WriteGuard: Fine-Grained Controls for MCP Servers
Cloudflare, Wednesday, August 5th, 2026
Cloudflare brings WriteGuard's fine-grained write controls for MCP servers to customer-facing portals.
Cloudflare built WriteGuard because it could not depend on every employee configuring every agent perfectly or reviewing every tool call.
The controls were developed internally before the company expanded write access across its own MCP servers.
Cloudflare is now bringing those fine-grained controls to Cloudflare MCP server portals through a preview. The capability addresses the risk that an agent with write access takes an irreversible action nobody sanctioned.