cloudflare.getZeroTrustAccessAiControlsMcpPortal

Cloudflare v6.20.0, Aug 25 26

Viewing docs for Cloudflare v6.20.0
published on Tuesday, Aug 25, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-cloudflare

Viewing docs for Cloudflare v6.20.0
published on Tuesday, Aug 25, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-cloudflare

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustAccessAiControlsMcpPortal = cloudflare.getZeroTrustAccessAiControlsMcpPortal({
    accountId: "a86a8f5c339544d7bdc89926de14fb8c",
    id: "my-mcp-portal",
});

import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_access_ai_controls_mcp_portal = cloudflare.get_zero_trust_access_ai_controls_mcp_portal(account_id="a86a8f5c339544d7bdc89926de14fb8c",
    id="my-mcp-portal")

package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.GetZeroTrustAccessAiControlsMcpPortal(ctx, &cloudflare.LookupZeroTrustAccessAiControlsMcpPortalArgs{
			AccountId: pulumi.StringRef("a86a8f5c339544d7bdc89926de14fb8c"),
			Id:        pulumi.StringRef("my-mcp-portal"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustAccessAiControlsMcpPortal = Cloudflare.GetZeroTrustAccessAiControlsMcpPortal.Invoke(new()
    {
        AccountId = "a86a8f5c339544d7bdc89926de14fb8c",
        Id = "my-mcp-portal",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetZeroTrustAccessAiControlsMcpPortalArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleZeroTrustAccessAiControlsMcpPortal = CloudflareFunctions.getZeroTrustAccessAiControlsMcpPortal(GetZeroTrustAccessAiControlsMcpPortalArgs.builder()
            .accountId("a86a8f5c339544d7bdc89926de14fb8c")
            .id("my-mcp-portal")
            .build());

    }
}

variables:
  exampleZeroTrustAccessAiControlsMcpPortal:
    fn::invoke:
      function: cloudflare:getZeroTrustAccessAiControlsMcpPortal
      arguments:
        accountId: a86a8f5c339544d7bdc89926de14fb8c
        id: my-mcp-portal

pulumi {
  required_providers {
    cloudflare = {
      source = "pulumi/cloudflare"
    }
  }
}

data "cloudflare_getzerotrustaccessaicontrolsmcpportal" "exampleZeroTrustAccessAiControlsMcpPortal" {
  account_id = "a86a8f5c339544d7bdc89926de14fb8c"
  id         = "my-mcp-portal"
}

Using getZeroTrustAccessAiControlsMcpPortal

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getZeroTrustAccessAiControlsMcpPortal(args: GetZeroTrustAccessAiControlsMcpPortalArgs, opts?: InvokeOptions): Promise<GetZeroTrustAccessAiControlsMcpPortalResult>
function getZeroTrustAccessAiControlsMcpPortalOutput(args: GetZeroTrustAccessAiControlsMcpPortalOutputArgs, opts?: InvokeOutputOptions): Output<GetZeroTrustAccessAiControlsMcpPortalResult>

def get_zero_trust_access_ai_controls_mcp_portal(account_id: Optional[str] = None,
                                                 filter: Optional[GetZeroTrustAccessAiControlsMcpPortalFilter] = None,
                                                 id: Optional[str] = None,
                                                 opts: Optional[InvokeOptions] = None) -> GetZeroTrustAccessAiControlsMcpPortalResult
def get_zero_trust_access_ai_controls_mcp_portal_output(account_id: pulumi.Input[Optional[str]] = None,
                                                 filter: pulumi.Input[Optional[GetZeroTrustAccessAiControlsMcpPortalFilterArgs]] = None,
                                                 id: pulumi.Input[Optional[str]] = None,
                                                 opts: Optional[InvokeOutputOptions] = None) -> Output[GetZeroTrustAccessAiControlsMcpPortalResult]

func LookupZeroTrustAccessAiControlsMcpPortal(ctx *Context, args *LookupZeroTrustAccessAiControlsMcpPortalArgs, opts ...InvokeOption) (*LookupZeroTrustAccessAiControlsMcpPortalResult, error)
func LookupZeroTrustAccessAiControlsMcpPortalOutput(ctx *Context, args *LookupZeroTrustAccessAiControlsMcpPortalOutputArgs, opts ...InvokeOption) LookupZeroTrustAccessAiControlsMcpPortalResultOutput

> Note: This function is named LookupZeroTrustAccessAiControlsMcpPortal in the Go SDK.

