Summary

• Adds a Required Cloudflare permissions section to each MCP server README that declares Cloudflare OAuth scopes in its app entrypoint.
• Lists the corresponding API token permission names users should look for when configuring token-based access.
• Calls out OAuth-only offline_access and the Workers Observability telemetry query permission nuance.

Closes #307.

Verification

• pnpm install --frozen-lockfile
• pnpm exec prettier --check apps/*/README.md
• git diff --check
• pnpm check:format (exits 0; emits existing [prettier-plugin-sort-imports] parser warning before reporting all matched files formatted)
• pnpm test (8 files, 97 tests passed)