cloudflare.getZeroTrustAccessAiControlsMcpPortals

Cloudflare v6.20.0, Aug 25 26

Viewing docs for Cloudflare v6.20.0
published on Tuesday, Aug 25, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-cloudflare

Viewing docs for Cloudflare v6.20.0
published on Tuesday, Aug 25, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-cloudflare

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustAccessAiControlsMcpPortals = cloudflare.getZeroTrustAccessAiControlsMcpPortals({
    accountId: "a86a8f5c339544d7bdc89926de14fb8c",
    search: "search",
});

import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_access_ai_controls_mcp_portals = cloudflare.get_zero_trust_access_ai_controls_mcp_portals(account_id="a86a8f5c339544d7bdc89926de14fb8c",
    search="search")

package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.GetZeroTrustAccessAiControlsMcpPortals(ctx, &cloudflare.LookupZeroTrustAccessAiControlsMcpPortalsArgs{
			AccountId: pulumi.StringRef("a86a8f5c339544d7bdc89926de14fb8c"),
			Search:    pulumi.StringRef("search"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustAccessAiControlsMcpPortals = Cloudflare.GetZeroTrustAccessAiControlsMcpPortals.Invoke(new()
    {
        AccountId = "a86a8f5c339544d7bdc89926de14fb8c",
        Search = "search",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetZeroTrustAccessAiControlsMcpPortalsArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleZeroTrustAccessAiControlsMcpPortals = CloudflareFunctions.getZeroTrustAccessAiControlsMcpPortals(GetZeroTrustAccessAiControlsMcpPortalsArgs.builder()
            .accountId("a86a8f5c339544d7bdc89926de14fb8c")
            .search("search")
            .build());

    }
}

variables:
  exampleZeroTrustAccessAiControlsMcpPortals:
    fn::invoke:
      function: cloudflare:getZeroTrustAccessAiControlsMcpPortals
      arguments:
        accountId: a86a8f5c339544d7bdc89926de14fb8c
        search: search

pulumi {
  required_providers {
    cloudflare = {
      source = "pulumi/cloudflare"
    }
  }
}

data "cloudflare_getzerotrustaccessaicontrolsmcpportals" "exampleZeroTrustAccessAiControlsMcpPortals" {
  account_id = "a86a8f5c339544d7bdc89926de14fb8c"
  search     = "search"
}

Using getZeroTrustAccessAiControlsMcpPortals

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getZeroTrustAccessAiControlsMcpPortals(args: GetZeroTrustAccessAiControlsMcpPortalsArgs, opts?: InvokeOptions): Promise<GetZeroTrustAccessAiControlsMcpPortalsResult>
function getZeroTrustAccessAiControlsMcpPortalsOutput(args: GetZeroTrustAccessAiControlsMcpPortalsOutputArgs, opts?: InvokeOutputOptions): Output<GetZeroTrustAccessAiControlsMcpPortalsResult>

def get_zero_trust_access_ai_controls_mcp_portals(account_id: Optional[str] = None,
                                                  max_items: Optional[int] = None,
                                                  search: Optional[str] = None,
                                                  opts: Optional[InvokeOptions] = None) -> GetZeroTrustAccessAiControlsMcpPortalsResult
def get_zero_trust_access_ai_controls_mcp_portals_output(account_id: pulumi.Input[Optional[str]] = None,
                                                  max_items: pulumi.Input[Optional[int]] = None,
                                                  search: pulumi.Input[Optional[str]] = None,
                                                  opts: Optional[InvokeOutputOptions] = None) -> Output[GetZeroTrustAccessAiControlsMcpPortalsResult]

func LookupZeroTrustAccessAiControlsMcpPortals(ctx *Context, args *LookupZeroTrustAccessAiControlsMcpPortalsArgs, opts ...InvokeOption) (*LookupZeroTrustAccessAiControlsMcpPortalsResult, error)
func LookupZeroTrustAccessAiControlsMcpPortalsOutput(ctx *Context, args *LookupZeroTrustAccessAiControlsMcpPortalsOutputArgs, opts ...InvokeOption) LookupZeroTrustAccessAiControlsMcpPortalsResultOutput

> Note: This function is named LookupZeroTrustAccessAiControlsMcpPortals in the Go SDK.

