Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Cloudflare Provider
  4. API Docs
  5. ZeroTrustAccessAiControlsMcpServer
Viewing docs for Cloudflare v6.18.0
published on Thursday, Jul 16, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.ZeroTrustAccessAiControlsMcpServer

cloudflare logo
Viewing docs for Cloudflare v6.18.0
published on Thursday, Jul 16, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Accepted Permissions

    • MCP Portals Read
    • MCP Portals Write

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustAccessAiControlsMcpServer = new cloudflare.ZeroTrustAccessAiControlsMcpServer("example_zero_trust_access_ai_controls_mcp_server", {
    accountId: "a86a8f5c339544d7bdc89926de14fb8c",
    zeroTrustAccessAiControlsMcpServerId: "my-mcp-server",
    authType: "unauthenticated",
    hostname: "https://example.com/mcp",
    name: "My MCP Server",
    authCredentials: "auth_credentials",
    description: "This is one remote mcp server",
    isSharedOauthCallbackEnabled: true,
    secureWebGateway: false,
    updatedPrompts: [{
        name: "name",
        alias: "my-custom-alias",
        description: "description",
        enabled: true,
    }],
    updatedTools: [{
        name: "name",
        alias: "my-custom-alias",
        description: "description",
        enabled: true,
    }],
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_access_ai_controls_mcp_server = cloudflare.ZeroTrustAccessAiControlsMcpServer("example_zero_trust_access_ai_controls_mcp_server",
    account_id="a86a8f5c339544d7bdc89926de14fb8c",
    zero_trust_access_ai_controls_mcp_server_id="my-mcp-server",
    auth_type="unauthenticated",
    hostname="https://example.com/mcp",
    name="My MCP Server",
    auth_credentials="auth_credentials",
    description="This is one remote mcp server",
    is_shared_oauth_callback_enabled=True,
    secure_web_gateway=False,
    updated_prompts=[{
        "name": "name",
        "alias": "my-custom-alias",
        "description": "description",
        "enabled": True,
    }],
    updated_tools=[{
        "name": "name",
        "alias": "my-custom-alias",
        "description": "description",
        "enabled": True,
    }])

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.NewZeroTrustAccessAiControlsMcpServer(ctx, "example_zero_trust_access_ai_controls_mcp_server", &cloudflare.ZeroTrustAccessAiControlsMcpServerArgs{
			AccountId:                            pulumi.String("a86a8f5c339544d7bdc89926de14fb8c"),
			ZeroTrustAccessAiControlsMcpServerId: pulumi.String("my-mcp-server"),
			AuthType:                             pulumi.String("unauthenticated"),
			Hostname:                             pulumi.String("https://example.com/mcp"),
			Name:                                 pulumi.String("My MCP Server"),
			AuthCredentials:                      pulumi.String("auth_credentials"),
			Description:                          pulumi.String("This is one remote mcp server"),
			IsSharedOauthCallbackEnabled:         pulumi.Bool(true),
			SecureWebGateway:                     pulumi.Bool(false),
			UpdatedPrompts: cloudflare.ZeroTrustAccessAiControlsMcpServerUpdatedPromptArray{
				&cloudflare.ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs{
					Name:        pulumi.String("name"),
					Alias:       pulumi.String("my-custom-alias"),
					Description: pulumi.String("description"),
					Enabled:     pulumi.Bool(true),
				},
			},
			UpdatedTools: cloudflare.ZeroTrustAccessAiControlsMcpServerUpdatedToolArray{
				&cloudflare.ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs{
					Name:        pulumi.String("name"),
					Alias:       pulumi.String("my-custom-alias"),
					Description: pulumi.String("description"),
					Enabled:     pulumi.Bool(true),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustAccessAiControlsMcpServer = new Cloudflare.ZeroTrustAccessAiControlsMcpServer("example_zero_trust_access_ai_controls_mcp_server", new()
    {
        AccountId = "a86a8f5c339544d7bdc89926de14fb8c",
        ZeroTrustAccessAiControlsMcpServerId = "my-mcp-server",
        AuthType = "unauthenticated",
        Hostname = "https://example.com/mcp",
        Name = "My MCP Server",
        AuthCredentials = "auth_credentials",
        Description = "This is one remote mcp server",
        IsSharedOauthCallbackEnabled = true,
        SecureWebGateway = false,
        UpdatedPrompts = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs
            {
                Name = "name",
                Alias = "my-custom-alias",
                Description = "description",
                Enabled = true,
            },
        },
        UpdatedTools = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs
            {
                Name = "name",
                Alias = "my-custom-alias",
                Description = "description",
                Enabled = true,
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.ZeroTrustAccessAiControlsMcpServer;
import com.pulumi.cloudflare.ZeroTrustAccessAiControlsMcpServerArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleZeroTrustAccessAiControlsMcpServer = new ZeroTrustAccessAiControlsMcpServer("exampleZeroTrustAccessAiControlsMcpServer", ZeroTrustAccessAiControlsMcpServerArgs.builder()
            .accountId("a86a8f5c339544d7bdc89926de14fb8c")
            .zeroTrustAccessAiControlsMcpServerId("my-mcp-server")
            .authType("unauthenticated")
            .hostname("https://example.com/mcp")
            .name("My MCP Server")
            .authCredentials("auth_credentials")
            .description("This is one remote mcp server")
            .isSharedOauthCallbackEnabled(true)
            .secureWebGateway(false)
            .updatedPrompts(ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs.builder()
                .name("name")
                .alias("my-custom-alias")
                .description("description")
                .enabled(true)
                .build())
            .updatedTools(ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs.builder()
                .name("name")
                .alias("my-custom-alias")
                .description("description")
                .enabled(true)
                .build())
            .build());

