Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Cloudflare Provider
  4. API Docs
  5. getZeroTrustAccessAiControlsMcpPortal
Viewing docs for Cloudflare v6.18.0
published on Thursday, Jul 16, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.getZeroTrustAccessAiControlsMcpPortal

cloudflare logo
Viewing docs for Cloudflare v6.18.0
published on Thursday, Jul 16, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Accepted Permissions

    • MCP Portals Read
    • MCP Portals Write

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustAccessAiControlsMcpPortal = cloudflare.getZeroTrustAccessAiControlsMcpPortal({
    accountId: "a86a8f5c339544d7bdc89926de14fb8c",
    id: "my-mcp-portal",
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_access_ai_controls_mcp_portal = cloudflare.get_zero_trust_access_ai_controls_mcp_portal(account_id="a86a8f5c339544d7bdc89926de14fb8c",
    id="my-mcp-portal")

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.GetZeroTrustAccessAiControlsMcpPortal(ctx, &cloudflare.LookupZeroTrustAccessAiControlsMcpPortalArgs{
			AccountId: pulumi.StringRef("a86a8f5c339544d7bdc89926de14fb8c"),
			Id:        pulumi.StringRef("my-mcp-portal"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustAccessAiControlsMcpPortal = Cloudflare.GetZeroTrustAccessAiControlsMcpPortal.Invoke(new()
    {
        AccountId = "a86a8f5c339544d7bdc89926de14fb8c",
        Id = "my-mcp-portal",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetZeroTrustAccessAiControlsMcpPortalArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleZeroTrustAccessAiControlsMcpPortal = CloudflareFunctions.getZeroTrustAccessAiControlsMcpPortal(GetZeroTrustAccessAiControlsMcpPortalArgs.builder()
            .accountId("a86a8f5c339544d7bdc89926de14fb8c")
            .id("my-mcp-portal")
            .build());

    }
}

    variables:
  exampleZeroTrustAccessAiControlsMcpPortal:
    fn::invoke:
      function: cloudflare:getZeroTrustAccessAiControlsMcpPortal
      arguments:
        accountId: a86a8f5c339544d7bdc89926de14fb8c
        id: my-mcp-portal

    pulumi {
  required_providers {
    cloudflare = {
      source = "pulumi/cloudflare"
    }
  }
}

data "cloudflare_getzerotrustaccessaicontrolsmcpportal" "exampleZeroTrustAccessAiControlsMcpPortal" {
  account_id = "a86a8f5c339544d7bdc89926de14fb8c"
  id         = "my-mcp-portal"
}

    Using getZeroTrustAccessAiControlsMcpPortal

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getZeroTrustAccessAiControlsMcpPortal(args: GetZeroTrustAccessAiControlsMcpPortalArgs, opts?: InvokeOptions): Promise<GetZeroTrustAccessAiControlsMcpPortalResult>
function getZeroTrustAccessAiControlsMcpPortalOutput(args: GetZeroTrustAccessAiControlsMcpPortalOutputArgs, opts?: InvokeOptions): Output<GetZeroTrustAccessAiControlsMcpPortalResult>
    def get_zero_trust_access_ai_controls_mcp_portal(account_id: Optional[str] = None,
                                                 filter: Optional[GetZeroTrustAccessAiControlsMcpPortalFilter] = None,
                                                 id: Optional[str] = None,
                                                 opts: Optional[InvokeOptions] = None) -> GetZeroTrustAccessAiControlsMcpPortalResult
def get_zero_trust_access_ai_controls_mcp_portal_output(account_id: pulumi.Input[Optional[str]] = None,
                                                 filter: pulumi.Input[Optional[GetZeroTrustAccessAiControlsMcpPortalFilterArgs]] = None,
                                                 id: pulumi.Input[Optional[str]] = None,
                                                 opts: Optional[InvokeOptions] = None) -> Output[GetZeroTrustAccessAiControlsMcpPortalResult]
    func LookupZeroTrustAccessAiControlsMcpPortal(ctx *Context, args *LookupZeroTrustAccessAiControlsMcpPortalArgs, opts ...InvokeOption) (*LookupZeroTrustAccessAiControlsMcpPortalResult, error)
func LookupZeroTrustAccessAiControlsMcpPortalOutput(ctx *Context, args *LookupZeroTrustAccessAiControlsMcpPortalOutputArgs, opts ...InvokeOption) LookupZeroTrustAccessAiControlsMcpPortalResultOutput

