Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Cloudflare Provider
  4. API Docs
  5. ZeroTrustAccessAiControlsMcpPortal
Viewing docs for Cloudflare v6.20.0
published on Tuesday, Aug 25, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.ZeroTrustAccessAiControlsMcpPortal

cloudflare logo cloudflare logo
Viewing docs for Cloudflare v6.20.0
published on Tuesday, Aug 25, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Accepted Permissions

    • MCP Portals Read
    • MCP Portals Write

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustAccessAiControlsMcpPortal = new cloudflare.ZeroTrustAccessAiControlsMcpPortal("example_zero_trust_access_ai_controls_mcp_portal", {
    accountId: "a86a8f5c339544d7bdc89926de14fb8c",
    zeroTrustAccessAiControlsMcpPortalId: "my-mcp-portal",
    hostname: "example.com",
    name: "My MCP Portal",
    allowCodeMode: true,
    codeMode: "opt_in",
    description: "This is my custom MCP Portal",
    secureWebGateway: false,
    servers: [{
        serverId: "my-mcp-server",
        defaultDisabled: true,
        onBehalf: true,
        updatedPrompts: [{
            name: "name",
            alias: "my-custom-alias",
            description: "description",
            enabled: true,
        }],
        updatedTools: [{
            name: "name",
            alias: "my-custom-alias",
            description: "description",
            enabled: true,
        }],
    }],
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_access_ai_controls_mcp_portal = cloudflare.ZeroTrustAccessAiControlsMcpPortal("example_zero_trust_access_ai_controls_mcp_portal",
    account_id="a86a8f5c339544d7bdc89926de14fb8c",
    zero_trust_access_ai_controls_mcp_portal_id="my-mcp-portal",
    hostname="example.com",
    name="My MCP Portal",
    allow_code_mode=True,
    code_mode="opt_in",
    description="This is my custom MCP Portal",
    secure_web_gateway=False,
    servers=[{
        "server_id": "my-mcp-server",
        "default_disabled": True,
        "on_behalf": True,
        "updated_prompts": [{
            "name": "name",
            "alias": "my-custom-alias",
            "description": "description",
            "enabled": True,
        }],
        "updated_tools": [{
            "name": "name",
            "alias": "my-custom-alias",
            "description": "description",
            "enabled": True,
        }],
    }])

