Agents, Workers - Choose OAuth scopes for Wrangler and the Cloudflare API MCP server

<p>Wrangler and the <a href="https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/">Cloudflare API MCP server</a> now use optional OAuth scopes. During authorization, you can choose which optional scopes to grant instead of approving every scope requested by each client.</p> <p>The consent dialog now includes the option to edit the permissions you grant to Wrangler or the Cloudflare API MCP server:</p> <img src="https://developers.cloudflare.com/cdn-cgi/image/onerror=redirect,width=1368,height=1008,format=webp/_astro/oauth-optional-scopes-review.BMp1De1d.png" alt="OAuth consent dialog with an Edit Permissions button" loading="lazy" decoding="async" width="1368" height="1008"> <p>You can then choose which specific permissions to grant:</p> <img src="https://developers.cloudflare.com/cdn-cgi/image/onerror=redirect,width=1366,height=1312,format=webp/_astro/oauth-optional-scopes-edit.BXIdjwS7.png" alt="OAuth permission editor with controls for individual scopes" loading="lazy" decoding="async" width="1366" height="1312"> <p>Required scopes remain selected. Choosing fewer optional scopes limits each tool's access to the permissions needed for your workflow.</p> <p>If a command or tool call needs a scope that you declined, reauthorize the client and grant that scope.</p> <p>For more information, refer to <a href="https://developers.cloudflare.com/workers/wrangler/commands/general/#login"><code>wrangler login</code></a> and <a href="https://developers.cloudflare.com/fundamentals/oauth/authorizing-an-application/#edit-optional-permissions">Edit optional permissions</a>.</p>