Cloud API
Flipper Cloud API reference including features, gates, audits, and telemetry endpoints.
Overview
The Flipper Cloud API is available at https://www.flippercloud.io/adapter. It includes all of the open source Flipper API endpoints plus Cloud-specific endpoints for audits and telemetry.
Authentication
All requests require a token sent via the Flipper-Cloud-Token header:
curl -H "Flipper-Cloud-Token: YOUR_TOKEN" \
https://www.flippercloud.io/adapter/features
Tokens are scoped to a specific environment. You can create and manage tokens in your environment's settings.
The Organization API at https://www.flippercloud.io/api/v1 uses organization API tokens instead. Environment tokens don't work there, and organization API tokens don't work with /adapter.
Token access levels
- Read Only tokens can evaluate features but cannot change them. Use Read Only for production applications and any client that only needs to evaluate flags.
- Read/Write tokens can evaluate and change features. Use Read/Write for personal, development, and test environments where the application or automation needs to change flags.
Manage preview environments is a separate permission from the access level. It lets a stable token create preview environments and delete the environments it created, but does not grant permission to change features. Enable it on a dedicated read-only preview automation token in a stable custom environment such as previews, rather than on a production application token.
Features
List All Features
GET /adapter/features
curl -H "Flipper-Cloud-Token: YOUR_TOKEN" \
https://www.flippercloud.io/adapter/features
{
"features": [
{
"key": "search",
"state": "on",
"gates": [
{"key": "boolean", "name": "boolean", "value": true},
{"key": "expression", "name": "expression", "value": null},
{"key": "groups", "name": "group", "value": []},
{"key": "actors", "name": "actor", "value": []},
{"key": "percentage_of_actors", "name": "percentage_of_actors", "value": 0},
{"key": "percentage_of_time", "name": "percentage_of_time", "value": 0}
]
}
]
}
Responses include these headers:
-
flipper-sync-version: a number that increases every time a feature in the environment changes, including changes inherited from production. It never decreases, so a response with a lower number is older. -
poll-interval: the recommended number of seconds between polls for this token.
Get a Feature
GET /adapter/features/{feature_name}
-
feature_name- The name of the feature to retrieve
curl -H "Flipper-Cloud-Token: YOUR_TOKEN" \
https://www.flippercloud.io/adapter/features/search
{
"key": "search",
"state": "on",
"gates": [
{"key": "boolean", "name": "boolean", "value": true},
{"key": "expression", "name": "expression", "value": null},
{"key": "groups", "name": "group", "value": []},
{"key": "actors", "name": "actor", "value": []},
{"key": "percentage_of_actors", "name": "percentage_of_actors", "value": 0},
{"key": "percentage_of_time", "name": "percentage_of_time", "value": 0}
]
}
Create a Feature
POST /adapter/features
-
name- The name of the feature to create
curl -X POST -d "name=new_dashboard" \
-H "Flipper-Cloud-Token: YOUR_TOKEN" \
https://www.flippercloud.io/adapter/features
Returns an empty JSON response on success.
Feature names starting with __flipper are reserved for Flipper's internal use. Creating one, or enabling or disabling a gate on one, returns 422 Unprocessable Entity and changes nothing.
Delete a Feature
DELETE /adapter/features/{feature_name}
-
feature_name- The name of the feature to delete
Features belong to the project, so deleting a feature removes it from every environment. This endpoint requires a writable Production environment token. Requests using other environment tokens return 403 Forbidden; you can also delete the feature in Flipper Cloud.
curl -X DELETE -H "Flipper-Cloud-Token: YOUR_TOKEN" \
https://www.flippercloud.io/adapter/features/new_dashboard
Successful deletion returns a 204 No Content response.
Clear a Feature
DELETE /adapter/features/{feature_name}/clear
-
feature_name- The name of the feature to clear
curl -X DELETE -H "Flipper-Cloud-Token: YOUR_TOKEN" \
https://www.flippercloud.io/adapter/features/new_dashboard/clear
Removes all gate values and returns a 204 No Content response.
Import Features
POST /adapter/import
Replaces the token's environment with the features in a Flipper export file, the same JSON that Flipper.export produces. This is what flipper cloud push uses. Features and gate values that aren't in the file are removed.
Features belong to the project, so removing one removes it from every environment. Only writable Production environment tokens can import a file that leaves out existing features. With any other token, the file must include every feature in the project. Otherwise the request returns 403 Forbidden and changes nothing.
A file containing a feature whose name starts with __flipper returns 422 Unprocessable Entity and changes nothing. Those names are reserved for Flipper's internal use.
curl -X POST -H "Content-Type: application/json" \
-H "Flipper-Cloud-Token: YOUR_TOKEN" \
--data-binary @flipper.json \
https://www.flippercloud.io/adapter/import
A successful import returns a 204 No Content response.