    > Note: This function is named LookupZeroTrustAccessAiControlsMcpPortal in the Go SDK.

    public static class GetZeroTrustAccessAiControlsMcpPortal 
{
    public static Task<GetZeroTrustAccessAiControlsMcpPortalResult> InvokeAsync(GetZeroTrustAccessAiControlsMcpPortalArgs args, InvokeOptions? opts = null)
    public static Output<GetZeroTrustAccessAiControlsMcpPortalResult> Invoke(GetZeroTrustAccessAiControlsMcpPortalInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetZeroTrustAccessAiControlsMcpPortalResult> getZeroTrustAccessAiControlsMcpPortal(GetZeroTrustAccessAiControlsMcpPortalArgs args, InvokeOptions options)
public static Output<GetZeroTrustAccessAiControlsMcpPortalResult> getZeroTrustAccessAiControlsMcpPortal(GetZeroTrustAccessAiControlsMcpPortalArgs args, InvokeOptions options)

    fn::invoke:
  function: cloudflare:index/getZeroTrustAccessAiControlsMcpPortal:getZeroTrustAccessAiControlsMcpPortal
  arguments:
    # arguments dictionary
    data "cloudflare_getzerotrustaccessaicontrolsmcpportal" "name" {
    # arguments
}

    The following arguments are supported:

    account_id string
    filter object
    id string
    portal id
    accountId String
    filter Property Map
    id String
    portal id

    getZeroTrustAccessAiControlsMcpPortal Result

    The following output properties are available:

    AllowCodeMode bool
    Allow remote code execution in Dynamic Workers (beta)
    CreatedAt string
    CreatedBy string
    Description string
    Hostname string
    Id string
    portal id
    ModifiedAt string
    ModifiedBy string
    Name string
    SecureWebGateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway
    Servers List<GetZeroTrustAccessAiControlsMcpPortalServer>
    AccountId string
    Filter GetZeroTrustAccessAiControlsMcpPortalFilter
    AllowCodeMode bool
    Allow remote code execution in Dynamic Workers (beta)
    CreatedAt string
    CreatedBy string
    Description string
    Hostname string
    Id string
    portal id
    ModifiedAt string
    ModifiedBy string
    Name string
    SecureWebGateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway
    Servers []GetZeroTrustAccessAiControlsMcpPortalServer
    AccountId string
    Filter GetZeroTrustAccessAiControlsMcpPortalFilter
    allow_code_mode bool
    Allow remote code execution in Dynamic Workers (beta)
    created_at string
    created_by string
    description string
    hostname string
    id string
    portal id
    modified_at string
    modified_by string
    name string
    secure_web_gateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway
    servers list(object)
    account_id string
    filter object
    allowCodeMode Boolean
    Allow remote code execution in Dynamic Workers (beta)
    createdAt String
    createdBy String
    description String
    hostname String
    id String
    portal id
    modifiedAt String
    modifiedBy String
    name String
    secureWebGateway Boolean
    Route outbound MCP traffic through Zero Trust Secure Web Gateway
    servers List<GetZeroTrustAccessAiControlsMcpPortalServer>
    accountId String
    filter GetZeroTrustAccessAiControlsMcpPortalFilter
    allowCodeMode boolean
    Allow remote code execution in Dynamic Workers (beta)
    createdAt string
    createdBy string
    description string
    hostname string
    id string
    portal id
    modifiedAt string
    modifiedBy string
    name string
    secureWebGateway boolean
    Route outbound MCP traffic through Zero Trust Secure Web Gateway
    servers GetZeroTrustAccessAiControlsMcpPortalServer[]
    accountId string
    filter GetZeroTrustAccessAiControlsMcpPortalFilter
    allow_code_mode bool
    Allow remote code execution in Dynamic Workers (beta)
    created_at str
    created_by str
    description str
    hostname str
    id str
    portal id
    modified_at str
    modified_by str
    name str
    secure_web_gateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway
    servers Sequence[GetZeroTrustAccessAiControlsMcpPortalServer]
    account_id str
    filter GetZeroTrustAccessAiControlsMcpPortalFilter
    allowCodeMode Boolean
    Allow remote code execution in Dynamic Workers (beta)
    createdAt String
    createdBy String
    description String
    hostname String
    id String
    portal id
    modifiedAt String
    modifiedBy String
    name String
    secureWebGateway Boolean
    Route outbound MCP traffic through Zero Trust Secure Web Gateway
    servers List<Property Map>
    accountId String
    filter Property Map

