Skip to content

[Agents] Changelog: Cloudflare API MCP server now supports step-up authorization #34445

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mattzcarey merged 3 commits into from
Oct 19, 2026
+15 −0
Merged

[Agents] Changelog: Cloudflare API MCP server now supports step-up authorization #34445

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
1cbebf6
[Agents] Changelog: Cloudflare API MCP server asks for a missing OAut…
mattzcarey Oct 19, 2026
64602e7
[Agents] Changelog: reword as step-up authorization
mattzcarey Oct 19, 2026
400c59c
Fixed "Learn more" → "Refer to" link wording.
ask-bonk[bot] Oct 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions src/content/changelog/agents/2026-10-19-cloudflare-mcp-step-up.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
---
title: Cloudflare API MCP server now supports step-up authorization
description: Grant only the required scopes when you connect, and authorize more on demand as your agent performs a task.
products:
- agents
date: 2026-10-19
---

The [Cloudflare API MCP server](/agents/model-context-protocol/cloudflare/servers-for-cloudflare/#cloudflare-api-mcp-server) now supports [step-up authorization](https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization#step-up-authorization-flow).

Grant only the required scopes when you connect, then authorize more on demand as your agent performs a task. When a tool call needs a scope you have not granted, the server returns an [`insufficient_scope` challenge](https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization#scope-challenge-handling) naming it, and your MCP client asks you to approve it. Scopes you already granted are kept.

To start with the least access, choose **Minimal** on the consent page when you connect `https://mcp.cloudflare.com/mcp`. Refer to [authorization in MCP](/agents/model-context-protocol/protocol/authorization/).

Available now in all MCP clients that support step-up authorization.
Loading