THREAT OPS › Threat News › Managed OAuth for Access: make internal apps agent-ready in one click
Managed OAuth for Access: make internal apps agent-ready in one click
<p>We have thousands of internal apps at Cloudflare. Some are things we’ve built ourselves, others are self-hosted instances of software built by others. They range from business-critical apps nearly every person uses, to side projects and prototypes.</p><p>All of these apps are protected by <a href="https://developers.cloudflare.com/cloudflare-one/access-controls/policies/"><span style="text-deco
MITRE ATT&CK techniques
Indicators of compromise
- https://opencode.ai/docs/tools/#webfetchurl
- https://<your-app-domain>/.well-known/oauth-authorization-serverurl
- https://modelcontextprotocol.io/specification/url
- https://modelcontextprotocol.io/specification/2025-11-25/basic/authorizationurl
- https://platform.claude.com/docs/en/agents-and-tools/tool-use/web-fetch-toolurl
- https://developer.mozilla.org/en-US/docs/Web/API/Fetch_APIurl
Original source: https://blog.cloudflare.com/managed-oauth-for-access/