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.NewZeroTrustAccessAiControlsMcpPortal(ctx, "example_zero_trust_access_ai_controls_mcp_portal", &cloudflare.ZeroTrustAccessAiControlsMcpPortalArgs{
			AccountId:                            pulumi.String("a86a8f5c339544d7bdc89926de14fb8c"),
			ZeroTrustAccessAiControlsMcpPortalId: pulumi.String("my-mcp-portal"),
			Hostname:                             pulumi.String("example.com"),
			Name:                                 pulumi.String("My MCP Portal"),
			AllowCodeMode:                        pulumi.Bool(true),
			CodeMode:                             pulumi.String("opt_in"),
			Description:                          pulumi.String("This is my custom MCP Portal"),
			SecureWebGateway:                     pulumi.Bool(false),
			Servers: cloudflare.ZeroTrustAccessAiControlsMcpPortalServerArray{
				&cloudflare.ZeroTrustAccessAiControlsMcpPortalServerArgs{
					ServerId:        pulumi.String("my-mcp-server"),
					DefaultDisabled: pulumi.Bool(true),
					OnBehalf:        pulumi.Bool(true),
					UpdatedPrompts: cloudflare.ZeroTrustAccessAiControlsMcpPortalServerUpdatedPromptArray{
						&cloudflare.ZeroTrustAccessAiControlsMcpPortalServerUpdatedPromptArgs{
							Name:        pulumi.String("name"),
							Alias:       pulumi.String("my-custom-alias"),
							Description: pulumi.String("description"),
							Enabled:     pulumi.Bool(true),
						},
					},
					UpdatedTools: cloudflare.ZeroTrustAccessAiControlsMcpPortalServerUpdatedToolArray{
						&cloudflare.ZeroTrustAccessAiControlsMcpPortalServerUpdatedToolArgs{
							Name:        pulumi.String("name"),
							Alias:       pulumi.String("my-custom-alias"),
							Description: pulumi.String("description"),
							Enabled:     pulumi.Bool(true),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustAccessAiControlsMcpPortal = new Cloudflare.ZeroTrustAccessAiControlsMcpPortal("example_zero_trust_access_ai_controls_mcp_portal", new()
    {
        AccountId = "a86a8f5c339544d7bdc89926de14fb8c",
        ZeroTrustAccessAiControlsMcpPortalId = "my-mcp-portal",
        Hostname = "example.com",
        Name = "My MCP Portal",
        AllowCodeMode = true,
        CodeMode = "opt_in",
        Description = "This is my custom MCP Portal",
        SecureWebGateway = false,
        Servers = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessAiControlsMcpPortalServerArgs
            {
                ServerId = "my-mcp-server",
                DefaultDisabled = true,
                OnBehalf = true,
                UpdatedPrompts = new[]
                {
                    new Cloudflare.Inputs.ZeroTrustAccessAiControlsMcpPortalServerUpdatedPromptArgs
                    {
                        Name = "name",
                        Alias = "my-custom-alias",
                        Description = "description",
                        Enabled = true,
                    },
                },
                UpdatedTools = new[]
                {
                    new Cloudflare.Inputs.ZeroTrustAccessAiControlsMcpPortalServerUpdatedToolArgs
                    {
                        Name = "name",
                        Alias = "my-custom-alias",
                        Description = "description",
                        Enabled = true,
                    },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.ZeroTrustAccessAiControlsMcpPortal;
import com.pulumi.cloudflare.ZeroTrustAccessAiControlsMcpPortalArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessAiControlsMcpPortalServerArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessAiControlsMcpPortalServerUpdatedPromptArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessAiControlsMcpPortalServerUpdatedToolArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleZeroTrustAccessAiControlsMcpPortal = new ZeroTrustAccessAiControlsMcpPortal("exampleZeroTrustAccessAiControlsMcpPortal", ZeroTrustAccessAiControlsMcpPortalArgs.builder()
            .accountId("a86a8f5c339544d7bdc89926de14fb8c")
            .zeroTrustAccessAiControlsMcpPortalId("my-mcp-portal")
            .hostname("example.com")
            .name("My MCP Portal")
            .allowCodeMode(true)
            .codeMode("opt_in")
            .description("This is my custom MCP Portal")
            .secureWebGateway(false)
            .servers(ZeroTrustAccessAiControlsMcpPortalServerArgs.builder()
                .serverId("my-mcp-server")
                .defaultDisabled(true)
                .onBehalf(true)
                .updatedPrompts(ZeroTrustAccessAiControlsMcpPortalServerUpdatedPromptArgs.builder()
                    .name("name")
                    .alias("my-custom-alias")
                    .description("description")
                    .enabled(true)
                    .build())
                .updatedTools(ZeroTrustAccessAiControlsMcpPortalServerUpdatedToolArgs.builder()
                    .name("name")
                    .alias("my-custom-alias")
                    .description("description")
                    .enabled(true)
                    .build())
                .build())
            .build());

    }
}

    resources:
  exampleZeroTrustAccessAiControlsMcpPortal:
    type: cloudflare:ZeroTrustAccessAiControlsMcpPortal
    name: example_zero_trust_access_ai_controls_mcp_portal
    properties:
      accountId: a86a8f5c339544d7bdc89926de14fb8c
      zeroTrustAccessAiControlsMcpPortalId: my-mcp-portal
      hostname: example.com
      name: My MCP Portal
      allowCodeMode: true
      codeMode: opt_in
      description: This is my custom MCP Portal
      secureWebGateway: false
      servers:
        - serverId: my-mcp-server
          defaultDisabled: true
          onBehalf: true
          updatedPrompts:
            - name: name
              alias: my-custom-alias
              description: description
              enabled: true
          updatedTools:
            - name: name
              alias: my-custom-alias
              description: description
              enabled: true

    pulumi {
  required_providers {
    cloudflare = {
      source = "pulumi/cloudflare"
    }
  }
}

resource "cloudflare_zerotrustaccessaicontrolsmcpportal" "example_zero_trust_access_ai_controls_mcp_portal" {
  account_id                                  = "a86a8f5c339544d7bdc89926de14fb8c"
  zero_trust_access_ai_controls_mcp_portal_id = "my-mcp-portal"
  hostname                                    = "example.com"
  name                                        = "My MCP Portal"
  allow_code_mode                             = true
  code_mode                                   = "opt_in"
  description                                 = "This is my custom MCP Portal"
  secure_web_gateway                          = false
  servers {
    server_id        = "my-mcp-server"
    default_disabled = true
    on_behalf        = true
    updated_prompts {
      name        = "name"
      alias       = "my-custom-alias"
      description = "description"
      enabled     = true
    }
    updated_tools {
      name        = "name"
      alias       = "my-custom-alias"
      description = "description"
      enabled     = true
    }
  }
}

