Cloudflare has announced the launch of self-managed OAuth for all, making it easier for customers to create and manage their own OAuth clients for delegated access to the Cloudflare API [1]. This development is crucial for scaling the Cloudflare ecosystem securely, as it provides a standard OAuth flow where customers grant scoped access directly, making it easier to build SaaS integrations, internal developer platforms, and agentic tools [2]. The introduction of self-managed OAuth is a significant step forward, as it gives users clearer consent, easier revocation, and more control over what an application can do. Prior to this launch, Cloudflare used an open-source OAuth engine called Hydra, which was deployed years ago to power Cloudflare OAuth under the hood [3].

However, as the developer platform grew and agentic workflows became more common, it became clear that a major upgrade to Hydra was necessary to unlock new capabilities and improve performance. The upgrade process involved significant planning and execution, including a blue-green strategy to minimize user impact [4]. The results of the upgrade have been positive, with considerable performance improvements observed after the upgrade was complete [5]. With self-managed OAuth, developers can now offer a standard OAuth flow where customers grant scoped access directly, making it easier to build SaaS integrations, internal developer platforms, and agentic tools while giving users clearer consent, easier revocation, and more control over what an application can do.

To get started, developers can take a look at the Cloudflare documentation or jump straight to the OAuth apps page in the dashboard and create their first OAuth app [6]. The launch of self-managed OAuth is an important step toward a broader Cloudflare app ecosystem, and it is expected to have a significant impact on the development of applications that integrate with Cloudflare.

Sources

  1. https://developers.cloudflare.com/changelog/post/2026-06-03-public-oauth-clients/
  2. https://blog.cloudflare.com/oauth-for-all/
  3. https://github.com/ory/hydra
  4. https://blog.cloudflare.com/oauth-for-all/#executing-the-upgrade
  5. https://blog.cloudflare.com/oauth-for-all/#performance-improvements
  6. https://developers.cloudflare.com/fundamentals/oauth/