    Supporting Types

    GetZeroTrustAccessAiControlsMcpPortalFilter

    Search string
    Search by id, name, hostname
    Search string
    Search by id, name, hostname
    search string
    Search by id, name, hostname
    search String
    Search by id, name, hostname
    search string
    Search by id, name, hostname
    search str
    Search by id, name, hostname
    search String
    Search by id, name, hostname

    GetZeroTrustAccessAiControlsMcpPortalServer

    AuthType string
    Available values: "oauth", "bearer", "unauthenticated".
    CreatedAt string
    CreatedBy string
    DefaultDisabled bool
    Description string
    Error string
    ErrorDetails GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails
    Hostname string
    Id string
    server id
    IsSharedOauthCallbackEnabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    LastSuccessfulSync string
    LastSynced string
    ModifiedAt string
    ModifiedBy string
    Name string
    OnBehalf bool
    Prompts List<ImmutableDictionary<string, string>>
    SecureWebGateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    ServerId string
    server id
    Status string
    Tools List<ImmutableDictionary<string, string>>
    UpdatedPrompts List<GetZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt>
    UpdatedTools List<GetZeroTrustAccessAiControlsMcpPortalServerUpdatedTool>
    AuthType string
    Available values: "oauth", "bearer", "unauthenticated".
    CreatedAt string
    CreatedBy string
    DefaultDisabled bool
    Description string
    Error string
    ErrorDetails GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails
    Hostname string
    Id string
    server id
    IsSharedOauthCallbackEnabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    LastSuccessfulSync string
    LastSynced string
    ModifiedAt string
    ModifiedBy string
    Name string
    OnBehalf bool
    Prompts []map[string]string
    SecureWebGateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    ServerId string
    server id
    Status string
    Tools []map[string]string
    UpdatedPrompts []GetZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt
    UpdatedTools []GetZeroTrustAccessAiControlsMcpPortalServerUpdatedTool
    auth_type string
    Available values: "oauth", "bearer", "unauthenticated".
    created_at string
    created_by string
    default_disabled bool
    description string
    error string
    error_details object
    hostname string
    id string
    server id
    is_shared_oauth_callback_enabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    last_successful_sync string
    last_synced string
    modified_at string
    modified_by string
    name string
    on_behalf bool
    prompts list(map(string))
    secure_web_gateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    server_id string
    server id
    status string
    tools list(map(string))
    updated_prompts list(object)
    updated_tools list(object)
    authType String
    Available values: "oauth", "bearer", "unauthenticated".
    createdAt String
    createdBy String
    defaultDisabled Boolean
    description String
    error String
    errorDetails GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails
    hostname String
    id String
    server id
    isSharedOauthCallbackEnabled Boolean
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    lastSuccessfulSync String
    lastSynced String
    modifiedAt String
    modifiedBy String
    name String
    onBehalf Boolean
    prompts List<Map<String,String>>
    secureWebGateway Boolean
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    serverId String
    server id
    status String
    tools List<Map<String,String>>
    updatedPrompts List<GetZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt>
    updatedTools List<GetZeroTrustAccessAiControlsMcpPortalServerUpdatedTool>
    authType string
    Available values: "oauth", "bearer", "unauthenticated".
    createdAt string
    createdBy string
    defaultDisabled boolean
    description string
    error string
    errorDetails GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails
    hostname string
    id string
    server id
    isSharedOauthCallbackEnabled boolean
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    lastSuccessfulSync string
    lastSynced string
    modifiedAt string
    modifiedBy string
    name string
    onBehalf boolean
    prompts {[key: string]: string}[]
    secureWebGateway boolean
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    serverId string
    server id
    status string
    tools {[key: string]: string}[]
    updatedPrompts GetZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt[]
    updatedTools GetZeroTrustAccessAiControlsMcpPortalServerUpdatedTool[]
    auth_type str
    Available values: "oauth", "bearer", "unauthenticated".
    created_at str
    created_by str
    default_disabled bool
    description str
    error str
    error_details GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails
    hostname str
    id str
    server id
    is_shared_oauth_callback_enabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    last_successful_sync str
    last_synced str
    modified_at str
    modified_by str
    name str
    on_behalf bool
    prompts Sequence[Mapping[str, str]]
    secure_web_gateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    server_id str
    server id
    status str
    tools Sequence[Mapping[str, str]]
    updated_prompts Sequence[GetZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt]
    updated_tools Sequence[GetZeroTrustAccessAiControlsMcpPortalServerUpdatedTool]
    authType String
    Available values: "oauth", "bearer", "unauthenticated".
    createdAt String
    createdBy String
    defaultDisabled Boolean
    description String
    error String
    errorDetails Property Map
    hostname String
    id String
    server id
    isSharedOauthCallbackEnabled Boolean
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    lastSuccessfulSync String
    lastSynced String
    modifiedAt String
    modifiedBy String
    name String
    onBehalf Boolean
    prompts List<Map<String>>
    secureWebGateway Boolean
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    serverId String
    server id
    status String
    tools List<Map<String>>
    updatedPrompts List<Property Map>
    updatedTools List<Property Map>