    Create ZeroTrustAccessAiControlsMcpPortal Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ZeroTrustAccessAiControlsMcpPortal(name: string, args: ZeroTrustAccessAiControlsMcpPortalArgs, opts?: CustomResourceOptions);
    @overload
def ZeroTrustAccessAiControlsMcpPortal(resource_name: str,
                                       args: ZeroTrustAccessAiControlsMcpPortalArgs,
                                       opts: Optional[ResourceOptions] = None)

@overload
def ZeroTrustAccessAiControlsMcpPortal(resource_name: str,
                                       opts: Optional[ResourceOptions] = None,
                                       account_id: Optional[str] = None,
                                       hostname: Optional[str] = None,
                                       name: Optional[str] = None,
                                       zero_trust_access_ai_controls_mcp_portal_id: Optional[str] = None,
                                       allow_code_mode: Optional[bool] = None,
                                       code_mode: Optional[str] = None,
                                       description: Optional[str] = None,
                                       secure_web_gateway: Optional[bool] = None,
                                       servers: Optional[Sequence[ZeroTrustAccessAiControlsMcpPortalServerArgs]] = None)
    func NewZeroTrustAccessAiControlsMcpPortal(ctx *Context, name string, args ZeroTrustAccessAiControlsMcpPortalArgs, opts ...ResourceOption) (*ZeroTrustAccessAiControlsMcpPortal, error)
    public ZeroTrustAccessAiControlsMcpPortal(string name, ZeroTrustAccessAiControlsMcpPortalArgs args, CustomResourceOptions? opts = null)
    public ZeroTrustAccessAiControlsMcpPortal(String name, ZeroTrustAccessAiControlsMcpPortalArgs args)
public ZeroTrustAccessAiControlsMcpPortal(String name, ZeroTrustAccessAiControlsMcpPortalArgs args, CustomResourceOptions options)

    type: cloudflare:ZeroTrustAccessAiControlsMcpPortal
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "cloudflare_zero_trust_access_ai_controls_mcp_portal" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ZeroTrustAccessAiControlsMcpPortalArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ZeroTrustAccessAiControlsMcpPortalArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ZeroTrustAccessAiControlsMcpPortalArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ZeroTrustAccessAiControlsMcpPortalArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ZeroTrustAccessAiControlsMcpPortalArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var zeroTrustAccessAiControlsMcpPortalResource = new Cloudflare.ZeroTrustAccessAiControlsMcpPortal("zeroTrustAccessAiControlsMcpPortalResource", new()
{
    AccountId = "string",
    Hostname = "string",
    Name = "string",
    ZeroTrustAccessAiControlsMcpPortalId = "string",
    CodeMode = "string",
    Description = "string",
    SecureWebGateway = false,
    Servers = new[]
    {
        new Cloudflare.Inputs.ZeroTrustAccessAiControlsMcpPortalServerArgs
        {
            ServerId = "string",
            DefaultDisabled = false,
            OnBehalf = false,
            UpdatedPrompts = new[]
            {
                new Cloudflare.Inputs.ZeroTrustAccessAiControlsMcpPortalServerUpdatedPromptArgs
                {
                    Name = "string",
                    Alias = "string",
                    Description = "string",
                    Enabled = false,
                },
            },
            UpdatedTools = new[]
            {
                new Cloudflare.Inputs.ZeroTrustAccessAiControlsMcpPortalServerUpdatedToolArgs
                {
                    Name = "string",
                    Alias = "string",
                    Description = "string",
                    Enabled = false,
                },
            },
        },
    },
});

