The AI-written OAuth layer required only read scope on /mcp and dispatched store_memory/delete_memory without per-tool write checks. A read-only OAuth token could thus mutate memories, despite the read-only grant.

-import sys-import requests-from pathlib import Path-from dotenv import load_dotenv--# Add the project directory to path-project_dir = Path(__file__).parent-sys.path.insert(0, str(project_dir / "src"))--# Load environment from .env file-load_dotenv()--# Now test the configuration-print("=== Cloudflare Configuration Test ===")-print(f"Backend: {os.getenv('MCP_MEMORY_STORAGE_BACKEND')}")-print(f"API Token: {os.getenv('CLOUDFLARE_API_TOKEN')[:10]}..." if os.getenv('CLOUDFLARE_API_TOKEN') else "API Token: NOT SET")-print(f"Account ID: {os.getenv('CLOUDFLARE_ACCOUNT_ID')}")-print(f"D1 Database ID: {os.getenv('CLOUDFLARE_D1_DATABASE_ID')}")-print(f"Vectorize Index: {os.getenv('CLOUDFLARE_VECTORIZE_INDEX')}")--# Test Cloudflare API connection-api_token = os.getenv('CLOUDFLARE_API_TOKEN')-account_id = os.getenv('CLOUDFLARE_ACCOUNT_ID')--if api_token and account_id:-    print("\n=== Testing Cloudflare API Connection ===")-    headers = {-        'Authorization': f'Bearer {api_token}',-        'Content-Type': 'application/json'-    }-    -    # Test API token validity-    url = f"https://api.cloudflare.com/client/v4/accounts/{account_id}"-    try:-        response = requests.get(url, headers=headers)-        if response.status_code == 200:-            print("✅ Cloudflare API token is valid")-        else:-            print(f"❌ Cloudflare API error: {response.status_code}")-            print(f"Response: {response.text}")-    except Exception as e:-        print(f"❌ Connection error: {str(e)}")--# Try to import and test the storage backend-print("\n=== Testing Storage Backend Import ===")-try:-    from mcp_memory_service.config import STORAGE_BACKEND-    print(f"Config says backend is: {STORAGE_BACKEND}")-    -    if STORAGE_BACKEND == 'cloudflare':-        try:-            from mcp_memory_service.storage.cloudflare import CloudflareStorage-            print("✅ CloudflareStorage import successful")--            # Try to initialize-            print("\n=== Attempting to Initialize Cloudflare Storage ===")-            from mcp_memory_service.config import (-                CLOUDFLARE_API_TOKEN, CLOUDFLARE_ACCOUNT_ID,-                CLOUDFLARE_VECTORIZE_INDEX, CLOUDFLARE_D1_DATABASE_ID,-                CLOUDFLARE_R2_BUCKET, CLOUDFLARE_EMBEDDING_MODEL,-                CLOUDFLARE_LARGE_CONTENT_THRESHOLD, CLOUDFLARE_MAX_RETRIES,-                CLOUDFLARE_BASE_DELAY-            )-            storage = CloudflareStorage(-                api_token=CLOUDFLARE_API_TOKEN,-                account_id=CLOUDFLARE_ACCOUNT_ID,-                vectorize_index=CLOUDFLARE_VECTORIZE_INDEX,-                d1_database_id=CLOUDFLARE_D1_DATABASE_ID,-                r2_bucket=CLOUDFLARE_R2_BUCKET,-                embedding_model=CLOUDFLARE_EMBEDDING_MODEL,-                large_content_threshold=CLOUDFLARE_LARGE_CONTENT_THRESHOLD,-                max_retries=CLOUDFLARE_MAX_RETRIES,-                base_delay=CLOUDFLARE_BASE_DELAY-            )-            print("✅ CloudflareStorage initialized")-        except Exception as e:-            print(f"❌ CloudflareMemoryStorage error: {str(e)}")-            import traceback-            traceback.print_exc()-    else:-        print(f"⚠️ Backend is set to {STORAGE_BACKEND}, not cloudflare")-        -except Exception as e:-    print(f"❌ Import error: {str(e)}")-    import traceback

+# you may not use this file except in compliance with the License.+# You may obtain a copy of the License at+#+#     http://www.apache.org/licenses/LICENSE-2.0+#+# Unless required by applicable law or agreed to in writing, software+# distributed under the License is distributed on an "AS IS" BASIS,+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.+# See the License for the specific language governing permissions and+# limitations under the License.++"""+OAuth 2.1 in-memory storage for MCP Memory Service.++Provides simple in-memory storage for OAuth clients and authorization codes.+This is an MVP implementation - production deployments should use persistent storage.+"""++import time+import secrets

