Flagship - Create app-scoped API tokens for Flagship
- Announced
- Tags
- Flagship
- Severity
- info, set by
reef/rss-rule-v1 - Source
- https://developers.cloudflare.com/changelog/post/2026-08-26-app-scoped-tokens/
<p>You can now create <strong>app-scoped API tokens</strong> for <a href="https://developers.cloudflare.com/flagship/">Flagship</a>. These tokens grant access only to the Flagship apps you select, instead of every app in the account.</p> <p>When you create a custom token, open the resource dropdown (it defaults to <strong>Entire Account</strong>) and select <strong>Specified Flagship apps</strong>. Then choose the app and a <strong>Flagship App</strong> permission: Evaluate, Read, or Write. Account-wide Flagship Evaluate, Read, and Write permissions still exist when you need access to every app.</p> <p>Use app-scoped tokens in trusted server-side environments, such as Wrangler, CI, or a backend service that should only touch one app.</p> <p>To create a token, refer to <a href="https://developers.cloudflare.com/flagship/api-tokens/">API tokens</a> or <a href="https://dash.cloudflare.com/?to=/:account/api-tokens&permissionGroupKeys=%5B%7B%22key%22:%22flagship_app%22,%22type%22:%22evaluate%22%7D%5D&scope=specified_flagship_app" target="_blank" rel="noopener">open the app-scoped token form<span class="external-link"> ↗︎</span></a> in the dashboard.</p>
The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.