    }
}

    resources:
  exampleZeroTrustAccessAiControlsMcpServer:
    type: cloudflare:ZeroTrustAccessAiControlsMcpServer
    name: example_zero_trust_access_ai_controls_mcp_server
    properties:
      accountId: a86a8f5c339544d7bdc89926de14fb8c
      zeroTrustAccessAiControlsMcpServerId: my-mcp-server
      authType: unauthenticated
      hostname: https://example.com/mcp
      name: My MCP Server
      authCredentials: auth_credentials
      description: This is one remote mcp server
      isSharedOauthCallbackEnabled: true
      secureWebGateway: false
      updatedPrompts:
        - name: name
          alias: my-custom-alias
          description: description
          enabled: true
      updatedTools:
        - name: name
          alias: my-custom-alias
          description: description
          enabled: true

    pulumi {
  required_providers {
    cloudflare = {
      source = "pulumi/cloudflare"
    }
  }
}

resource "cloudflare_zerotrustaccessaicontrolsmcpserver" "example_zero_trust_access_ai_controls_mcp_server" {
  account_id                                  = "a86a8f5c339544d7bdc89926de14fb8c"
  zero_trust_access_ai_controls_mcp_server_id = "my-mcp-server"
  auth_type                                   = "unauthenticated"
  hostname                                    = "https://example.com/mcp"
  name                                        = "My MCP Server"
  auth_credentials                            = "auth_credentials"
  description                                 = "This is one remote mcp server"
  is_shared_oauth_callback_enabled            = true
  secure_web_gateway                          = false
  updated_prompts {
    name        = "name"
    alias       = "my-custom-alias"
    description = "description"
    enabled     = true
  }
  updated_tools {
    name        = "name"
    alias       = "my-custom-alias"
    description = "description"
    enabled     = true
  }
}

    Create ZeroTrustAccessAiControlsMcpServer Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ZeroTrustAccessAiControlsMcpServer(name: string, args: ZeroTrustAccessAiControlsMcpServerArgs, opts?: CustomResourceOptions);
    @overload
def ZeroTrustAccessAiControlsMcpServer(resource_name: str,
                                       args: ZeroTrustAccessAiControlsMcpServerArgs,
                                       opts: Optional[ResourceOptions] = None)

@overload
def ZeroTrustAccessAiControlsMcpServer(resource_name: str,
                                       opts: Optional[ResourceOptions] = None,
                                       account_id: Optional[str] = None,
                                       auth_type: Optional[str] = None,
                                       hostname: Optional[str] = None,
                                       name: Optional[str] = None,
                                       zero_trust_access_ai_controls_mcp_server_id: Optional[str] = None,
                                       auth_credentials: Optional[str] = None,
                                       description: Optional[str] = None,
                                       is_shared_oauth_callback_enabled: Optional[bool] = None,
                                       secure_web_gateway: Optional[bool] = None,
                                       updated_prompts: Optional[Sequence[ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs]] = None,
                                       updated_tools: Optional[Sequence[ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs]] = None)
    func NewZeroTrustAccessAiControlsMcpServer(ctx *Context, name string, args ZeroTrustAccessAiControlsMcpServerArgs, opts ...ResourceOption) (*ZeroTrustAccessAiControlsMcpServer, error)
    public ZeroTrustAccessAiControlsMcpServer(string name, ZeroTrustAccessAiControlsMcpServerArgs args, CustomResourceOptions? opts = null)
    public ZeroTrustAccessAiControlsMcpServer(String name, ZeroTrustAccessAiControlsMcpServerArgs args)
public ZeroTrustAccessAiControlsMcpServer(String name, ZeroTrustAccessAiControlsMcpServerArgs args, CustomResourceOptions options)

