Cloudflare opens self-managed OAuth clients to all customers

Category: Dev tools
Status: confirmed
Sources: Cloudflare blog, discussion
Summary: Cloudflare published a 2026-06-24 post making self-managed OAuth clients available to all customers, letting developers create and manage their own OAuth applications for delegated access to the Cloudflare API instead of relying on long-lived API tokens. The flow supports user consent, scoped permissions, and token revocation, and targets SaaS integrations, internal developer platforms, and agentic tools. The capability was previously limited to a small set of manually onboarded integrations.
Why it matters: Delegated, scoped OAuth with revocation is a safer credential model than shared API tokens for third-party and agent-driven access to infrastructure control planes.
Follow-up: None.