---
description: Grant only the required scopes when you connect, and authorize more on demand as your agent performs a task.
title: Cloudflare API MCP server now supports step-up authorization
image: https://developers.cloudflare.com/changelog/post/2026-10-19-cloudflare-mcp-step-up/og.png?v=fcb7cf6e8b644103
---

[Skip to content](#main-content)

[View RSS feeds](https://developers.cloudflare.com/fundamentals/new-features/available-rss-feeds/) [ Subscribe to RSS](https://developers.cloudflare.com/changelog/rss/index.xml)

[Back to all posts](https://developers.cloudflare.com/changelog)

October 19, 2026

## Cloudflare API MCP server now supports step-up authorization

[Agents](https://developers.cloudflare.com/agents/)

Copy as Markdown| [View as Markdown](https://developers.cloudflare.com/changelog/post/2026-10-19-cloudflare-mcp-step-up/index.md)| [Agent setup](https://developers.cloudflare.com/agent-setup/)

The [Cloudflare API MCP server](https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/#cloudflare-api-mcp-server) now supports [step-up authorization ↗︎](https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization#step-up-authorization-flow).

Grant only the required scopes when you connect, then authorize more on demand as your agent performs a task. When a tool call needs a scope you have not granted, the server returns an [`insufficient_scope` challenge ↗︎](https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization#scope-challenge-handling) naming it, and your MCP client asks you to approve it. Scopes you already granted are kept.

To start with the least access, choose **Minimal** on the consent page when you connect `https://mcp.cloudflare.com/mcp`. Refer to [authorization in MCP](https://developers.cloudflare.com/agents/model-context-protocol/protocol/authorization/).

Available now in all MCP clients that support step-up authorization.

```json
{"@context":"https://schema.org","@type":"BlogPosting","@id":"https://developers.cloudflare.com/changelog/post/2026-10-19-cloudflare-mcp-step-up/#page","headline":"Cloudflare API MCP server now supports step-up authorization","description":"Grant only the required scopes when you connect, and authorize more on demand as your agent performs a task.","url":"https://developers.cloudflare.com/changelog/post/2026-10-19-cloudflare-mcp-step-up/","inLanguage":"en","image":"https://developers.cloudflare.com/changelog/post/2026-10-19-cloudflare-mcp-step-up/og.png?v=fcb7cf6e8b644103","dateModified":"2026-10-19","datePublished":"2026-10-19","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}}
```