    type: cloudflare:ZeroTrustAccessAiControlsMcpServer
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "cloudflare_zero_trust_access_ai_controls_mcp_server" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ZeroTrustAccessAiControlsMcpServerArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ZeroTrustAccessAiControlsMcpServerArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ZeroTrustAccessAiControlsMcpServerArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ZeroTrustAccessAiControlsMcpServerArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ZeroTrustAccessAiControlsMcpServerArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var zeroTrustAccessAiControlsMcpServerResource = new Cloudflare.ZeroTrustAccessAiControlsMcpServer("zeroTrustAccessAiControlsMcpServerResource", new()
{
    AccountId = "string",
    AuthType = "string",
    Hostname = "string",
    Name = "string",
    ZeroTrustAccessAiControlsMcpServerId = "string",
    AuthCredentials = "string",
    Description = "string",
    IsSharedOauthCallbackEnabled = false,
    SecureWebGateway = false,
    UpdatedPrompts = new[]
    {
        new Cloudflare.Inputs.ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs
        {
            Name = "string",
            Alias = "string",
            Description = "string",
            Enabled = false,
        },
    },
    UpdatedTools = new[]
    {
        new Cloudflare.Inputs.ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs
        {
            Name = "string",
            Alias = "string",
            Description = "string",
            Enabled = false,
        },
    },
});

    example, err := cloudflare.NewZeroTrustAccessAiControlsMcpServer(ctx, "zeroTrustAccessAiControlsMcpServerResource", &cloudflare.ZeroTrustAccessAiControlsMcpServerArgs{
	AccountId:                            pulumi.String("string"),
	AuthType:                             pulumi.String("string"),
	Hostname:                             pulumi.String("string"),
	Name:                                 pulumi.String("string"),
	ZeroTrustAccessAiControlsMcpServerId: pulumi.String("string"),
	AuthCredentials:                      pulumi.String("string"),
	Description:                          pulumi.String("string"),
	IsSharedOauthCallbackEnabled:         pulumi.Bool(false),
	SecureWebGateway:                     pulumi.Bool(false),
	UpdatedPrompts: cloudflare.ZeroTrustAccessAiControlsMcpServerUpdatedPromptArray{
		&cloudflare.ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs{
			Name:        pulumi.String("string"),
			Alias:       pulumi.String("string"),
			Description: pulumi.String("string"),
			Enabled:     pulumi.Bool(false),
		},
	},
	UpdatedTools: cloudflare.ZeroTrustAccessAiControlsMcpServerUpdatedToolArray{
		&cloudflare.ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs{
			Name:        pulumi.String("string"),
			Alias:       pulumi.String("string"),
			Description: pulumi.String("string"),
			Enabled:     pulumi.Bool(false),
		},
	},
})

    resource "cloudflare_zero_trust_access_ai_controls_mcp_server" "zeroTrustAccessAiControlsMcpServerResource" {
  lifecycle {
    create_before_destroy = true
  }
  account_id                                  = "string"
  auth_type                                   = "string"
  hostname                                    = "string"
  name                                        = "string"
  zero_trust_access_ai_controls_mcp_server_id = "string"
  auth_credentials                            = "string"
  description                                 = "string"
  is_shared_oauth_callback_enabled            = false
  secure_web_gateway                          = false
  updated_prompts {
    name        = "string"
    alias       = "string"
    description = "string"
    enabled     = false
  }
  updated_tools {
    name        = "string"
    alias       = "string"
    description = "string"
    enabled     = false
  }
}

    var zeroTrustAccessAiControlsMcpServerResource = new ZeroTrustAccessAiControlsMcpServer("zeroTrustAccessAiControlsMcpServerResource", ZeroTrustAccessAiControlsMcpServerArgs.builder()
    .accountId("string")
    .authType("string")
    .hostname("string")
    .name("string")
    .zeroTrustAccessAiControlsMcpServerId("string")
    .authCredentials("string")
    .description("string")
    .isSharedOauthCallbackEnabled(false)
    .secureWebGateway(false)
    .updatedPrompts(ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs.builder()
        .name("string")
        .alias("string")
        .description("string")
        .enabled(false)
        .build())
    .updatedTools(ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs.builder()
        .name("string")
        .alias("string")
        .description("string")
        .enabled(false)
        .build())
    .build());

