Sorry for being too late. search "Cloudflare workers". basically you can utilize them to ask the server either this action is permitted or not.