    example, err := cloudflare.NewZeroTrustAccessAiControlsMcpPortal(ctx, "zeroTrustAccessAiControlsMcpPortalResource", &cloudflare.ZeroTrustAccessAiControlsMcpPortalArgs{
	AccountId:                            pulumi.String("string"),
	Hostname:                             pulumi.String("string"),
	Name:                                 pulumi.String("string"),
	ZeroTrustAccessAiControlsMcpPortalId: pulumi.String("string"),
	CodeMode:                             pulumi.String("string"),
	Description:                          pulumi.String("string"),
	SecureWebGateway:                     pulumi.Bool(false),
	Servers: cloudflare.ZeroTrustAccessAiControlsMcpPortalServerArray{
		&cloudflare.ZeroTrustAccessAiControlsMcpPortalServerArgs{
			ServerId:        pulumi.String("string"),
			DefaultDisabled: pulumi.Bool(false),
			OnBehalf:        pulumi.Bool(false),
			UpdatedPrompts: cloudflare.ZeroTrustAccessAiControlsMcpPortalServerUpdatedPromptArray{
				&cloudflare.ZeroTrustAccessAiControlsMcpPortalServerUpdatedPromptArgs{
					Name:        pulumi.String("string"),
					Alias:       pulumi.String("string"),
					Description: pulumi.String("string"),
					Enabled:     pulumi.Bool(false),
				},
			},
			UpdatedTools: cloudflare.ZeroTrustAccessAiControlsMcpPortalServerUpdatedToolArray{
				&cloudflare.ZeroTrustAccessAiControlsMcpPortalServerUpdatedToolArgs{
					Name:        pulumi.String("string"),
					Alias:       pulumi.String("string"),
					Description: pulumi.String("string"),
					Enabled:     pulumi.Bool(false),
				},
			},
		},
	},
})

    resource "cloudflare_zero_trust_access_ai_controls_mcp_portal" "zeroTrustAccessAiControlsMcpPortalResource" {
  lifecycle {
    create_before_destroy = true
  }
  account_id                                  = "string"
  hostname                                    = "string"
  name                                        = "string"
  zero_trust_access_ai_controls_mcp_portal_id = "string"
  code_mode                                   = "string"
  description                                 = "string"
  secure_web_gateway                          = false
  servers {
    server_id        = "string"
    default_disabled = false
    on_behalf        = false
    updated_prompts {
      name        = "string"
      alias       = "string"
      description = "string"
      enabled     = false
    }
    updated_tools {
      name        = "string"
      alias       = "string"
      description = "string"
      enabled     = false
    }
  }
}

    var zeroTrustAccessAiControlsMcpPortalResource = new ZeroTrustAccessAiControlsMcpPortal("zeroTrustAccessAiControlsMcpPortalResource", ZeroTrustAccessAiControlsMcpPortalArgs.builder()
    .accountId("string")
    .hostname("string")
    .name("string")
    .zeroTrustAccessAiControlsMcpPortalId("string")
    .codeMode("string")
    .description("string")
    .secureWebGateway(false)
    .servers(ZeroTrustAccessAiControlsMcpPortalServerArgs.builder()
        .serverId("string")
        .defaultDisabled(false)
        .onBehalf(false)
        .updatedPrompts(ZeroTrustAccessAiControlsMcpPortalServerUpdatedPromptArgs.builder()
            .name("string")
            .alias("string")
            .description("string")
            .enabled(false)
            .build())
        .updatedTools(ZeroTrustAccessAiControlsMcpPortalServerUpdatedToolArgs.builder()
            .name("string")
            .alias("string")
            .description("string")
            .enabled(false)
            .build())
        .build())
    .build());

    zero_trust_access_ai_controls_mcp_portal_resource = cloudflare.ZeroTrustAccessAiControlsMcpPortal("zeroTrustAccessAiControlsMcpPortalResource",
    account_id="string",
    hostname="string",
    name="string",
    zero_trust_access_ai_controls_mcp_portal_id="string",
    code_mode="string",
    description="string",
    secure_web_gateway=False,
    servers=[{
        "server_id": "string",
        "default_disabled": False,
        "on_behalf": False,
        "updated_prompts": [{
            "name": "string",
            "alias": "string",
            "description": "string",
            "enabled": False,
        }],
        "updated_tools": [{
            "name": "string",
            "alias": "string",
            "description": "string",
            "enabled": False,
        }],
    }])

    const zeroTrustAccessAiControlsMcpPortalResource = new cloudflare.ZeroTrustAccessAiControlsMcpPortal("zeroTrustAccessAiControlsMcpPortalResource", {
    accountId: "string",
    hostname: "string",
    name: "string",
    zeroTrustAccessAiControlsMcpPortalId: "string",
    codeMode: "string",
    description: "string",
    secureWebGateway: false,
    servers: [{
        serverId: "string",
        defaultDisabled: false,
        onBehalf: false,
        updatedPrompts: [{
            name: "string",
            alias: "string",
            description: "string",
            enabled: false,
        }],
        updatedTools: [{
            name: "string",
            alias: "string",
            description: "string",
            enabled: false,
        }],
    }],
});

