Cloudflare MCP adds on-demand scope elevation
Cloudflare's API MCP server now supports step-up authorization: users can connect with minimal scopes, receive an `insufficient_scope` challenge when a tool needs more access, and approve the additional scope in compatible clients while retaining previously granted scopes.
Why it matters: Agent permissions can begin narrow and expand only when a concrete tool call needs them, reducing standing privilege compared with granting broad Cloudflare API access at connection time.