$ cat /var/log/thoughts
Cloudflare + MCP + Security
Posts matching all selected tags.
Category
All Categories
Tags
Newsletter
New posts land in your inbox when they publish. No spam, unsubscribe anytime.
You're in. New posts head your way.
Filters3
3 posts
MCP went stateless and the session just moved
Stateless MCP deleted the protocol session. Continuity now rides in requestState on retry. Delete sticky routing, keep the store for carts and tokens.
Deep DivesMCPCloudflareArchitectureDeveloper ToolsAI CodingSecurity1 min read · Aug 23, 2026
Agents request every OAuth scope they might need
MCP oauth scopes arrive as a catalog because the next call is unknown. Check the issued token, hide tools you did not get, and keep the agent running.
Strong OpinionsMCPCloudflareSecurityDeveloper ToolsOAuthAI Coding1 min read · Aug 22, 2026
MCP is now traffic a firewall can name
MCP traffic detection now matches protocol headers, not mcp in the hostname. Treat the next remote MCP install as a named network event, not a config tweak.
Deep DivesMCPCloudflareSecurityDeveloper ToolsArchitectureNetworkingAI Coding1 min read · Aug 22, 2026