TLDR Tech / AI
Securing non-human identities: automated revocation, OAuth, and scoped permissions
Agents can build software fast, but developers still need to put the effort into secure environments and code. Cloudflare has introduced scannable tokens to protect credentials, OAuth visibility to manage principals, and resource-scoped RBAC to fine-tune policies. This ensures that users' credentials (tokens) aren't leaked and that the right applications have access via OAuth, and narrows permissions using granular RBAC. Cloudflare customers should review their API tokens, review authorized OAuth apps, and review member and API token permissions.
Read the full story