Cloudflare workers-oauth-provider reaches v1 with a split API
Version 1 separates authentication from token checks: one Worker handles auth, and another validates tokens for MCP servers through Service Bindings. It supports the MCP 2026-07-28 specification.