public static class GetZeroTrustAccessAiControlsMcpPortal 
{
    public static Task<GetZeroTrustAccessAiControlsMcpPortalResult> InvokeAsync(GetZeroTrustAccessAiControlsMcpPortalArgs args, InvokeOptions? opts = null)
    public static Output<GetZeroTrustAccessAiControlsMcpPortalResult> Invoke(GetZeroTrustAccessAiControlsMcpPortalInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetZeroTrustAccessAiControlsMcpPortalResult> Invoke(GetZeroTrustAccessAiControlsMcpPortalInvokeArgs args, InvokeOutputOptions opts)
}

public static CompletableFuture<GetZeroTrustAccessAiControlsMcpPortalResult> getZeroTrustAccessAiControlsMcpPortal(GetZeroTrustAccessAiControlsMcpPortalArgs args, InvokeOptions options)
public static Output<GetZeroTrustAccessAiControlsMcpPortalResult> getZeroTrustAccessAiControlsMcpPortal(GetZeroTrustAccessAiControlsMcpPortalArgs args, InvokeOptions options)
public static Output<GetZeroTrustAccessAiControlsMcpPortalResult> getZeroTrustAccessAiControlsMcpPortal(GetZeroTrustAccessAiControlsMcpPortalArgs args, InvokeOutputOptions options)

fn::invoke:
  function: cloudflare:index/getZeroTrustAccessAiControlsMcpPortal:getZeroTrustAccessAiControlsMcpPortal
  arguments:
    # arguments dictionary

data "cloudflare_get_zero_trust_access_ai_controls_mcp_portal" "name" {
    # arguments
}

The following arguments are supported:

AccountId string
Filter GetZeroTrustAccessAiControlsMcpPortalFilter
Id string: Unique identifier for the MCP portal.

AccountId string
Filter GetZeroTrustAccessAiControlsMcpPortalFilter
Id string: Unique identifier for the MCP portal.

account_id string
filter object
id string: Unique identifier for the MCP portal.

accountId String
filter GetZeroTrustAccessAiControlsMcpPortalFilter
id String: Unique identifier for the MCP portal.

accountId string
filter GetZeroTrustAccessAiControlsMcpPortalFilter
id string: Unique identifier for the MCP portal.

account_id str
filter GetZeroTrustAccessAiControlsMcpPortalFilter
id str: Unique identifier for the MCP portal.

accountId String
filter Property Map
id String: Unique identifier for the MCP portal.

getZeroTrustAccessAiControlsMcpPortal Result

The following output properties are available:

AllowCodeMode bool: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
CodeMode string: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
CreatedAt string
CreatedBy string
Description string: Optional description of the MCP portal.
Hostname string: Hostname where the MCP portal is available.
Id string: Unique identifier for the MCP portal.
ModifiedAt string
ModifiedBy string
Name string: Display name for the MCP portal.
SecureWebGateway bool: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
Servers List<GetZeroTrustAccessAiControlsMcpPortalServer>
AccountId string
Filter GetZeroTrustAccessAiControlsMcpPortalFilter

AllowCodeMode bool: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
CodeMode string: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
CreatedAt string
CreatedBy string
Description string: Optional description of the MCP portal.
Hostname string: Hostname where the MCP portal is available.
Id string: Unique identifier for the MCP portal.
ModifiedAt string
ModifiedBy string
Name string: Display name for the MCP portal.
SecureWebGateway bool: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
Servers []GetZeroTrustAccessAiControlsMcpPortalServer
AccountId string
Filter GetZeroTrustAccessAiControlsMcpPortalFilter

allow_code_mode bool: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
code_mode string: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
created_at string
created_by string
description string: Optional description of the MCP portal.
hostname string: Hostname where the MCP portal is available.
id string: Unique identifier for the MCP portal.
modified_at string
modified_by string
name string: Display name for the MCP portal.
secure_web_gateway bool: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
servers list(object)
account_id string
filter object

allowCodeMode Boolean: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
codeMode String: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
createdAt String
createdBy String
description String: Optional description of the MCP portal.
hostname String: Hostname where the MCP portal is available.
id String: Unique identifier for the MCP portal.
modifiedAt String
modifiedBy String
name String: Display name for the MCP portal.
secureWebGateway Boolean: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
servers List<GetZeroTrustAccessAiControlsMcpPortalServer>
accountId String
filter GetZeroTrustAccessAiControlsMcpPortalFilter

allowCodeMode boolean: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
codeMode string: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
createdAt string
createdBy string
description string: Optional description of the MCP portal.
hostname string: Hostname where the MCP portal is available.
id string: Unique identifier for the MCP portal.
modifiedAt string
modifiedBy string
name string: Display name for the MCP portal.
secureWebGateway boolean: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
servers GetZeroTrustAccessAiControlsMcpPortalServer[]
accountId string
filter GetZeroTrustAccessAiControlsMcpPortalFilter

