If you're building an MCP server, you know the problem: agents need broad permissions in theory, but users don't want to grant all of them. Cloudflare OAuth now supports optional scopes. Users pick what they're comfortable with at consent time — your app gets exactly what was approved. https://cfl.re/3SGkYZb