Hi,
Please add this redirect URI to the square MCP server’s client allowlist: https://auth-callbacks.cloudflareaccess.com/cdn-cgi/access/outbound-oauth-callback
This is Cloudflare’s shared 0Auth callback for MCP Server Portals, so allowlisting it would enable every Cloudflare customer. Registration currently fails with “invalid_redirect_uri - domain not in allowlist”.
Client details: public client (token_endpoint_auth_method: none, PKCE S256), authorization_code and refresh_token grants, production only.
Use case: reading Square data, mainly with read scopes, to reconcile payments and payouts against our books.
Thanks!