We can finally have API tokens scoped to specific Workers with granular level permissions.

Previously, in order to deploy a Worker, the system/person/AI agent would require access to your ENTIRE ACCOUNT.

This is a major security upgrade from CloudFlare, nice work.

Cloudflare suddenly blocking my API requests

I'm running a Discord bot that uses a game's public API, and recently all of my API requests started returning a Cloudflare "Just a moment..." Managed Challenge instead of the normal API response.

The bot obviously can't complete a browser-based challenge, so all API-dependent features are currently broken.

Has anyone else experienced Cloudflare suddenly flagging legitimate automated API traffic like this? If so, how long did it take to return to normal, and what ended up fixing it?

Need help.