    zero_trust_access_ai_controls_mcp_server_resource = cloudflare.ZeroTrustAccessAiControlsMcpServer("zeroTrustAccessAiControlsMcpServerResource",
    account_id="string",
    auth_type="string",
    hostname="string",
    name="string",
    zero_trust_access_ai_controls_mcp_server_id="string",
    auth_credentials="string",
    description="string",
    is_shared_oauth_callback_enabled=False,
    secure_web_gateway=False,
    updated_prompts=[{
        "name": "string",
        "alias": "string",
        "description": "string",
        "enabled": False,
    }],
    updated_tools=[{
        "name": "string",
        "alias": "string",
        "description": "string",
        "enabled": False,
    }])

    const zeroTrustAccessAiControlsMcpServerResource = new cloudflare.ZeroTrustAccessAiControlsMcpServer("zeroTrustAccessAiControlsMcpServerResource", {
    accountId: "string",
    authType: "string",
    hostname: "string",
    name: "string",
    zeroTrustAccessAiControlsMcpServerId: "string",
    authCredentials: "string",
    description: "string",
    isSharedOauthCallbackEnabled: false,
    secureWebGateway: false,
    updatedPrompts: [{
        name: "string",
        alias: "string",
        description: "string",
        enabled: false,
    }],
    updatedTools: [{
        name: "string",
        alias: "string",
        description: "string",
        enabled: false,
    }],
});

    type: cloudflare:ZeroTrustAccessAiControlsMcpServer
properties:
    accountId: string
    authCredentials: string
    authType: string
    description: string
    hostname: string
    isSharedOauthCallbackEnabled: false
    name: string
    secureWebGateway: false
    updatedPrompts:
        - alias: string
          description: string
          enabled: false
          name: string
    updatedTools:
        - alias: string
          description: string
          enabled: false
          name: string
    zeroTrustAccessAiControlsMcpServerId: string

    ZeroTrustAccessAiControlsMcpServer Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ZeroTrustAccessAiControlsMcpServer resource accepts the following input properties:

    AccountId string
    AuthType string
    Available values: "oauth", "bearer", "unauthenticated".
    Hostname string
    Name string
    ZeroTrustAccessAiControlsMcpServerId string
    server id
    AuthCredentials string
    Description string
    IsSharedOauthCallbackEnabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    SecureWebGateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    UpdatedPrompts List<ZeroTrustAccessAiControlsMcpServerUpdatedPrompt>
    UpdatedTools List<ZeroTrustAccessAiControlsMcpServerUpdatedTool>
    AccountId string
    AuthType string
    Available values: "oauth", "bearer", "unauthenticated".
    Hostname string
    Name string
    ZeroTrustAccessAiControlsMcpServerId string
    server id
    AuthCredentials string
    Description string
    IsSharedOauthCallbackEnabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    SecureWebGateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    UpdatedPrompts []ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs
    UpdatedTools []ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs
    account_id string
    auth_type string
    Available values: "oauth", "bearer", "unauthenticated".
    hostname string
    name string
    zero_trust_access_ai_controls_mcp_server_id string
    server id
    auth_credentials string
    description string
    is_shared_oauth_callback_enabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    secure_web_gateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    updated_prompts list(object)
    updated_tools list(object)
    accountId String
    authType String
    Available values: "oauth", "bearer", "unauthenticated".
    hostname String
    name String
    zeroTrustAccessAiControlsMcpServerId String
    server id
    authCredentials String
    description String
    isSharedOauthCallbackEnabled Boolean
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    secureWebGateway Boolean
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    updatedPrompts List<ZeroTrustAccessAiControlsMcpServerUpdatedPrompt>
    updatedTools List<ZeroTrustAccessAiControlsMcpServerUpdatedTool>
    accountId string
    authType string
    Available values: "oauth", "bearer", "unauthenticated".
    hostname string
    name string
    zeroTrustAccessAiControlsMcpServerId string
    server id
    authCredentials string
    description string
    isSharedOauthCallbackEnabled boolean
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    secureWebGateway boolean
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    updatedPrompts ZeroTrustAccessAiControlsMcpServerUpdatedPrompt[]
    updatedTools ZeroTrustAccessAiControlsMcpServerUpdatedTool[]
    account_id str
    auth_type str
    Available values: "oauth", "bearer", "unauthenticated".
    hostname str
    name str
    zero_trust_access_ai_controls_mcp_server_id str
    server id
    auth_credentials str
    description str
    is_shared_oauth_callback_enabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    secure_web_gateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    updated_prompts Sequence[ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs]
    updated_tools Sequence[ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs]
    accountId String
    authType String
    Available values: "oauth", "bearer", "unauthenticated".
    hostname String
    name String
    zeroTrustAccessAiControlsMcpServerId String
    server id
    authCredentials String
    description String
    isSharedOauthCallbackEnabled Boolean
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    secureWebGateway Boolean
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    updatedPrompts List<Property Map>
    updatedTools List<Property Map>