If the environment has an expression the client's flipper can't read, the import returns 409 Conflict and changes nothing, because the client can't see the expression it would replace. That's a Version (SemVer) expression for flipper 1.4.2 or older, or a feature dependency (FeatureEnabled) for flipper 1.3.6 or older. Upgrade flipper first.
Gates
All gate endpoints return a 200 HTTP status and the updated feature object on success.
Boolean
POST /adapter/features/{feature_name}/boolean - Enable for everyone
DELETE /adapter/features/{feature_name}/boolean - Disable
curl -X POST -H "Flipper-Cloud-Token: YOUR_TOKEN" \
https://www.flippercloud.io/adapter/features/new_dashboard/boolean
{
"key": "new_dashboard",
"state": "on",
"gates": [
{"key": "boolean", "name": "boolean", "value": true},
{"key": "expression", "name": "expression", "value": null},
{"key": "groups", "name": "group", "value": []},
{"key": "actors", "name": "actor", "value": []},
{"key": "percentage_of_actors", "name": "percentage_of_actors", "value": 0},
{"key": "percentage_of_time", "name": "percentage_of_time", "value": 0}
]
}
Actors
POST /adapter/features/{feature_name}/actors - Enable for an actor
DELETE /adapter/features/{feature_name}/actors - Disable for an actor
-
flipper_id- The identifier of the actor (e.g.,User;123)
curl -X POST -d "flipper_id=User;123" \
-H "Flipper-Cloud-Token: YOUR_TOKEN" \
https://www.flippercloud.io/adapter/features/new_dashboard/actors
{
"key": "new_dashboard",
"state": "conditional",
"gates": [
{"key": "boolean", "name": "boolean", "value": false},
{"key": "expression", "name": "expression", "value": null},
{"key": "groups", "name": "group", "value": []},
{"key": "actors", "name": "actor", "value": ["User;123"]},
{"key": "percentage_of_actors", "name": "percentage_of_actors", "value": 0},
{"key": "percentage_of_time", "name": "percentage_of_time", "value": 0}
]
}
Groups
POST /adapter/features/{feature_name}/groups - Enable for a group
DELETE /adapter/features/{feature_name}/groups - Disable for a group
-
name- The name of a registered group
curl -X POST -d "name=admins" \
-H "Flipper-Cloud-Token: YOUR_TOKEN" \
https://www.flippercloud.io/adapter/features/new_dashboard/groups
{
"key": "new_dashboard",
"state": "conditional",
"gates": [
{"key": "boolean", "name": "boolean", "value": false},
{"key": "expression", "name": "expression", "value": null},
{"key": "groups", "name": "group", "value": ["admins"]},
{"key": "actors", "name": "actor", "value": []},
{"key": "percentage_of_actors", "name": "percentage_of_actors", "value": 0},
{"key": "percentage_of_time", "name": "percentage_of_time", "value": 0}
]
}
Percentage of Actors
POST /adapter/features/{feature_name}/percentage_of_actors - Set percentage
DELETE /adapter/features/{feature_name}/percentage_of_actors - Clear percentage
-
percentage- Integer between 0-100
curl -X POST -d "percentage=25" \
-H "Flipper-Cloud-Token: YOUR_TOKEN" \
https://www.flippercloud.io/adapter/features/new_dashboard/percentage_of_actors
{
"key": "new_dashboard",
"state": "conditional",
"gates": [
{"key": "boolean", "name": "boolean", "value": false},
{"key": "expression", "name": "expression", "value": null},
{"key": "groups", "name": "group", "value": []},
{"key": "actors", "name": "actor", "value": []},
{"key": "percentage_of_actors", "name": "percentage_of_actors", "value": 25},
{"key": "percentage_of_time", "name": "percentage_of_time", "value": 0}
]
}
Percentage of Time
POST /adapter/features/{feature_name}/percentage_of_time - Set percentage
DELETE /adapter/features/{feature_name}/percentage_of_time - Clear percentage
-
percentage- Integer between 0-100
curl -X POST -d "percentage=50" \
-H "Flipper-Cloud-Token: YOUR_TOKEN" \
https://www.flippercloud.io/adapter/features/new_dashboard/percentage_of_time
{
"key": "new_dashboard",
"state": "conditional",
"gates": [
{"key": "boolean", "name": "boolean", "value": false},
{"key": "expression", "name": "expression", "value": null},
{"key": "groups", "name": "group", "value": []},
{"key": "actors", "name": "actor", "value": []},
{"key": "percentage_of_actors", "name": "percentage_of_actors", "value": 0},
{"key": "percentage_of_time", "name": "percentage_of_time", "value": 50}
]
}
Expression
POST /adapter/features/{feature_name}/expression - Set an expression
DELETE /adapter/features/{feature_name}/expression - Clear the expression
Send the expression as a JSON request body. Every Any and All group must
contain at least one condition. To remove every condition, use DELETE instead
of posting an empty group. Empty groups return HTTP 422 with the
expression_invalid error.
