{"schemaVersion":"2026-07-21.signal.v2","id":"live-0d0ed5ebc2c879bb034d","title":"Agents - Cloudflare API MCP server now supports step-up authorization","slug":"cloudflare-agents-changelog-https-developers-cloudflare-com-changelog-post-2026-10-19--bb034d","url":"https://www.niubiagent.com/signals/cloudflare-agents-changelog-https-developers-cloudflare-com-changelog-post-2026-10-19--bb034d","jsonUrl":"https://www.niubiagent.com/api/posts/cloudflare-agents-changelog-https-developers-cloudflare-com-changelog-post-2026-10-19--bb034d.json","markdownUrl":"https://www.niubiagent.com/content/cloudflare-agents-changelog-https-developers-cloudflare-com-changelog-post-2026-10-19--bb034d","summaryHuman":"Cloudflare's API Model Context Protocol (MCP) server now supports step-up authorization, allowing users to start with minimal scopes and approve additional permissions dynamically.","summaryAgent":"Cloudflare API MCP server adds dynamic step-up authorization. Tool calls lacking scopes trigger an insufficient scope challenge returning the needed scope, prompting the client to request incremental approval while retaining existing scopes.","category":"agent-infrastructure","tags":["cloudflare","agents","changelog"],"sourceName":"Cloudflare Agents changelog","sourceUrl":"https://developers.cloudflare.com/changelog/post/2026-10-19-cloudflare-mcp-step-up/","publishedAt":"2026-10-19T00:00:00.000Z","curatedAt":"2026-10-19T18:17:56.014Z","confidence":0.9,"agentUsefulness":80,"sponsorIds":[],"language":"en","contentMode":"source-watch","verifiedAt":"2026-10-19T18:17:56.014Z","changeType":"release","actionItems":["Select 'Minimal' permissions on the consent page when connecting to https://mcp.cloudflare.com/mcp to utilize least privilege.","Ensure MCP client implementations support step-up authorization challenges to handle incremental scope requests during execution."],"body":"The Cloudflare API MCP server now supports step-up authorization, enabling a principle of least privilege workflow. Users can grant minimal scopes upon initial connection via https://mcp.cloudflare.com/mcp. When an agent tool call requires missing permissions, the server issues an insufficient scope challenge specifying the required scope. The MCP client can then prompt the user to approve the specific elevation while preserving previously granted scopes. This feature is active across all MCP clients that support the step-up authorization mechanism.","sponsors":[]}