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ZeroTrustAccessAiControlsMcpServer resource produces the following output properties:

    CreatedAt string
    CreatedBy string
    Error string
    ErrorDetails ZeroTrustAccessAiControlsMcpServerErrorDetails
    Id string
    The provider-assigned unique ID for this managed resource.
    LastSuccessfulSync string
    LastSynced string
    ModifiedAt string
    ModifiedBy string
    Prompts List<ImmutableDictionary<string, string>>
    Status string
    Tools List<ImmutableDictionary<string, string>>
    CreatedAt string
    CreatedBy string
    Error string
    ErrorDetails ZeroTrustAccessAiControlsMcpServerErrorDetails
    Id string
    The provider-assigned unique ID for this managed resource.
    LastSuccessfulSync string
    LastSynced string
    ModifiedAt string
    ModifiedBy string
    Prompts []map[string]string
    Status string
    Tools []map[string]string
    created_at string
    created_by string
    error string
    error_details object
    id string
    The provider-assigned unique ID for this managed resource.
    last_successful_sync string
    last_synced string
    modified_at string
    modified_by string
    prompts list(map(string))
    status string
    tools list(map(string))
    createdAt String
    createdBy String
    error String
    errorDetails ZeroTrustAccessAiControlsMcpServerErrorDetails
    id String
    The provider-assigned unique ID for this managed resource.
    lastSuccessfulSync String
    lastSynced String
    modifiedAt String
    modifiedBy String
    prompts List<Map<String,String>>
    status String
    tools List<Map<String,String>>
    createdAt string
    createdBy string
    error string
    errorDetails ZeroTrustAccessAiControlsMcpServerErrorDetails
    id string
    The provider-assigned unique ID for this managed resource.
    lastSuccessfulSync string
    lastSynced string
    modifiedAt string
    modifiedBy string
    prompts {[key: string]: string}[]
    status string
    tools {[key: string]: string}[]
    created_at str
    created_by str
    error str
    error_details ZeroTrustAccessAiControlsMcpServerErrorDetails
    id str
    The provider-assigned unique ID for this managed resource.
    last_successful_sync str
    last_synced str
    modified_at str
    modified_by str
    prompts Sequence[Mapping[str, str]]
    status str
    tools Sequence[Mapping[str, str]]
    createdAt String
    createdBy String
    error String
    errorDetails Property Map
    id String
    The provider-assigned unique ID for this managed resource.
    lastSuccessfulSync String
    lastSynced String
    modifiedAt String
    modifiedBy String
    prompts List<Map<String>>
    status String
    tools List<Map<String>>