+    """In-memory storage for OAuth 2.1 clients and authorization codes."""++    def __init__(self):+        # Registered OAuth clients+        self._clients: Dict[str, RegisteredClient] = {}++        # Active authorization codes (code -> client_id, expires_at, redirect_uri, scope)+        self._authorization_codes: Dict[str, Dict] = {}++        # Active access tokens (token -> client_id, expires_at, scope)+        self._access_tokens: Dict[str, Dict] = {}++        # Thread safety lock for concurrent access+        self._lock = asyncio.Lock()++    async def store_client(self, client: RegisteredClient) -> None:+        """Store a registered OAuth client."""+        async with self._lock:+            self._clients[client.client_id] = client++    async def get_client(self, client_id: str) -> Optional[RegisteredClient]:+        """Get a registered OAuth client by ID."""+        async with self._lock:+            return self._clients.get(client_id)++    async def authenticate_client(self, client_id: str, client_secret: str) -> bool:+        """Authenticate a client using client_id and client_secret."""+        client = await self.get_client(client_id)+        if not client:+            return False+        return client.client_secret == client_secret++    async def store_authorization_code(+        self,+        code: str,+        client_id: str,+        redirect_uri: Optional[str] = None,+        scope: Optional[str] = None,+        expires_in: Optional[int] = None

+                "redirect_uri": redirect_uri,+                "scope": scope,+                "expires_at": time.time() + expires_in+            }++    async def get_authorization_code(self, code: str) -> Optional[Dict]:+        """Get and consume an authorization code (one-time use)."""+        async with self._lock:+            code_data = self._authorization_codes.pop(code, None)++            # Check if code exists and hasn't expired+            if code_data and code_data["expires_at"] > time.time():+                return code_data

+# you may not use this file except in compliance with the License.+# You may obtain a copy of the License at+#+#     http://www.apache.org/licenses/LICENSE-2.0+#+# Unless required by applicable law or agreed to in writing, software+# distributed under the License is distributed on an "AS IS" BASIS,+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.+# See the License for the specific language governing permissions and+# limitations under the License.++"""+OAuth 2.1 Dynamic Client Registration implementation for MCP Memory Service.++Implements RFC 7591 - OAuth 2.0 Dynamic Client Registration Protocol.+"""++import time+import logging+from typing import List, Optional+from urllib.parse import urlparse, ParseResult+from fastapi import APIRouter, HTTPException, status+from pydantic import ValidationError++from .models import (+    ClientRegistrationRequest,+    ClientRegistrationResponse,+    RegisteredClient+)+from .storage import oauth_storage++logger = logging.getLogger(__name__)++router = APIRouter()+++def validate_redirect_uris(redirect_uris: Optional[List[str]]) -> None:+    """+    Validate redirect URIs according to OAuth 2.1 security requirements.++    Uses proper URL parsing to prevent bypass attacks and validates schemes+    against a secure whitelist to prevent dangerous scheme injection.+    """+    if not redirect_uris:+        return++    # Allowed schemes - whitelist approach for security+    ALLOWED_SCHEMES = {+        'https',    # HTTPS (preferred)+        'http',     # HTTP (localhost only)+        # Native app custom schemes (common patterns)+        'com.example.app',  # Reverse domain notation+        'myapp',           # Simple custom scheme+        # Add more custom schemes as needed, but NEVER allow:+        # javascript:, data:, file:, vbscript:, about:, chrome:, etc.+    }++    # Dangerous schemes that must be blocked+    DANGEROUS_SCHEMES = {+        'javascript', 'data', 'file', 'vbscript', 'about', 'chrome',+        'chrome-extension', 'moz-extension', 'ms-appx', 'blob'+    }++    for uri in redirect_uris:+        uri_str = str(uri).strip()

+                }+            )++        try:+            # Parse URL using proper URL parser to prevent bypass attacks+            parsed: ParseResult = urlparse(uri_str)

+                    }

@@ -21,6 +21,11 @@ from ..oauth.middleware import require_read_access, AuthenticationResult  logger = logging.getLogger(__name__) 

 @@ -189,6 +194,24 @@ async def mcp_endpoint(             tool_name = request.params.get("name") if request.params else None

+                return JSONResponse(+                    content=response.model_dump(exclude_none=True),+                    status_code=403+                )+             result = await handle_tool_call(storage, tool_name, arguments)              response = MCPResponse(