cloudflare-access-branding

Discover the launcher with GET /accounts/{account_id}/access/app_launcher, then update it with PUT /accounts/{account_id}/access/apps/{app_launcher_id} including type "app_launcher". Set fields like app_launcher_logo_url, bg_color, header_bg_color, landing_page_design, and footer_links.

Update the organization endpoint with PUT /accounts/{account_id}/access/organizations and set login_design fields: background_color, text_color, logo_path, header_text, and footer_text. This affects the pre-auth login page, separate from the post-auth app launcher.

The app launcher text color is not controllable via the API and defaults to black. You must use a light bg_color for the launcher page, otherwise the black text will be unreadable on dark backgrounds.

Create tags first with POST /accounts/{account_id}/access/tags using {"name": "TagName"}, then assign them when updating an app by passing the tag name strings in the app's tags array. Tags must exist before assignment.

App tile logos must be square aspect ratio; wide or banner logos will stretch. Static PNGs are preferred for app tiles, though animated GIFs work but may look odd at small sizes.