Flipper 1.4.2 and older can't evaluate a Version (SemVer) expression, and flipper 1.3.6 and older can't evaluate a feature dependency (FeatureEnabled). Requests from those clients read that feature's expression as null. Setting or clearing that expression from one of them returns 409 Conflict and leaves it unchanged. Upgrade flipper to change it.
curl -X POST \
-H "Content-Type: application/json" \
-H "Flipper-Cloud-Token: YOUR_TOKEN" \
-d '{"All":[{"Equal":[{"Property":["plan"]},{"String":["pro"]}]}]}' \
https://www.flippercloud.io/adapter/features/new_dashboard/expression
Actors
Check Features for an Actor
GET /adapter/actors/{flipper_id}
-
keys- Comma-separated list of features to check (optional, returns all features if omitted)
curl -H "Flipper-Cloud-Token: YOUR_TOKEN" \
"https://www.flippercloud.io/adapter/actors/User;123?keys=new_dashboard,search"
{
"flipper_id": "User;123",
"features": {
"new_dashboard": {
"enabled": true
},
"search": {
"enabled": false
}
}
}
Environments
Create and delete custom environments for the project your token belongs to. These endpoints are intended for temporary preview environments, such as pull request or branch previews.
Only custom environments are affected. Production and personal environments are never created or deleted by these endpoints. Creating an environment counts against your plan's custom environment limit.
Use two tokens for preview environments:
- Create a dedicated stable custom environment such as
previews. In it, create a read-only token named something likePreview Environmentswith Manage preview environments enabled. Use it to create and delete preview environments. Avoid using a production application token for preview automation. - Use the token returned by the create endpoint inside the preview app itself.
The returned preview app token cannot create more environments. Keep it available until teardown because it can delete its own environment if the preview automation token has been rotated or disabled.
Create an Environment
POST /adapter/environments
-
name- The name of the environment to create (required). Names that generate reserved slugs likenew,edit, oradminare rejected.
curl -X POST -d "name=pr-1234" \
-H "Flipper-Cloud-Token: PREVIEW_ENVIRONMENT_MANAGER_TOKEN" \
https://www.flippercloud.io/adapter/environments
{
"environment": {
"id": 42,
"slug": "pr-1234",
"name": "pr-1234",
"state": "other",
"created_at": "2026-01-15T12:00:00Z"
},
"token": {
"name": "API",
"access": "read_and_write",
"value": "Mb72kngHcVSLGefYptt2JvX5"
}
}
The response includes a read-write token scoped to the new environment. Use its value as the Flipper-Cloud-Token for that preview app.
You can safely call create more than once with the same token and name. If the environment already exists and was created by that token, Flipper Cloud returns it instead of creating a duplicate. Existing matching environments return 200; newly created environments return 201. If another token or the web dashboard created the environment with that name, the request returns 409 with an environment_name_taken code. If your plan's custom environment limit has been reached, the request returns 402 with a custom_environments_limit code.
Create errors
| Status | Code | Meaning |
|---|---|---|
402 |
custom_environments_limit |
The project has reached its plan's custom environment limit. |
403 |
preview_environment_management_token_required |
The token cannot manage preview environments. Preview app tokens never have this capability. |
403 |
organization_membership |
The token owner no longer has the organization access required for this project. |
403 |
project_membership |
The token owner no longer has access to this project. |
409 |
environment_name_taken |
The name belongs to an environment not created by this token. |
422 |
name_missing |
The request did not include a usable name. |
422 |
name_invalid |
The name cannot produce a valid, non-reserved slug. |
422 |
token_limit |
Flipper Cloud could not create a returned token because the environment reached its active token limit. |
Delete an Environment
DELETE /adapter/environments/{id}
-
id- The environment ID returned by create.
curl -X DELETE \
-H "Flipper-Cloud-Token: PREVIEW_ENVIRONMENT_MANAGER_TOKEN" \
"https://www.flippercloud.io/adapter/environments/42"
Deletes the custom environment, including its tokens, gates, and audits. Authenticate with the preview-environment management token that created it. The returned preview app token can also delete its own environment. Other tokens receive 403 with a not_environment_creator code.
