Access Control

3 articles

AI Security • Sep 15, 2026

How to Scope AI Agent Access to Cloudflare Workers, Not Admin

Cloudflare's new roles let you scope AI agent access to Cloudflare Workers per resource, not per account. Four roles, ten legacy ones replaced, 5 steps.

9 min read

AI Security • Aug 5, 2026

Insider Threat Offboarding Controls: The Apple v. OpenAI Lesson

Insider threat offboarding controls, read through Apple v. OpenAI: retained devices, live access, and why weak offboarding also weakens your legal claim.

11 min read

AI Security • Aug 5, 2026

How to Secure MCP Write Tools: Cloudflare's WriteGuard Lesson

How to secure MCP write tools: the spec puts confirmation on the client — the one layer you don't control. Cloudflare's WriteGuard moves the gate server-side.

11 min read