allow_code_mode bool: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
code_mode str: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
created_at str
created_by str
description str: Optional description of the MCP portal.
hostname str: Hostname where the MCP portal is available.
id str: Unique identifier for the MCP portal.
modified_at str
modified_by str
name str: Display name for the MCP portal.
secure_web_gateway bool: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
servers Sequence[GetZeroTrustAccessAiControlsMcpPortalServer]
account_id str
filter GetZeroTrustAccessAiControlsMcpPortalFilter

allowCodeMode Boolean: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
codeMode String: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
createdAt String
createdBy String
description String: Optional description of the MCP portal.
hostname String: Hostname where the MCP portal is available.
id String: Unique identifier for the MCP portal.
modifiedAt String
modifiedBy String
name String: Display name for the MCP portal.
secureWebGateway Boolean: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
servers List<Property Map>
accountId String
filter Property Map

Supporting Types

GetZeroTrustAccessAiControlsMcpPortalFilter

Search string: Search by id, name, hostname

Search string: Search by id, name, hostname

search string: Search by id, name, hostname

search String: Search by id, name, hostname

search string: Search by id, name, hostname

search str: Search by id, name, hostname

search String: Search by id, name, hostname

GetZeroTrustAccessAiControlsMcpPortalServer

AuthConfigSummary GetZeroTrustAccessAiControlsMcpPortalServerAuthConfigSummary: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
AuthType string: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
AuthenticationStatus string: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
CreatedAt string
CreatedBy string
DefaultDisabled bool
Description string: Optional description of the MCP server.
Error string
ErrorDetails GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails
Hostname string: URL of the upstream MCP endpoint.
Id string: Unique identifier for the MCP server.
IsSharedOauthCallbackEnabled bool: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
LastSuccessfulSync string
LastSynced string
ModifiedAt string
ModifiedBy string
Name string: Display name for the MCP server.
OnBehalf bool
Prompts List<ImmutableDictionary<string, string>>
SecureWebGateway bool: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
ServerId string: Unique identifier for the MCP server.
Status string: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
Tools List<ImmutableDictionary<string, string>>
UpdatedPrompts List<GetZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt>
UpdatedTools List<GetZeroTrustAccessAiControlsMcpPortalServerUpdatedTool>

AuthConfigSummary GetZeroTrustAccessAiControlsMcpPortalServerAuthConfigSummary: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
AuthType string: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
AuthenticationStatus string: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
CreatedAt string
CreatedBy string
DefaultDisabled bool
Description string: Optional description of the MCP server.
Error string
ErrorDetails GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails
Hostname string: URL of the upstream MCP endpoint.
Id string: Unique identifier for the MCP server.
IsSharedOauthCallbackEnabled bool: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
LastSuccessfulSync string
LastSynced string
ModifiedAt string
ModifiedBy string
Name string: Display name for the MCP server.
OnBehalf bool
Prompts []map[string]string
SecureWebGateway bool: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
ServerId string: Unique identifier for the MCP server.
Status string: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
Tools []map[string]string
UpdatedPrompts []GetZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt
UpdatedTools []GetZeroTrustAccessAiControlsMcpPortalServerUpdatedTool

auth_config_summary object: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
auth_type string: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
authentication_status string: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
created_at string
created_by string
default_disabled bool
description string: Optional description of the MCP server.
error string
error_details object
hostname string: URL of the upstream MCP endpoint.
id string: Unique identifier for the MCP server.
is_shared_oauth_callback_enabled bool: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
last_successful_sync string
last_synced string
modified_at string
modified_by string
name string: Display name for the MCP server.
on_behalf bool
prompts list(map(string))
secure_web_gateway bool: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
server_id string: Unique identifier for the MCP server.
status string: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
tools list(map(string))
updated_prompts list(object)
updated_tools list(object)

authConfigSummary GetZeroTrustAccessAiControlsMcpPortalServerAuthConfigSummary: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
authType String: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
authenticationStatus String: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
createdAt String
createdBy String
defaultDisabled Boolean
description String: Optional description of the MCP server.
error String
errorDetails GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails
hostname String: URL of the upstream MCP endpoint.
id String: Unique identifier for the MCP server.
isSharedOauthCallbackEnabled Boolean: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
lastSuccessfulSync String
lastSynced String
modifiedAt String
modifiedBy String
name String: Display name for the MCP server.
onBehalf Boolean
prompts List<Map<String,String>>
secureWebGateway Boolean: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
serverId String: Unique identifier for the MCP server.
status String: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
tools List<Map<String,String>>
updatedPrompts List<GetZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt>
updatedTools List<GetZeroTrustAccessAiControlsMcpPortalServerUpdatedTool>