Deleting an environment that is already gone, or is not a custom environment, returns 204. Successful deletion also returns 204 No Content. Repeated calls with the creating preview-environment management token are safe, and the ID remains the same if the environment is renamed in the dashboard.
Delete errors
| Status | Code | Meaning |
|---|---|---|
403 |
not_environment_creator |
The token is neither the environment's creator token nor its returned preview token. |
403 |
organization_membership |
The token owner no longer has the organization access required for this project. |
403 |
project_membership |
The token owner no longer has access to this project. |
422 |
environment_id_required |
The path did not include a valid positive environment ID. |
Audits
List Audits
GET /adapter/audits
Audit history is available on paid plans. Free-plan responses preserve the same
response shape, but return an empty audits array and a limits object with
"limited": true and "max_events": 0.
-
page- Page number (default: 1) -
per_page- Records per page (default: 100, max: 250) -
keys- Comma-separated feature keys to filter by
page, per_page, and keys must be scalar, valid UTF-8 query parameters. Invalid numeric values, container-shaped values, conflicting Rack shapes, and malformed encodings return a JSON 400 or 422 response.
curl -H "Flipper-Cloud-Token: YOUR_TOKEN" \
"https://www.flippercloud.io/adapter/audits?per_page=10"
{
"audits": [
{
"action": "enable",
"actor": {
"type": "User",
"id": "123"
},
"target": {
"type": "Feature",
"key": "new_dashboard"
},
"value": null,
"created_at": "2026-01-15T12:00:00Z"
}
],
"pagination": {
"page": 1,
"per": 10,
"previous": null,
"next": 2
},
"limits": {
"limited": false
}
}
Audit actions include: enable, disable, enable_actor, disable_actor, enable_group, disable_group, percentage_of_actors, percentage_of_time, clear, create, remove, mirror, rollback, enable_expression, disable_expression.
Telemetry
Submit Telemetry
POST /adapter/telemetry
Submit feature flag evaluation metrics. This is typically handled automatically by the Flipper client gem.
The endpoint accepts the content types supported by existing clients and gzip-compressed request bodies. Gzip requests are limited to 256 KiB compressed and 1 MiB after expansion. Malformed JSON, non-object JSON, invalid encodings, decompression errors, and size-limit violations return JSON 400 or 422 responses before telemetry is queued.
curl -X POST \
-H "Flipper-Cloud-Token: YOUR_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"request_id": "550e8400-e29b-41d4-a716-446655440000",
"enabled_metrics": [
{"key": "new_dashboard", "time": 1706108400, "result": true, "value": 150},
{"key": "new_dashboard", "time": 1706108400, "result": false, "value": 50}
]
}' \
https://www.flippercloud.io/adapter/telemetry
Returns 202 Accepted with an empty JSON body.
Get Telemetry Summary
GET /adapter/telemetry/summary
-
days- Number of days of history (clamped to your plan's retention limit) -
keys- Comma-separated feature keys to filter by
days and keys must be scalar, valid UTF-8 query parameters. Invalid numeric values, container-shaped values, conflicting Rack shapes, and malformed encodings return a JSON 400 or 422 response.
curl -H "Flipper-Cloud-Token: YOUR_TOKEN" \
"https://www.flippercloud.io/adapter/telemetry/summary?days=7"
{
"days": 7,
"resolution": "day",
"features": [
{
"key": "new_dashboard",
"description": "New dashboard experience for pro users",
"longevity": "temporary",
"tags": ["growth", "billing"],
"creator": {
"id": 42,
"name": "Ada Lovelace",
"email": "[email protected]"
},
"owner": {
"id": 57,
"name": "Grace Hopper",
"email": "[email protected]"
},
"created_at": "2025-09-15T10:30:00Z",
"state": "conditional",
"gates_summary": {
"boolean": false,
"actors": 3,
"groups": 2,
"percentage_of_actors": 25,
"percentage_of_time": 0,
"expression": true
},
"summary": {
"total": 10000,
"enabled": 6000,
"disabled": 4000,
"enabled_rate": 0.6
},
"time_series": [
{
"timestamp": "2026-01-15T00:00:00Z",
"total": 1500,
"enabled": 900,
"disabled": 600
}
]
}
]
}
Each feature includes configuration context alongside telemetry data:
-
description— Feature description, ornullif not set -
longevity—"temporary","permanent", ornullif not set -
tags— Array of tag strings (empty array if none) -
creator— User who created the feature, ornullif unknown. Object withid,name, andemail. -
owner— User assigned as the feature's owner, ornullif unassigned. Object withid,name, andemail. -
created_at— When the feature was created (ISO 8601) -
state— Current state:"on","conditional", or"off" -
gates_summary— Summary of gate configuration (always present):-
boolean— Whether the boolean gate is enabled -
actors— Number of individually enabled actors -
groups— Number of enabled groups -
percentage_of_actors— Percentage of actors enabled (0-100) -
percentage_of_time— Percentage of time enabled (0-100) -
expression— Whether an expression gate is active
-
Organization API
The organization API manages your organization rather than a single environment. It lives at https://www.flippercloud.io/api/v1 and authenticates with an organization API token in the same Flipper-Cloud-Token header.
