--- title: "Cloudflare API MCP server adds step-up | Agent MCP Directory" description: "Cloudflare API MCP server adds step-up authorization. The Cloudflare API MCP server now asks for additional scopes when an operation needs them." canonical: https://agentmcpdirectory.com/news/2026-10-19-cloudflare-api-mcp-server-adds-step-up-authorization site: "Agent MCP Directory" last_updated: 2026-11-04 date: 2026-10-19 section: "News" --- # Cloudflare API MCP server adds step-up | Agent MCP Directory > Cloudflare API MCP server adds step-up authorization. The Cloudflare API MCP server now asks for additional scopes when an operation needs them. Source: https://agentmcpdirectory.com/news/2026-10-19-cloudflare-api-mcp-server-adds-step-up-authorization Site: Agent MCP Directory Last reviewed: 2026-11-04 # Cloudflare API MCP server adds step-up authorization The Cloudflare API MCP server now asks for additional scopes when an operation needs them, the step-up flow described in the MCP authorization spec. Reported 19 October 2026 by developers.cloudflare.com, read 4 November 2026; products involved: Cloudflare. The full text of Cloudflare API MCP server adds step-up authorization is at the source linked below. ## What it changes in the data held here 517 endpoints in the directory offer dynamic client registration, 16 publish OAuth metadata without a registration endpoint, and 191 state client ID metadata document support. 533 endpoints stop at a sign-in challenge, so this directory sees their auth route but not their tools. Cloudflare on this directory's rubric, as read on 4 November 2026: remote transport: Streamable HTTP only; oauth with client registration: yes, DCR and CIMD; per-tool auth scoping: yes, at the portal. The connector log shows which protocol revisions the directory's reachable servers answered with: 189 on 2025-11-25, 40 on 2025-06-18, 16 on 2026-07-28, 11 on 2025-03-26, 9 on 2024-11-05. Servers on 2025-11-25 still use the initialize handshake that 2026-07-28 removes. Source: [developers.cloudflare.com](https://developers.cloudflare.com/changelog/post/2026-10-19-cloudflare-mcp-step-up/), a primary source, dated 19 October 2026 and read 4 November 2026. The opening paragraph above is the item; the figures in this section come from this directory's own run of 4 November 2026. ## Where it shows up here - [Cloudflare](https://agentmcpdirectory.com/hosts/cloudflare/): rubric and evidence - [OAuth for MCP: client ID metadata documents and dynamic registration](https://agentmcpdirectory.com/guides/oauth-for-mcp-cimd-dcr/) - [MCP, the standard](https://agentmcpdirectory.com/standards/mcp/) - [Cloudflare in the directory](https://agentmcpdirectory.com/directory/cloudflare-com/): has an open MCP server with tools listed Edition 4 November 2026 Method [How rows are verified](https://agentmcpdirectory.com/method/) Data [CSV and JSON](https://agentmcpdirectory.com/data/) Markdown [This page as markdown](https://agentmcpdirectory.com/news/2026-10-19-cloudflare-api-mcp-server-adds-step-up-authorization/index.md) ## Sources - [Cloudflare API MCP server adds step-up authorization](https://developers.cloudflare.com/changelog/post/2026-10-19-cloudflare-mcp-step-up/), read 4 November 2026 (primary source) Last reviewed 4 November 2026