InfoQ - Access Control - News

Cloudflare Adds Optional OAuth Scopes, Letting Developers Mark What Users May Decline

Steef-Jan Wiggers — Wed, 02 Sep 2026 09:07:00 GMT

Cloudflare has added optional OAuth scopes, letting client owners mark which permissions users may deselect at consent. The company names MCP servers as the motivating case, since agents request the union of everything they might do. Partial consent exists elsewhere, but developer control over which scopes are droppable does not.

By Steef-Jan Wiggers

Cloudflare Wallets Arrives Late to x402, and the Spending Controls Stop at the Payment

Steef-Jan Wiggers — Thu, 27 Aug 2026 09:04:00 GMT

Cloudflare announced Wallets, giving agents a stablecoin balance and spending controls, though only handle claiming is live and squatting complaints have already surfaced. Payments run on x402, now hosted by the Linux Foundation. The controls bound single payments, not sequences, leaving composition to the application above.

By Steef-Jan Wiggers