[Access] Document managed OAuth for MCP apps

[kennyj42]

Summary

• Update Secure MCP servers to use the Access MCP server app type for the recommended managed OAuth flow.
• Add MCP server applications to the Managed OAuth page.
• Clarify that portal managed OAuth is separate from upstream MCP server OAuth.

Validation

• pnpm run check
• pnpm run format:core:check
• git diff --check
• CRLF check on changed files

[mvvmm]

/full-review

[cloudflare-docs-bot]

Review

💡 2 suggestions found in full PR diff.

Fan Out Code Review

This code review is in beta and may not always be helpful — use your judgment.

✅ No code review issues found.

Style Guide Review

Suggestions (2)

File	Issue
cloudflare-one/access-controls/ai-controls/secure-mcp-servers.mdx line 128	CURL component for Cloudflare API endpoint — <CURL> documents https://api.cloudflare.com/client/v4/accounts/{account_id}/access/apps Fix: Use <APIRequest> instead of <CURL> for Cloudflare API endpoints.
cloudflare-one/access-controls/applications/http-apps/managed-oauth.mdx line 69	Use sentence case for headings — Heading uses title case: ## Enable managed OAuth on an MCP server application Fix: Use sentence case: ## Enable managed OAuth on an MCP server application → consider ## Enable managed OAuth on an MCP server application with only Enable, OAuth, and MCP capitalized.

Commands

Only codeowners can run commands. Post a comment with the command to trigger it.

Command	Description
/review	Runs a review now. Incremental if a prior review exists, full if not.
/full-review	Re-reviews the entire PR diff from scratch, ignoring incremental history. Useful after a rebase, when you want a fresh review, or if the bot gets out of sync and reports issues that no longer exist.
/fan-out-review	Forces a full review using the per-file fan-out mode regardless of diff size. Each file is reviewed in its own session for maximum per-file detail. ⚠️ This may take a very long time on large PRs and may fail or time out — use only when you want the most thorough review and are willing to wait.
/holistic-review	Forces a full review using the holistic mode regardless of diff size. The entire diff is reviewed in one pass, enabling cross-file reasoning. Faster and more reliable on large PRs.
/ignore-review-limit	Permanently lifts the 2-review automatic limit for this PR. Future pushes will trigger reviews as normal.