parameter `apikey`

Remove a WAF rule from an App

## Path parameters

- `app_id` string, required

## Request body

- object
  - `pattern` string
  - `user_agent` string
  - `query` string
  - `action` union
    - 'deny'
    - 'sink'
    - 'allow'

## Response `200`

Default Response

- object
  - `enabled` boolean, required
  - `platform_profiles` object[], required
    - `name` string, required
    - `action` string, required
    - `match` string, required
    - `rule_count` integer, required
    - `rules` object[]
      - `pattern` string, required
      - `user_agent` string
      - `query` string
      - `description` string
  - `rules` object[], required
    - `pattern` string
    - `user_agent` string
    - `query` string
    - `action` string, required
    - `match` string, required
    - `description` string

## Other responses

- `400`: `bad_request` — The request is malformed. `message` says what is wrong. `validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.
- `401`: `unauthorized` — The request carries no valid credentials. `invalid_token` — The bearer token is missing, malformed or expired.
- `403`: `forbidden` — The credentials are valid but do not allow this operation. `user_suspended` — The account is suspended. Contact support@faable.com.
- `404`: `waf_rule_not_found` — No WAF rule with that pattern on this app.
- `409`: `conflict` — The request conflicts with the current state of the resource.
- `429`: `too_many_requests` — Rate limit exceeded. Honour the `Retry-After` header.
- `500`: `internal_error` — Unexpected server error. Retry later; the request id is logged.
- `503`: `database_unavailable` — Faable cannot reach its database right now. Transient: retry after the `Retry-After` header.

---

[API](https://skmtc.dev/faable/apis/faablecloud-api.md) · [All operations](https://skmtc.dev/faable/apis/faablecloud-api/llms.txt) · [OpenAPI document](https://skmtc.dev/faable/apis/faablecloud-api/revisions/e2fc93da3c49?raw)