---
description: Learn more about what it means to authorize a third-party application on Cloudflare
title: Authorizing an application
image: https://developers.cloudflare.com/og-docs.png
---

[Skip to content](#main-content)

> Documentation Index  
> Fetch the complete documentation index at: https://developers.cloudflare.com/fundamentals/llms.txt  
> Use this file to discover all available pages before exploring further.

# Authorizing an application

Last updated Aug 24, 2026|Copy as Markdown|[View as Markdown](https://docs-durable-objects-instance-replaced-errors.previews.developers.cloudflare.com/fundamentals/oauth/authorizing-an-application/index.md)|[Agent setup](https://docs-durable-objects-instance-replaced-errors.previews.developers.cloudflare.com/agent-setup/)

## Overview

When you authorize a third-party OAuth application, you grant it permission to access specific Cloudflare resources on your behalf. Cloudflare provides tools to view, manage, and revoke these authorizations at any time.

## Authorize a third-party application

When a third-party application requests access to your Cloudflare account, you will see a consent screen that displays:

* **Application name and logo**: The name and branding of the requesting application
* **Publisher domain**: The domain and verification status of the application publisher
* **Account selection**: Choose which Cloudflare account(s) the application can access
* **Requested permissions**: After selecting the account(s) the application may access, the specific scopes the application is requesting will be displayed before consent is complete. You can also decline optional permissions. To finish the authorization process, review the permissions the application is requesting and select “**Authorize**”

Each shield icon indicates who owns the application and whether its domain ownership is verified:

* **Green filled shield**: Cloudflare owns and manages the application.
* **Blue outlined shield**: A third-party application with verified ownership of its domain.
* **Amber filled shield**: A third-party application without verified ownership of a domain.

Domain verification only confirms that the application owner controls the displayed domain.

### Edit optional permissions

All requested permissions are selected by default. You can turn off optional permissions, but required permissions remain selected. Select **Read only** to include only optional scopes with read access, or **Full access** to include all optional scopes. If the client has no permissions configured as optional, editing controls do not appear.

1. In **Additional access**, select **Edit Permissions**.
2. Turn permissions on or off individually or by category.
3. Select **Authorize** to grant required and selected optional permissions.

## View and revoke authorized applications

Application authorizations may be viewed and revoked at any time from the profile page on the Cloudflare dashboard.

1. Log in to the Cloudflare dashboard.
2. [Go to **Manage OAuth authorizations** ↗](https://dash.cloudflare.com/?to=/profile/access-management/authorization)
3. View the list of applications you have authorized.  
  * If you wish to revoke access to an application, select the “Revoke” button for that row

## Account administrator controls

If an account is not available for selection during the consent flow, it may be due to an administrator of that account disabling access to account resources via OAuth.

Account administrators can restrict OAuth applications from accessing account resources via **Manage Account** \> **Members > Settings > Public OAuth App access**.

Caution

This will not prevent existing authorizations account members may already have in place, and will only prevent new authorizations from accessing account resources.

Was this helpful?

YesNo

## On this page

[![](https://docs-durable-objects-instance-replaced-errors.previews.developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://docs-durable-objects-instance-replaced-errors.previews.developers.cloudflare.com/)

```json
{"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/fundamentals/oauth/authorizing-an-application/#page","headline":"Authorizing an application · Cloudflare Fundamentals docs","description":"Learn more about what it means to authorize a third-party application on Cloudflare","url":"https://developers.cloudflare.com/fundamentals/oauth/authorizing-an-application/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-08-24","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}}
```