    type: cloudflare:ZeroTrustAccessAiControlsMcpPortal
properties:
    accountId: string
    codeMode: string
    description: string
    hostname: string
    name: string
    secureWebGateway: false
    servers:
        - defaultDisabled: false
          onBehalf: false
          serverId: string
          updatedPrompts:
            - alias: string
              description: string
              enabled: false
              name: string
          updatedTools:
            - alias: string
              description: string
              enabled: false
              name: string
    zeroTrustAccessAiControlsMcpPortalId: string

    ZeroTrustAccessAiControlsMcpPortal Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ZeroTrustAccessAiControlsMcpPortal resource accepts the following input properties:

    AccountId string
    Hostname string
    Hostname where the MCP portal is available.
    Name string
    Display name for the MCP portal.
    ZeroTrustAccessAiControlsMcpPortalId string
    Unique identifier for the MCP portal.
    AllowCodeMode bool
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    CodeMode string
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    Description string
    Optional description of the MCP portal.
    SecureWebGateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    Servers List<ZeroTrustAccessAiControlsMcpPortalServer>
    MCP servers attached to the portal and their portal-specific settings.
    AccountId string
    Hostname string
    Hostname where the MCP portal is available.
    Name string
    Display name for the MCP portal.
    ZeroTrustAccessAiControlsMcpPortalId string
    Unique identifier for the MCP portal.
    AllowCodeMode bool
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    CodeMode string
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    Description string
    Optional description of the MCP portal.
    SecureWebGateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    Servers []ZeroTrustAccessAiControlsMcpPortalServerArgs
    MCP servers attached to the portal and their portal-specific settings.
    account_id string
    hostname string
    Hostname where the MCP portal is available.
    name string
    Display name for the MCP portal.
    zero_trust_access_ai_controls_mcp_portal_id string
    Unique identifier for the MCP portal.
    allow_code_mode bool
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    code_mode string
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    description string
    Optional description of the MCP portal.
    secure_web_gateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    servers list(object)
    MCP servers attached to the portal and their portal-specific settings.
    accountId String
    hostname String
    Hostname where the MCP portal is available.
    name String
    Display name for the MCP portal.
    zeroTrustAccessAiControlsMcpPortalId String
    Unique identifier for the MCP portal.
    allowCodeMode Boolean
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    codeMode String
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    description String
    Optional description of the MCP portal.
    secureWebGateway Boolean
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    servers List<ZeroTrustAccessAiControlsMcpPortalServer>
    MCP servers attached to the portal and their portal-specific settings.
    accountId string
    hostname string
    Hostname where the MCP portal is available.
    name string
    Display name for the MCP portal.
    zeroTrustAccessAiControlsMcpPortalId string
    Unique identifier for the MCP portal.
    allowCodeMode boolean
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    codeMode string
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    description string
    Optional description of the MCP portal.
    secureWebGateway boolean
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    servers ZeroTrustAccessAiControlsMcpPortalServer[]
    MCP servers attached to the portal and their portal-specific settings.
    account_id str
    hostname str
    Hostname where the MCP portal is available.
    name str
    Display name for the MCP portal.
    zero_trust_access_ai_controls_mcp_portal_id str
    Unique identifier for the MCP portal.
    allow_code_mode bool
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    code_mode str
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    description str
    Optional description of the MCP portal.
    secure_web_gateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    servers Sequence[ZeroTrustAccessAiControlsMcpPortalServerArgs]
    MCP servers attached to the portal and their portal-specific settings.
    accountId String
    hostname String
    Hostname where the MCP portal is available.
    name String
    Display name for the MCP portal.
    zeroTrustAccessAiControlsMcpPortalId String
    Unique identifier for the MCP portal.
    allowCodeMode Boolean
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    codeMode String
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    description String
    Optional description of the MCP portal.
    secureWebGateway Boolean
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    servers List<Property Map>
    MCP servers attached to the portal and their portal-specific settings.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ZeroTrustAccessAiControlsMcpPortal resource produces the following output properties:

    CreatedAt string
    CreatedBy string
    Id string
    The provider-assigned unique ID for this managed resource.
    ModifiedAt string
    ModifiedBy string
    CreatedAt string
    CreatedBy string
    Id string
    The provider-assigned unique ID for this managed resource.
    ModifiedAt string
    ModifiedBy string
    created_at string
    created_by string
    id string
    The provider-assigned unique ID for this managed resource.
    modified_at string
    modified_by string
    createdAt String
    createdBy String
    id String
    The provider-assigned unique ID for this managed resource.
    modifiedAt String
    modifiedBy String
    createdAt string
    createdBy string
    id string
    The provider-assigned unique ID for this managed resource.
    modifiedAt string
    modifiedBy string
    created_at str
    created_by str
    id str
    The provider-assigned unique ID for this managed resource.
    modified_at str
    modified_by str
    createdAt String
    createdBy String
    id String
    The provider-assigned unique ID for this managed resource.
    modifiedAt String
    modifiedBy String

    Look up Existing ZeroTrustAccessAiControlsMcpPortal Resource

    Get an existing ZeroTrustAccessAiControlsMcpPortal resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ZeroTrustAccessAiControlsMcpPortalState, opts?: CustomResourceOptions): ZeroTrustAccessAiControlsMcpPortal
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        allow_code_mode: Optional[bool] = None,
        code_mode: Optional[str] = None,
        created_at: Optional[str] = None,
        created_by: Optional[str] = None,
        description: Optional[str] = None,
        hostname: Optional[str] = None,
        modified_at: Optional[str] = None,
        modified_by: Optional[str] = None,
        name: Optional[str] = None,
        secure_web_gateway: Optional[bool] = None,
        servers: Optional[Sequence[ZeroTrustAccessAiControlsMcpPortalServerArgs]] = None,
        zero_trust_access_ai_controls_mcp_portal_id: Optional[str] = None) -> ZeroTrustAccessAiControlsMcpPortal
    func GetZeroTrustAccessAiControlsMcpPortal(ctx *Context, name string, id IDInput, state *ZeroTrustAccessAiControlsMcpPortalState, opts ...ResourceOption) (*ZeroTrustAccessAiControlsMcpPortal, error)
    public static ZeroTrustAccessAiControlsMcpPortal Get(string name, Input<string> id, ZeroTrustAccessAiControlsMcpPortalState? state, CustomResourceOptions? opts = null)
    public static ZeroTrustAccessAiControlsMcpPortal get(String name, Output<String> id, ZeroTrustAccessAiControlsMcpPortalState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:ZeroTrustAccessAiControlsMcpPortal    get:      id: ${id}
    import {
  to = cloudflare_zero_trust_access_ai_controls_mcp_portal.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    AllowCodeMode bool
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    CodeMode string
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    CreatedAt string
    CreatedBy string
    Description string
    Optional description of the MCP portal.
    Hostname string
    Hostname where the MCP portal is available.
    ModifiedAt string
    ModifiedBy string
    Name string
    Display name for the MCP portal.
    SecureWebGateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    Servers List<ZeroTrustAccessAiControlsMcpPortalServer>
    MCP servers attached to the portal and their portal-specific settings.
    ZeroTrustAccessAiControlsMcpPortalId string
    Unique identifier for the MCP portal.
    AccountId string
    AllowCodeMode bool
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    CodeMode string
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    CreatedAt string
    CreatedBy string
    Description string
    Optional description of the MCP portal.
    Hostname string
    Hostname where the MCP portal is available.
    ModifiedAt string
    ModifiedBy string
    Name string
    Display name for the MCP portal.
    SecureWebGateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    Servers []ZeroTrustAccessAiControlsMcpPortalServerArgs
    MCP servers attached to the portal and their portal-specific settings.
    ZeroTrustAccessAiControlsMcpPortalId string
    Unique identifier for the MCP portal.
    account_id string
    allow_code_mode bool
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    code_mode string
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    created_at string
    created_by string
    description string
    Optional description of the MCP portal.
    hostname string
    Hostname where the MCP portal is available.
    modified_at string
    modified_by string
    name string
    Display name for the MCP portal.
    secure_web_gateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    servers list(object)
    MCP servers attached to the portal and their portal-specific settings.
    zero_trust_access_ai_controls_mcp_portal_id string
    Unique identifier for the MCP portal.
    accountId String
    allowCodeMode Boolean
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    codeMode String
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    createdAt String
    createdBy String
    description String
    Optional description of the MCP portal.
    hostname String
    Hostname where the MCP portal is available.
    modifiedAt String
    modifiedBy String
    name String
    Display name for the MCP portal.
    secureWebGateway Boolean
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    servers List<ZeroTrustAccessAiControlsMcpPortalServer>
    MCP servers attached to the portal and their portal-specific settings.
    zeroTrustAccessAiControlsMcpPortalId String
    Unique identifier for the MCP portal.
    accountId string
    allowCodeMode boolean
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    codeMode string
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    createdAt string
    createdBy string
    description string
    Optional description of the MCP portal.
    hostname string
    Hostname where the MCP portal is available.
    modifiedAt string
    modifiedBy string
    name string
    Display name for the MCP portal.
    secureWebGateway boolean
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    servers ZeroTrustAccessAiControlsMcpPortalServer[]
    MCP servers attached to the portal and their portal-specific settings.
    zeroTrustAccessAiControlsMcpPortalId string
    Unique identifier for the MCP portal.
    account_id str
    allow_code_mode bool
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    code_mode str
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    created_at str
    created_by str
    description str
    Optional description of the MCP portal.
    hostname str
    Hostname where the MCP portal is available.
    modified_at str
    modified_by str
    name str
    Display name for the MCP portal.
    secure_web_gateway bool
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    servers Sequence[ZeroTrustAccessAiControlsMcpPortalServerArgs]
    MCP servers attached to the portal and their portal-specific settings.
    zero_trust_access_ai_controls_mcp_portal_id str
    Unique identifier for the MCP portal.
    accountId String
    allowCodeMode Boolean
    Deprecated: use codeMode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.