public static class GetZeroTrustAccessAiControlsMcpPortals 
{
    public static Task<GetZeroTrustAccessAiControlsMcpPortalsResult> InvokeAsync(GetZeroTrustAccessAiControlsMcpPortalsArgs args, InvokeOptions? opts = null)
    public static Output<GetZeroTrustAccessAiControlsMcpPortalsResult> Invoke(GetZeroTrustAccessAiControlsMcpPortalsInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetZeroTrustAccessAiControlsMcpPortalsResult> Invoke(GetZeroTrustAccessAiControlsMcpPortalsInvokeArgs args, InvokeOutputOptions opts)
}

public static CompletableFuture<GetZeroTrustAccessAiControlsMcpPortalsResult> getZeroTrustAccessAiControlsMcpPortals(GetZeroTrustAccessAiControlsMcpPortalsArgs args, InvokeOptions options)
public static Output<GetZeroTrustAccessAiControlsMcpPortalsResult> getZeroTrustAccessAiControlsMcpPortals(GetZeroTrustAccessAiControlsMcpPortalsArgs args, InvokeOptions options)
public static Output<GetZeroTrustAccessAiControlsMcpPortalsResult> getZeroTrustAccessAiControlsMcpPortals(GetZeroTrustAccessAiControlsMcpPortalsArgs args, InvokeOutputOptions options)

fn::invoke:
  function: cloudflare:index/getZeroTrustAccessAiControlsMcpPortals:getZeroTrustAccessAiControlsMcpPortals
  arguments:
    # arguments dictionary

data "cloudflare_get_zero_trust_access_ai_controls_mcp_portals" "name" {
    # arguments
}

The following arguments are supported:

AccountId string
MaxItems int: Max items to fetch, default: 1000
Search string: Search by id, name, hostname

AccountId string
MaxItems int: Max items to fetch, default: 1000
Search string: Search by id, name, hostname

account_id string
max_items number: Max items to fetch, default: 1000
search string: Search by id, name, hostname

accountId String
maxItems Integer: Max items to fetch, default: 1000
search String: Search by id, name, hostname

accountId string
maxItems number: Max items to fetch, default: 1000
search string: Search by id, name, hostname

account_id str
max_items int: Max items to fetch, default: 1000
search str: Search by id, name, hostname

accountId String
maxItems Number: Max items to fetch, default: 1000
search String: Search by id, name, hostname

getZeroTrustAccessAiControlsMcpPortals Result

The following output properties are available:

Results List<GetZeroTrustAccessAiControlsMcpPortalsResult>: The items returned by the data source
AccountId string
MaxItems int: Max items to fetch, default: 1000
Search string: Search by id, name, hostname

Results []GetZeroTrustAccessAiControlsMcpPortalsResult: The items returned by the data source
AccountId string
MaxItems int: Max items to fetch, default: 1000
Search string: Search by id, name, hostname

results list(object): The items returned by the data source
account_id string
max_items number: Max items to fetch, default: 1000
search string: Search by id, name, hostname

results List<GetZeroTrustAccessAiControlsMcpPortalsResult>: The items returned by the data source
accountId String
maxItems Integer: Max items to fetch, default: 1000
search String: Search by id, name, hostname

results GetZeroTrustAccessAiControlsMcpPortalsResult[]: The items returned by the data source
accountId string
maxItems number: Max items to fetch, default: 1000
search string: Search by id, name, hostname

results Sequence[GetZeroTrustAccessAiControlsMcpPortalsResult]: The items returned by the data source
account_id str
max_items int: Max items to fetch, default: 1000
search str: Search by id, name, hostname

results List<Property Map>: The items returned by the data source
accountId String
maxItems Number: Max items to fetch, default: 1000
search String: Search by id, name, hostname

Supporting Types

GetZeroTrustAccessAiControlsMcpPortalsResult

AllowCodeMode bool: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
CodeMode string: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
CreatedAt string
CreatedBy string
Description string: Optional description of the MCP portal.
Hostname string: Hostname where the MCP portal is available.
Id string: Unique identifier for the MCP portal.
ModifiedAt string
ModifiedBy string
Name string: Display name for the MCP portal.
SecureWebGateway bool: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
Servers List<GetZeroTrustAccessAiControlsMcpPortalsResultServer>

AllowCodeMode bool: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
CodeMode string: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
CreatedAt string
CreatedBy string
Description string: Optional description of the MCP portal.
Hostname string: Hostname where the MCP portal is available.
Id string: Unique identifier for the MCP portal.
ModifiedAt string
ModifiedBy string
Name string: Display name for the MCP portal.
SecureWebGateway bool: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
Servers []GetZeroTrustAccessAiControlsMcpPortalsResultServer

allow_code_mode bool: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
code_mode string: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
created_at string
created_by string
description string: Optional description of the MCP portal.
hostname string: Hostname where the MCP portal is available.
id string: Unique identifier for the MCP portal.
modified_at string
modified_by string
name string: Display name for the MCP portal.
secure_web_gateway bool: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
servers list(object)

allowCodeMode Boolean: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
codeMode String: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
createdAt String
createdBy String
description String: Optional description of the MCP portal.
hostname String: Hostname where the MCP portal is available.
id String: Unique identifier for the MCP portal.
modifiedAt String
modifiedBy String
name String: Display name for the MCP portal.
secureWebGateway Boolean: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
servers List<GetZeroTrustAccessAiControlsMcpPortalsResultServer>

allowCodeMode boolean: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
codeMode string: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
createdAt string
createdBy string
description string: Optional description of the MCP portal.
hostname string: Hostname where the MCP portal is available.
id string: Unique identifier for the MCP portal.
modifiedAt string
modifiedBy string
name string: Display name for the MCP portal.
secureWebGateway boolean: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
servers GetZeroTrustAccessAiControlsMcpPortalsResultServer[]

allow_code_mode bool: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
code_mode str: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
created_at str
created_by str
description str: Optional description of the MCP portal.
hostname str: Hostname where the MCP portal is available.
id str: Unique identifier for the MCP portal.
modified_at str
modified_by str
name str: Display name for the MCP portal.
secure_web_gateway bool: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
servers Sequence[GetZeroTrustAccessAiControlsMcpPortalsResultServer]

allowCodeMode Boolean: Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
Deprecated: This attribute is deprecated.
codeMode String: Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
createdAt String
createdBy String
description String: Optional description of the MCP portal.
hostname String: Hostname where the MCP portal is available.
id String: Unique identifier for the MCP portal.
modifiedAt String
modifiedBy String
name String: Display name for the MCP portal.
secureWebGateway Boolean: Route outbound MCP traffic through Zero Trust Secure Web Gateway.
servers List<Property Map>

GetZeroTrustAccessAiControlsMcpPortalsResultServer

AuthConfigSummary GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummary: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
AuthType string: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
AuthenticationStatus string: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
CreatedAt string
CreatedBy string
DefaultDisabled bool
Description string: Optional description of the MCP server.
Error string
ErrorDetails GetZeroTrustAccessAiControlsMcpPortalsResultServerErrorDetails
Hostname string: URL of the upstream MCP endpoint.
Id string: Unique identifier for the MCP server.
IsSharedOauthCallbackEnabled bool: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
LastSuccessfulSync string
LastSynced string
ModifiedAt string
ModifiedBy string
Name string: Display name for the MCP server.
OnBehalf bool
Prompts List<ImmutableDictionary<string, string>>
SecureWebGateway bool: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
ServerId string: Unique identifier for the MCP server.
Status string: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
Tools List<ImmutableDictionary<string, string>>
UpdatedPrompts List<GetZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedPrompt>
UpdatedTools List<GetZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedTool>

AuthConfigSummary GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummary: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
AuthType string: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
AuthenticationStatus string: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
CreatedAt string
CreatedBy string
DefaultDisabled bool
Description string: Optional description of the MCP server.
Error string
ErrorDetails GetZeroTrustAccessAiControlsMcpPortalsResultServerErrorDetails
Hostname string: URL of the upstream MCP endpoint.
Id string: Unique identifier for the MCP server.
IsSharedOauthCallbackEnabled bool: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
LastSuccessfulSync string
LastSynced string
ModifiedAt string
ModifiedBy string
Name string: Display name for the MCP server.
OnBehalf bool
Prompts []map[string]string
SecureWebGateway bool: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
ServerId string: Unique identifier for the MCP server.
Status string: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
Tools []map[string]string
UpdatedPrompts []GetZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedPrompt
UpdatedTools []GetZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedTool

auth_config_summary object: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
auth_type string: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
authentication_status string: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
created_at string
created_by string
default_disabled bool
description string: Optional description of the MCP server.
error string
error_details object
hostname string: URL of the upstream MCP endpoint.
id string: Unique identifier for the MCP server.
is_shared_oauth_callback_enabled bool: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
last_successful_sync string
last_synced string
modified_at string
modified_by string
name string: Display name for the MCP server.
on_behalf bool
prompts list(map(string))
secure_web_gateway bool: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
server_id string: Unique identifier for the MCP server.
status string: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
tools list(map(string))
updated_prompts list(object)
updated_tools list(object)

authConfigSummary GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummary: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
authType String: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
authenticationStatus String: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
createdAt String
createdBy String
defaultDisabled Boolean
description String: Optional description of the MCP server.
error String
errorDetails GetZeroTrustAccessAiControlsMcpPortalsResultServerErrorDetails
hostname String: URL of the upstream MCP endpoint.
id String: Unique identifier for the MCP server.
isSharedOauthCallbackEnabled Boolean: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
lastSuccessfulSync String
lastSynced String
modifiedAt String
modifiedBy String
name String: Display name for the MCP server.
onBehalf Boolean
prompts List<Map<String,String>>
secureWebGateway Boolean: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
serverId String: Unique identifier for the MCP server.
status String: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
tools List<Map<String,String>>
updatedPrompts List<GetZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedPrompt>
updatedTools List<GetZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedTool>

authConfigSummary GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummary: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
authType string: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
authenticationStatus string: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
createdAt string
createdBy string
defaultDisabled boolean
description string: Optional description of the MCP server.
error string
errorDetails GetZeroTrustAccessAiControlsMcpPortalsResultServerErrorDetails
hostname string: URL of the upstream MCP endpoint.
id string: Unique identifier for the MCP server.
isSharedOauthCallbackEnabled boolean: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
lastSuccessfulSync string
lastSynced string
modifiedAt string
modifiedBy string
name string: Display name for the MCP server.
onBehalf boolean
prompts {[key: string]: string}[]
secureWebGateway boolean: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
serverId string: Unique identifier for the MCP server.
status string: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
tools {[key: string]: string}[]
updatedPrompts GetZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedPrompt[]
updatedTools GetZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedTool[]

auth_config_summary GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummary: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
auth_type str: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
authentication_status str: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
created_at str
created_by str
default_disabled bool
description str: Optional description of the MCP server.
error str
error_details GetZeroTrustAccessAiControlsMcpPortalsResultServerErrorDetails
hostname str: URL of the upstream MCP endpoint.
id str: Unique identifier for the MCP server.
is_shared_oauth_callback_enabled bool: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
last_successful_sync str
last_synced str
modified_at str
modified_by str
name str: Display name for the MCP server.
on_behalf bool
prompts Sequence[Mapping[str, str]]
secure_web_gateway bool: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
server_id str: Unique identifier for the MCP server.
status str: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
tools Sequence[Mapping[str, str]]
updated_prompts Sequence[GetZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedPrompt]
updated_tools Sequence[GetZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedTool]

authConfigSummary Property Map: Safe subset of authcredentials surfaced to the dashboard. Includes authmode (dcr|manual), hasclientsecret, clientsecretversion, and the OAuth endpoints + client*id for manual servers. Never includes the secret value.
authType String: Authentication method used to connect to the upstream MCP server. Available values: "oauth", "bearer", "unauthenticated".
authenticationStatus String: Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow. Available values: "notRequired", "required", "connected", "stale", "manual".
createdAt String
createdBy String
defaultDisabled Boolean
description String: Optional description of the MCP server.
error String
errorDetails Property Map
hostname String: URL of the upstream MCP endpoint.
id String: Unique identifier for the MCP server.
isSharedOauthCallbackEnabled Boolean: When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
lastSuccessfulSync String
lastSynced String
modifiedAt String
modifiedBy String
name String: Display name for the MCP server.
onBehalf Boolean
prompts List<Map<String>>
secureWebGateway Boolean: Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
serverId String: Unique identifier for the MCP server.
status String: Current sync state of the server Available values: "waiting", "ready", "stale", "error".
tools List<Map<String>>
updatedPrompts List<Property Map>
updatedTools List<Property Map>

GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummary

AuthMode string: Available values: "dcr", "manual".
ClientSecretVersion double
Config GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryConfig
HasClientSecret bool
RegistrationInfo GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryRegistrationInfo

AuthMode string: Available values: "dcr", "manual".
ClientSecretVersion float64
Config GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryConfig
HasClientSecret bool
RegistrationInfo GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryRegistrationInfo

auth_mode string: Available values: "dcr", "manual".
client_secret_version number
config object
has_client_secret bool
registration_info object

authMode String: Available values: "dcr", "manual".
clientSecretVersion Double
config GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryConfig
hasClientSecret Boolean
registrationInfo GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryRegistrationInfo

authMode string: Available values: "dcr", "manual".
clientSecretVersion number
config GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryConfig
hasClientSecret boolean
registrationInfo GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryRegistrationInfo

auth_mode str: Available values: "dcr", "manual".
client_secret_version float
config GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryConfig
has_client_secret bool
registration_info GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryRegistrationInfo

authMode String: Available values: "dcr", "manual".
clientSecretVersion Number
config Property Map
hasClientSecret Boolean
registrationInfo Property Map

GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryConfig

AuthorizationEndpoint string
Issuer string
Resource string
RevocationEndpoint string
TokenEndpoint string

AuthorizationEndpoint string
Issuer string
Resource string
RevocationEndpoint string
TokenEndpoint string

authorization_endpoint string
issuer string
resource string
revocation_endpoint string
token_endpoint string

authorizationEndpoint String
issuer String
resource String
revocationEndpoint String
tokenEndpoint String

authorizationEndpoint string
issuer string
resource string
revocationEndpoint string
tokenEndpoint string

authorization_endpoint str
issuer str
resource str
revocation_endpoint str
token_endpoint str

authorizationEndpoint String
issuer String
resource String
revocationEndpoint String
tokenEndpoint String

GetZeroTrustAccessAiControlsMcpPortalsResultServerAuthConfigSummaryRegistrationInfo

ClientId string
RedirectUris List<string>
Scope string
TokenEndpointAuthMethod string

ClientId string
RedirectUris []string
Scope string
TokenEndpointAuthMethod string

client_id string
redirect_uris list(string)
scope string
token_endpoint_auth_method string

clientId String
redirectUris List<String>
scope String
tokenEndpointAuthMethod String

clientId string
redirectUris string[]
scope string
tokenEndpointAuthMethod string

client_id str
redirect_uris Sequence[str]
scope str
token_endpoint_auth_method str

clientId String
redirectUris List<String>
scope String
tokenEndpointAuthMethod String

GetZeroTrustAccessAiControlsMcpPortalsResultServerErrorDetails

Cause string: Underlying error message
IsUpstream bool: True = MCP server returned an error. False = couldn't reach the server
McpCode double: MCP protocol error code
Retryable bool: Whether the error is transient and worth retrying
StatusCode double: HTTP status code from the server

Cause string: Underlying error message
IsUpstream bool: True = MCP server returned an error. False = couldn't reach the server
McpCode float64: MCP protocol error code
Retryable bool: Whether the error is transient and worth retrying
StatusCode float64: HTTP status code from the server

cause string: Underlying error message
is_upstream bool: True = MCP server returned an error. False = couldn't reach the server
mcp_code number: MCP protocol error code
retryable bool: Whether the error is transient and worth retrying
status_code number: HTTP status code from the server

cause String: Underlying error message
isUpstream Boolean: True = MCP server returned an error. False = couldn't reach the server
mcpCode Double: MCP protocol error code
retryable Boolean: Whether the error is transient and worth retrying
statusCode Double: HTTP status code from the server

cause string: Underlying error message
isUpstream boolean: True = MCP server returned an error. False = couldn't reach the server
mcpCode number: MCP protocol error code
retryable boolean: Whether the error is transient and worth retrying
statusCode number: HTTP status code from the server

cause str: Underlying error message
is_upstream bool: True = MCP server returned an error. False = couldn't reach the server
mcp_code float: MCP protocol error code
retryable bool: Whether the error is transient and worth retrying
status_code float: HTTP status code from the server

cause String: Underlying error message
isUpstream Boolean: True = MCP server returned an error. False = couldn't reach the server
mcpCode Number: MCP protocol error code
retryable Boolean: Whether the error is transient and worth retrying
statusCode Number: HTTP status code from the server