Custom MCP OAuth DCR: cursor:// callback breaks Cloudflare https-only allowlists

标题与摘要为原文，未翻译。

做了什么: Staff (deanrie, 2026-09-16): Dynamic Client Registration sends three redirect_uris—cursor://anysphere.cursor-mcp/oauth/callback, https://www.cursor.com/agents/mcp/oauth/callback, and http://localhost:8787/callback; Grok Bot desktop uses localhost, but Cloudflare Managed OAuth rejects the whole set because it can’t allowlist cursor://—tracked server-side fix to drop non-https callbacks.
场景: 调研监控
怎么复制: 读原文：forum.cursor.com ↗
把原文里的步骤/提示词整理成一条消息交给 Bot
先手动跑一次，再决定频率
出处：https://forum.cursor.com/t/grok-bot-custom-mcp-oauth-fails-before-sign-in-redirect-uri-not-allowed/171877
注意点: 摘要整理自公开来源，以原文为准。