Organization API tokens are available on plans with trusted domains. Organization admins create them in Organization Settings → API Tokens. A token stops working if the admin who created it is removed from the organization or is no longer an admin.
Treat an organization API token like a password. Keep it on a server or in your secrets manager, never in a repository or on developer machines. If one leaks, delete it: deleting a token also disables every token it handed out, and people get new ones when your tooling calls with a new organization token.
Provision a Member
POST /api/v1/organization/members
-
email- The person's email address (required). It must be on one of your organization's verified trusted domains.
Adds the person to your organization and returns their personal environment in every project, each with a read/write token. Use it from developer setup tooling so nobody has to copy tokens by hand.
curl -X POST -d "[email protected]" \
-H "Flipper-Cloud-Token: ORGANIZATION_API_TOKEN" \
https://www.flippercloud.io/api/v1/organization/members
{
"member": {
"email": "[email protected]",
"role": "member",
"added": true
},
"environments": [
{
"project": {
"id": 7,
"slug": "storefront",
"name": "Storefront"
},
"environment": {
"id": 42,
"slug": "dev-example-com",
"name": "[email protected]",
"state": "personal",
"created_at": "2026-11-06T12:00:00Z"
},
"token": {
"name": "Provisioned via API",
"access": "read_and_write",
"value": "Mb72kngHcVSLGefYptt2JvX5"
}
}
]
}
The person doesn't need to have signed in before. If they haven't, Flipper Cloud creates their account, and it becomes theirs the first time they sign in with Google or GitHub using that email. New members join with the role set on the trusted domain and use a seat.
Each environment's token is one the API created for this purpose. It's named Provisioned via API and owned by the person. It never returns a token the person created themselves, even one with the same name. They can see it with their other tokens and disable it without breaking anything else. If they disable it or make it read-only, the next call creates a new one. Each organization API token gets its own tokens, so switching tooling to a new organization token hands out fresh ones.
You can safely call this more than once for the same email. Existing members return 200 with the same tokens, and added is false. Newly added members return 201. Each call also adds existing members to any projects they're missing, so it picks up projects created since the last call.
Calls for one organization run one at a time. If another call is still running, you get 409 with an organization_busy code and a Retry-After header. Wait that many seconds and try again. Retrying is always safe. To provision many people at once, such as a backfill, make the calls one after another instead of in parallel.
Organization errors
| Status | Code | Meaning |
|---|---|---|
400 |
body_invalid |
The request body isn't valid JSON or form data. |
401 |
organization_token_invalid |
The Flipper-Cloud-Token header is missing or isn't an organization API token. |
402 |
no_available_seats |
The organization has no seats left for a new member. Existing members still succeed. |
403 |
google_sso_domains |
The organization's plan doesn't include trusted domains. |
403 |
organization_admin |
The admin who created the token is no longer an organization admin. |
409 |
organization_busy |
Another call for the organization is still running. Retry after the Retry-After header's seconds. |
422 |
email_missing |
The request didn't include an email. |
422 |
email_invalid |
The email isn't a valid address. |
422 |
email_domain_not_trusted |
The email isn't on one of the organization's verified trusted domains. |
422 |
token_limit |
A personal environment needs a new read/write token but already has the maximum number of active tokens. Disable one of its tokens and try again. |
Error Responses
Errors return JSON with a code and message:
{
"code": 1,
"message": "Feature not found",
"more_info": "https://www.flippercloud.io/docs"
}
Common HTTP status codes:
-
401- Invalid or missing token -
402- Feature requires a plan upgrade -
403- Token does not have write access, or the request deletes features with a non-production token -
404- Feature not found -
422- Invalid parameters, or a feature name starting with the reserved__flipperprefix
Error Code Reference
-
7- The expression is invalid. EmptyAnyandAllgroups are not
accepted; useDELETE /adapter/features/{feature_name}/expressionto clear
an expression.
Get audit history, rollbacks, advanced permissions, analytics, and all of your projects in one place.
You can choose from several tiers to sponsor Flipper on GitHub and get some great benefits!