--- title: "Workers OAuth Provider reaches v1 | Agent MCP Directory" description: "Workers OAuth Provider reaches v1. Cloudflare's OAuth library for MCP split into an authorization server Worker and resource server Workers that check." canonical: https://agentmcpdirectory.com/news/2026-10-01-workers-oauth-provider-reaches-v1 site: "Agent MCP Directory" last_updated: 2026-11-04 date: 2026-10-01 section: "News" --- # Workers OAuth Provider reaches v1 | Agent MCP Directory > Workers OAuth Provider reaches v1. Cloudflare's OAuth library for MCP split into an authorization server Worker and resource server Workers that check. Source: https://agentmcpdirectory.com/news/2026-10-01-workers-oauth-provider-reaches-v1 Site: Agent MCP Directory Last reviewed: 2026-11-04 # Workers OAuth Provider reaches v1 Cloudflare's OAuth library for MCP split into an authorization server Worker and resource server Workers that check tokens over a Service Binding. v1 supports DCR and Client ID Metadata Documents per the 2026-07-28 authorization spec. Reported 1 October 2026 by developers.cloudflare.com, read 4 November 2026; products involved: Cloudflare. ## What it changes in the data held here 517 endpoints in the directory offer dynamic client registration, 16 publish OAuth metadata without a registration endpoint, and 191 state client ID metadata document support. 533 endpoints stop at a sign-in challenge, so this directory sees their auth route but not their tools. Cloudflare on this directory's rubric, as read on 4 November 2026: remote transport: Streamable HTTP only; oauth with client registration: yes, DCR and CIMD; per-tool auth scoping: yes, at the portal. The connector log shows which protocol revisions the directory's reachable servers answered with: 189 on 2025-11-25, 40 on 2025-06-18, 16 on 2026-07-28, 11 on 2025-03-26, 9 on 2024-11-05. Servers on 2025-11-25 still use the initialize handshake that 2026-07-28 removes. Source: [developers.cloudflare.com](https://developers.cloudflare.com/changelog/post/2026-10-01-workers-oauth-provider-1x/), a primary source, dated 1 October 2026 and read 4 November 2026. The opening paragraph above is the item; the figures in this section come from this directory's own run of 4 November 2026. ## Where it shows up here - [Cloudflare](https://agentmcpdirectory.com/hosts/cloudflare/): rubric and evidence - [OAuth for MCP: client ID metadata documents and dynamic registration](https://agentmcpdirectory.com/guides/oauth-for-mcp-cimd-dcr/) - [MCP, the standard](https://agentmcpdirectory.com/standards/mcp/) - [Cloudflare in the directory](https://agentmcpdirectory.com/directory/cloudflare-com/): has an open MCP server with tools listed Edition 4 November 2026 Method [How rows are verified](https://agentmcpdirectory.com/method/) Data [CSV and JSON](https://agentmcpdirectory.com/data/) Markdown [This page as markdown](https://agentmcpdirectory.com/news/2026-10-01-workers-oauth-provider-reaches-v1/index.md) ## Sources - [Workers OAuth Provider reaches v1](https://developers.cloudflare.com/changelog/post/2026-10-01-workers-oauth-provider-1x/), read 4 November 2026 (primary source) Last reviewed 4 November 2026