authConfigSummary GetZeroTrustAccessAiControlsMcpPortalServerAuthConfigSummary: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
authType string: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
authenticationStatus string: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
createdAt string
createdBy string
defaultDisabled boolean
description string: Optional description of the MCP server.
error string
errorDetails GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails
hostname string: URL of the upstream MCP endpoint.
id string: Unique identifier for the MCP server.
isSharedOauthCallbackEnabled boolean: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
lastSuccessfulSync string
lastSynced string
modifiedAt string
modifiedBy string
name string: Display name for the MCP server.
onBehalf boolean
prompts {[key: string]: string}[]
secureWebGateway boolean: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
serverId string: Unique identifier for the MCP server.
status string: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
tools {[key: string]: string}[]
updatedPrompts GetZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt[]
updatedTools GetZeroTrustAccessAiControlsMcpPortalServerUpdatedTool[]

auth_config_summary GetZeroTrustAccessAiControlsMcpPortalServerAuthConfigSummary: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
auth_type str: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
authentication_status str: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
created_at str
created_by str
default_disabled bool
description str: Optional description of the MCP server.
error str
error_details GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails
hostname str: URL of the upstream MCP endpoint.
id str: Unique identifier for the MCP server.
is_shared_oauth_callback_enabled bool: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
last_successful_sync str
last_synced str
modified_at str
modified_by str
name str: Display name for the MCP server.
on_behalf bool
prompts Sequence[Mapping[str, str]]
secure_web_gateway bool: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
server_id str: Unique identifier for the MCP server.
status str: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
tools Sequence[Mapping[str, str]]
updated_prompts Sequence[GetZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt]
updated_tools Sequence[GetZeroTrustAccessAiControlsMcpPortalServerUpdatedTool]

authConfigSummary Property Map: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
authType String: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
authenticationStatus String: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
createdAt String
createdBy String
defaultDisabled Boolean
description String: Optional description of the MCP server.
error String
errorDetails Property Map
hostname String: URL of the upstream MCP endpoint.
id String: Unique identifier for the MCP server.
isSharedOauthCallbackEnabled Boolean: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
lastSuccessfulSync String
lastSynced String
modifiedAt String
modifiedBy String
name String: Display name for the MCP server.
onBehalf Boolean
prompts List<Map<String>>
secureWebGateway Boolean: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
serverId String: Unique identifier for the MCP server.
status String: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
tools List<Map<String>>
updatedPrompts List<Property Map>
updatedTools List<Property Map>

GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails

Cause string: Underlying error message
IsUpstream bool: True = MCP server returned an error. False = couldn't reach the server
McpCode double: MCP protocol error code
Retryable bool: Whether the error is transient and worth retrying
StatusCode double: HTTP status code from the server

Cause string: Underlying error message
IsUpstream bool: True = MCP server returned an error. False = couldn't reach the server
McpCode float64: MCP protocol error code
Retryable bool: Whether the error is transient and worth retrying
StatusCode float64: HTTP status code from the server

cause string: Underlying error message
is_upstream bool: True = MCP server returned an error. False = couldn't reach the server
mcp_code number: MCP protocol error code
retryable bool: Whether the error is transient and worth retrying
status_code number: HTTP status code from the server

cause String: Underlying error message
isUpstream Boolean: True = MCP server returned an error. False = couldn't reach the server
mcpCode Double: MCP protocol error code
retryable Boolean: Whether the error is transient and worth retrying
statusCode Double: HTTP status code from the server

cause string: Underlying error message
isUpstream boolean: True = MCP server returned an error. False = couldn't reach the server
mcpCode number: MCP protocol error code
retryable boolean: Whether the error is transient and worth retrying
statusCode number: HTTP status code from the server

cause str: Underlying error message
is_upstream bool: True = MCP server returned an error. False = couldn't reach the server
mcp_code float: MCP protocol error code
retryable bool: Whether the error is transient and worth retrying
status_code float: HTTP status code from the server

cause String: Underlying error message
isUpstream Boolean: True = MCP server returned an error. False = couldn't reach the server
mcpCode Number: MCP protocol error code
retryable Boolean: Whether the error is transient and worth retrying
statusCode Number: HTTP status code from the server