$ cat /var/log/thoughts

OAuth + Security

Posts matching all selected tags.

Filters2

Category

All Categories
All CategoriesStrong Opinions

Tags

OAuth1Security1AI Coding1Cloudflare1Developer Tools1MCP1
Clear filters

1 post

Agents request every OAuth scope they might need

MCP oauth scopes arrive as a catalog because the next call is unknown. Check the issued token, hide tools you did not get, and keep the agent running.

Strong OpinionsMCPCloudflareSecurityDeveloper ToolsOAuthAI Coding1 min read · Aug 22, 2026