    GetZeroTrustAccessAiControlsMcpPortalServerErrorDetails

    Cause string
    Underlying error message
    IsUpstream bool
    True = MCP server returned an error. False = couldn't reach the server
    McpCode double
    MCP protocol error code
    Retryable bool
    Whether the error is transient and worth retrying
    StatusCode double
    HTTP status code from the server
    Cause string
    Underlying error message
    IsUpstream bool
    True = MCP server returned an error. False = couldn't reach the server
    McpCode float64
    MCP protocol error code
    Retryable bool
    Whether the error is transient and worth retrying
    StatusCode float64
    HTTP status code from the server
    cause string
    Underlying error message
    is_upstream bool
    True = MCP server returned an error. False = couldn't reach the server
    mcp_code number
    MCP protocol error code
    retryable bool
    Whether the error is transient and worth retrying
    status_code number
    HTTP status code from the server
    cause String
    Underlying error message
    isUpstream Boolean
    True = MCP server returned an error. False = couldn't reach the server
    mcpCode Double
    MCP protocol error code
    retryable Boolean
    Whether the error is transient and worth retrying
    statusCode Double
    HTTP status code from the server
    cause string
    Underlying error message
    isUpstream boolean
    True = MCP server returned an error. False = couldn't reach the server
    mcpCode number
    MCP protocol error code
    retryable boolean
    Whether the error is transient and worth retrying
    statusCode number
    HTTP status code from the server
    cause str
    Underlying error message
    is_upstream bool
    True = MCP server returned an error. False = couldn't reach the server
    mcp_code float
    MCP protocol error code
    retryable bool
    Whether the error is transient and worth retrying
    status_code float
    HTTP status code from the server
    cause String
    Underlying error message
    isUpstream Boolean
    True = MCP server returned an error. False = couldn't reach the server
    mcpCode Number
    MCP protocol error code
    retryable Boolean
    Whether the error is transient and worth retrying
    statusCode Number
    HTTP status code from the server

    GetZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt

    GetZeroTrustAccessAiControlsMcpPortalServerUpdatedTool

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Viewing docs for Cloudflare v6.18.0
    published on Thursday, Jul 16, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial