Releasesby GlyphAgents, Workers - Choose OAuth scopes for Wrangler and the Cloudflare API MCP server
Wrangler and the Cloudflare API MCP server now use optional OAuth scopes. During authorization, you can choose which optional scopes to grant instead of approving every scope requested by each client.
Also shipped Aug 22, 2026Cloudflare in August 2026 →
MCP server
- Local MCP server deprecated: The local ElevenLabs MCP server and MCP player are deprecated in favor of the hosted MCP server. Both repositories are archived and will no longer receive updates.
Redpanda 26.2.2
Features rpk sql debug bundle collects a diagnostic bundle from an Oxla (SQL) cluster. rpk generate grafana-dashboard gains a new operations-stretch dashboard: a Grafana dashboard for stretch clusters managed by the Redpanda Operator, covering cross-cluster raft health, StretchCluster member status, and operator reconcile health.
arize-phoenix-client: v3.3.0
3.3.0 (2026-08-22) Features pxi: enable phoenix-gql mutations by default with approval in manual mode (391d0dd)
More from Cloudflare developer platformEvery Cloudflare developer platform release →
CASB - Automatically remediate Microsoft 365 and Google Workspace findings with API-based CASB remediation policies
Cloudflare CASB is an API-based (agentless) tool that continuously scans your SaaS and cloud applications for security misconfigurations and data exposure. You can now use CASB remediation policies to automatically fix a finding or send a webhook the moment CASB detects it, without manual triage.
Data Loss Prevention - Test Data Loss Prevention profiles without sending traffic through Gateway
Test scan lets you check how Data Loss Prevention (DLP) evaluates sample content before you apply a profile to production traffic. Paste text, upload a file, or upload a HAR file, then select the profiles you want to test. Test scan sends content directly to the DLP scanner.
Cloudflare Fundamentals - Enriched 403 responses for the Cloudflare API
Cloudflare API 403 Forbidden responses now include a documentation_url field that links directly to the API documentation for the endpoint that was denied. This gives developers, administrators, and agents an immediate path to the relevant docs with role information instead of guessing at which role or permission they are missing for that endpoint.
Cloudflare Fundamentals - Saved login profiles for returning users
Cloudflare Dashboard users can now save login profiles on a device for faster sign-in on future visits. What's New Save login profiles on a device : After a successful sign-in, users can choose to save a login profile on that device. Saved profiles store the email address, login method, and last-used profile locally in the browser.
Cloudflare Fundamentals - Improved SCIM 2.0 group synchronization
Dashboard SCIM now supports replacing groups using HTTP PUT , as defined by RFC 7644 section 3.5.1 ↗ . This allows identity providers to synchronize a group's full state, including its display name, external ID, and members, in a single request.
Cloudflare Web Analytics - Web Analytics improves soft navigation measurement for Single Page Applications (SPAs)
Cloudflare Web Analytics (Real User Monitoring) is rolling out accuracy improvements to client-side soft navigations. Update: this update is complete as of 2026-09-04. This change may alter the volume of reported pageviews and visits in the dashboard and GraphQL API. The reported Largest Contentful Paint (LCP) metric may also fluctuate.
Cloudflare One Appliance, Cloudflare One, Cloudflare WAN - Download the Cloudflare One Virtual Appliance for your hypervisor from the dashboard
When you register a Cloudflare One Virtual Appliance , you can now select your hypervisor and download the appliance directly from the dashboard , no need to look up asset URLs. On the Connectors page, select Add an appliance , choose Virtual appliance , then select your hypervisor: VMware ESXi , Proxmox , or libvirt/KVM .
Radar - RPKI ASPA path validation on Cloudflare Radar
Radar adds an ASPA validation tool ↗ to its Routing section ↗ . Enter a BGP AS_PATH and the tool checks it against the Autonomous System Provider Authorization (ASPA) ↗ records currently published in the RPKI, returning a verdict of Valid , Invalid , or Unknown .