    Deprecated: This attribute is deprecated.

    codeMode String
    Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. optIn: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. defaultOn: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to optIn when omitted on create. If both codeMode and allowCodeMode are sent, they must be consistent or the request returns a 400. Available values: "off", "optin", "defaulton", "enforced".
    createdAt String
    createdBy String
    description String
    Optional description of the MCP portal.
    hostname String
    Hostname where the MCP portal is available.
    modifiedAt String
    modifiedBy String
    name String
    Display name for the MCP portal.
    secureWebGateway Boolean
    Route outbound MCP traffic through Zero Trust Secure Web Gateway.
    servers List<Property Map>
    MCP servers attached to the portal and their portal-specific settings.
    zeroTrustAccessAiControlsMcpPortalId String
    Unique identifier for the MCP portal.

    Supporting Types

    ZeroTrustAccessAiControlsMcpPortalServer, ZeroTrustAccessAiControlsMcpPortalServerArgs

    ServerId string
    Unique identifier for the MCP server.
    DefaultDisabled bool
    Disable this server by default for clients connecting through the portal.
    OnBehalf bool
    Use end-user OAuth credentials when connecting this server to the portal.
    UpdatedPrompts List<ZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt>
    Portal-specific prompt overrides.
    UpdatedTools List<ZeroTrustAccessAiControlsMcpPortalServerUpdatedTool>
    Portal-specific tool overrides.
    ServerId string
    Unique identifier for the MCP server.
    DefaultDisabled bool
    Disable this server by default for clients connecting through the portal.
    OnBehalf bool
    Use end-user OAuth credentials when connecting this server to the portal.
    UpdatedPrompts []ZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt
    Portal-specific prompt overrides.
    UpdatedTools []ZeroTrustAccessAiControlsMcpPortalServerUpdatedTool
    Portal-specific tool overrides.
    server_id string
    Unique identifier for the MCP server.
    default_disabled bool
    Disable this server by default for clients connecting through the portal.
    on_behalf bool
    Use end-user OAuth credentials when connecting this server to the portal.
    updated_prompts list(object)
    Portal-specific prompt overrides.
    updated_tools list(object)
    Portal-specific tool overrides.
    serverId String
    Unique identifier for the MCP server.
    defaultDisabled Boolean
    Disable this server by default for clients connecting through the portal.
    onBehalf Boolean
    Use end-user OAuth credentials when connecting this server to the portal.
    updatedPrompts List<ZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt>
    Portal-specific prompt overrides.
    updatedTools List<ZeroTrustAccessAiControlsMcpPortalServerUpdatedTool>
    Portal-specific tool overrides.
    serverId string
    Unique identifier for the MCP server.
    defaultDisabled boolean
    Disable this server by default for clients connecting through the portal.
    onBehalf boolean
    Use end-user OAuth credentials when connecting this server to the portal.
    updatedPrompts ZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt[]
    Portal-specific prompt overrides.
    updatedTools ZeroTrustAccessAiControlsMcpPortalServerUpdatedTool[]
    Portal-specific tool overrides.
    server_id str
    Unique identifier for the MCP server.
    default_disabled bool
    Disable this server by default for clients connecting through the portal.
    on_behalf bool
    Use end-user OAuth credentials when connecting this server to the portal.
    updated_prompts Sequence[ZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt]
    Portal-specific prompt overrides.
    updated_tools Sequence[ZeroTrustAccessAiControlsMcpPortalServerUpdatedTool]
    Portal-specific tool overrides.
    serverId String
    Unique identifier for the MCP server.
    defaultDisabled Boolean
    Disable this server by default for clients connecting through the portal.
    onBehalf Boolean
    Use end-user OAuth credentials when connecting this server to the portal.
    updatedPrompts List<Property Map>
    Portal-specific prompt overrides.
    updatedTools List<Property Map>
    Portal-specific tool overrides.

    ZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt, ZeroTrustAccessAiControlsMcpPortalServerUpdatedPromptArgs

    Name string
    Name of the tool or prompt capability to override.
    Alias string
    Custom name exposed for the capability.
    Description string
    Custom description exposed for the capability.
    Enabled bool
    Whether the capability is available through the MCP server.
    Name string
    Name of the tool or prompt capability to override.
    Alias string
    Custom name exposed for the capability.
    Description string
    Custom description exposed for the capability.
    Enabled bool
    Whether the capability is available through the MCP server.
    name string
    Name of the tool or prompt capability to override.
    alias string
    Custom name exposed for the capability.
    description string
    Custom description exposed for the capability.
    enabled bool
    Whether the capability is available through the MCP server.
    name String
    Name of the tool or prompt capability to override.
    alias String
    Custom name exposed for the capability.
    description String
    Custom description exposed for the capability.
    enabled Boolean
    Whether the capability is available through the MCP server.
    name string
    Name of the tool or prompt capability to override.
    alias string
    Custom name exposed for the capability.
    description string
    Custom description exposed for the capability.
    enabled boolean
    Whether the capability is available through the MCP server.
    name str
    Name of the tool or prompt capability to override.
    alias str
    Custom name exposed for the capability.
    description str
    Custom description exposed for the capability.
    enabled bool
    Whether the capability is available through the MCP server.
    name String
    Name of the tool or prompt capability to override.
    alias String
    Custom name exposed for the capability.
    description String
    Custom description exposed for the capability.
    enabled Boolean
    Whether the capability is available through the MCP server.

    ZeroTrustAccessAiControlsMcpPortalServerUpdatedTool, ZeroTrustAccessAiControlsMcpPortalServerUpdatedToolArgs

    Name string
    Name of the tool or prompt capability to override.
    Alias string
    Custom name exposed for the capability.
    Description string
    Custom description exposed for the capability.
    Enabled bool
    Whether the capability is available through the MCP server.
    Name string
    Name of the tool or prompt capability to override.
    Alias string
    Custom name exposed for the capability.
    Description string
    Custom description exposed for the capability.
    Enabled bool
    Whether the capability is available through the MCP server.
    name string
    Name of the tool or prompt capability to override.
    alias string
    Custom name exposed for the capability.
    description string
    Custom description exposed for the capability.
    enabled bool
    Whether the capability is available through the MCP server.
    name String
    Name of the tool or prompt capability to override.
    alias String
    Custom name exposed for the capability.
    description String
    Custom description exposed for the capability.
    enabled Boolean
    Whether the capability is available through the MCP server.
    name string
    Name of the tool or prompt capability to override.
    alias string
    Custom name exposed for the capability.
    description string
    Custom description exposed for the capability.
    enabled boolean
    Whether the capability is available through the MCP server.
    name str
    Name of the tool or prompt capability to override.
    alias str
    Custom name exposed for the capability.
    description str
    Custom description exposed for the capability.
    enabled bool
    Whether the capability is available through the MCP server.
    name String
    Name of the tool or prompt capability to override.
    alias String
    Custom name exposed for the capability.
    description String
    Custom description exposed for the capability.
    enabled Boolean
    Whether the capability is available through the MCP server.

    Import

    $ pulumi import cloudflare:index/zeroTrustAccessAiControlsMcpPortal:ZeroTrustAccessAiControlsMcpPortal example '<account_id>/<id>'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo cloudflare logo
    Viewing docs for Cloudflare v6.20.0
    published on Tuesday, Aug 25, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial