What’s new (vendor claim): Cloudflare has made Optional OAuth Scopes generally available as of August 20, 2026. Developers can now classify each configured scope as either required or optional in the Cloudflare dashboard.
When a scope is marked optional, applications can request it without forcing the user to approve it. On the consent screen, users must approve required scopes but may decline optional ones, supporting a least‑privilege security model for web apps, CLIs, and automated workloads.
Key UI improvements include:
- Scope selection: Optional scopes are pre‑selected but can be deselected by the user.
- Templates: Read‑Only and Full‑Access templates speed up permission configuration.
- Search: Users can search for specific scopes on the consent screen.
These changes aim to reduce over‑privileged token grants and give organizations finer control over API access.