---
title: "Update the WAF rules for an application."
method: PATCH
path: "/applications/{id}/waf-rules"
tags: ["applications"]
---

# Update the WAF rules for an application.

`PATCH /applications/{id}/waf-rules`

Supports updates to the WAF rules specified as per the RFC 6902 format.

## Path parameters

- `id` string, required

## Response `200`

The application waf rules were successfully updated.

- WafRule[] — A list of WAF rules ordered in the sequence that they are processed
  - `id` string — The unique id of the rule
  - `enabled` boolean — When true, this rule will be included in the WAF configuration for the application
  - `action` 'allow' | 'block' | 'deny' | 'drop' | 'pass' | 'pause' | 'proxy' | 'redirect' — The disruptive action for the rule
  - `message` string — The message for the rule
  - `tags` string[] — Tags for the rule
  - `notify_level` 'none' | 'info' | 'warning' | 'severe' — The notification level for WAF rule hits.

---

[API](https://skmtc.dev/webscale/apis/webscale-apis.md) · [All operations](https://skmtc.dev/webscale/apis/webscale-apis/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/webscale/webscale-apis/revisions/c98d872b50cb/schema)