Cloudflare Fundamentals

OAuth allows third-party applications to access your Cloudflare account on your behalf — like when Wrangler deploys Workers or when monitoring tools read your analytics. You now have granular control over which accounts these applications can access, plus the ability…

We're announcing the public beta of Organizations for enterprise customers, a new top-level Cloudflare container that lets Cloudflare customers manage multiple accounts, members, analytics, and shared policies from one centralized location. What's New Organizations [BETA]: Organizations are a new top-level…

Service Key authentication for the Cloudflare API is deprecated. Service Keys will stop working on September 30, 2026. API Tokens replace Service Keys with fine-grained permissions, expiration, and revocation. What you need to do Replace any use of the X-Auth-User-Service-Key…

Cloudflare dashboard SCIM provisioning operations are now captured in Audit Logs v2, giving you visibility into user and group changes made by your identity provider. Logged actions: Action TypeDescriptionCreate SCIM UserUser provisioned from IdPReplace SCIM UserUser fully replaced (PUT)Update SCIM…

Fine-grained permissions for Access policies and Access service tokens are available. These new resource-scoped roles expand the existing RBAC model, enabling administrators to grant permissions scoped to individual resources. New roles Cloudflare Access policy admin: Can edit a specific Access…

Cloudflare-generated 1xxx error responses now include a standard Retry-After HTTP header when the error is retryable. Agents and HTTP clients can read the recommended wait time from response headers alone — no body parsing required. Changes Seven retryable error codes…