$ cat /var/log/thoughts

MCP + OAuth + Security

Posts matching all selected tags.

Filters3

Category

All Categories
All CategoriesStrong Opinions

Tags

MCP1OAuth1Security1AI Coding1Cloudflare1Developer Tools1
Clear filters

1 post

Agents request every OAuth scope they might need

MCP oauth scopes arrive as a catalog because the next call is unknown. Check the issued token, hide tools you did not get, and keep the agent running.

Strong OpinionsMCPCloudflareSecurityDeveloper ToolsOAuthAI Coding1 min read · Aug 22, 2026