    Look up Existing ZeroTrustAccessAiControlsMcpServer Resource

    Get an existing ZeroTrustAccessAiControlsMcpServer resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ZeroTrustAccessAiControlsMcpServerState, opts?: CustomResourceOptions): ZeroTrustAccessAiControlsMcpServer
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        auth_credentials: Optional[str] = None,
        auth_type: Optional[str] = None,
        created_at: Optional[str] = None,
        created_by: Optional[str] = None,
        description: Optional[str] = None,
        error: Optional[str] = None,
        error_details: Optional[ZeroTrustAccessAiControlsMcpServerErrorDetailsArgs] = None,
        hostname: Optional[str] = None,
        is_shared_oauth_callback_enabled: Optional[bool] = None,
        last_successful_sync: Optional[str] = None,
        last_synced: Optional[str] = None,
        modified_at: Optional[str] = None,
        modified_by: Optional[str] = None,
        name: Optional[str] = None,
        prompts: Optional[Sequence[Mapping[str, str]]] = None,
        secure_web_gateway: Optional[bool] = None,
        status: Optional[str] = None,
        tools: Optional[Sequence[Mapping[str, str]]] = None,
        updated_prompts: Optional[Sequence[ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs]] = None,
        updated_tools: Optional[Sequence[ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs]] = None,
        zero_trust_access_ai_controls_mcp_server_id: Optional[str] = None) -> ZeroTrustAccessAiControlsMcpServer
    func GetZeroTrustAccessAiControlsMcpServer(ctx *Context, name string, id IDInput, state *ZeroTrustAccessAiControlsMcpServerState, opts ...ResourceOption) (*ZeroTrustAccessAiControlsMcpServer, error)
    public static ZeroTrustAccessAiControlsMcpServer Get(string name, Input<string> id, ZeroTrustAccessAiControlsMcpServerState? state, CustomResourceOptions? opts = null)
    public static ZeroTrustAccessAiControlsMcpServer get(String name, Output<String> id, ZeroTrustAccessAiControlsMcpServerState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:ZeroTrustAccessAiControlsMcpServer    get:      id: ${id}
    import {
  to = cloudflare_zero_trust_access_ai_controls_mcp_server.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    AuthCredentials string
    AuthType string
    Available values: "oauth", "bearer", "unauthenticated".
    CreatedAt string
    CreatedBy string
    Description string
    Error string
    ErrorDetails ZeroTrustAccessAiControlsMcpServerErrorDetails
    Hostname string
    IsSharedOauthCallbackEnabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    LastSuccessfulSync string
    LastSynced string
    ModifiedAt string
    ModifiedBy string
    Name string
    Prompts List<ImmutableDictionary<string, string>>
    SecureWebGateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    Status string
    Tools List<ImmutableDictionary<string, string>>
    UpdatedPrompts List<ZeroTrustAccessAiControlsMcpServerUpdatedPrompt>
    UpdatedTools List<ZeroTrustAccessAiControlsMcpServerUpdatedTool>
    ZeroTrustAccessAiControlsMcpServerId string
    server id
    AccountId string
    AuthCredentials string
    AuthType string
    Available values: "oauth", "bearer", "unauthenticated".
    CreatedAt string
    CreatedBy string
    Description string
    Error string
    ErrorDetails ZeroTrustAccessAiControlsMcpServerErrorDetailsArgs
    Hostname string
    IsSharedOauthCallbackEnabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    LastSuccessfulSync string
    LastSynced string
    ModifiedAt string
    ModifiedBy string
    Name string
    Prompts []map[string]string
    SecureWebGateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    Status string
    Tools []map[string]string
    UpdatedPrompts []ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs
    UpdatedTools []ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs
    ZeroTrustAccessAiControlsMcpServerId string
    server id
    account_id string
    auth_credentials string
    auth_type string
    Available values: "oauth", "bearer", "unauthenticated".
    created_at string
    created_by string
    description string
    error string
    error_details object
    hostname string
    is_shared_oauth_callback_enabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    last_successful_sync string
    last_synced string
    modified_at string
    modified_by string
    name string
    prompts list(map(string))
    secure_web_gateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    status string
    tools list(map(string))
    updated_prompts list(object)
    updated_tools list(object)
    zero_trust_access_ai_controls_mcp_server_id string
    server id
    accountId String
    authCredentials String
    authType String
    Available values: "oauth", "bearer", "unauthenticated".
    createdAt String
    createdBy String
    description String
    error String
    errorDetails ZeroTrustAccessAiControlsMcpServerErrorDetails
    hostname String
    isSharedOauthCallbackEnabled Boolean
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    lastSuccessfulSync String
    lastSynced String
    modifiedAt String
    modifiedBy String
    name String
    prompts List<Map<String,String>>
    secureWebGateway Boolean
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    status String
    tools List<Map<String,String>>
    updatedPrompts List<ZeroTrustAccessAiControlsMcpServerUpdatedPrompt>
    updatedTools List<ZeroTrustAccessAiControlsMcpServerUpdatedTool>
    zeroTrustAccessAiControlsMcpServerId String
    server id
    accountId string
    authCredentials string
    authType string
    Available values: "oauth", "bearer", "unauthenticated".
    createdAt string
    createdBy string
    description string
    error string
    errorDetails ZeroTrustAccessAiControlsMcpServerErrorDetails
    hostname string
    isSharedOauthCallbackEnabled boolean
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    lastSuccessfulSync string
    lastSynced string
    modifiedAt string
    modifiedBy string
    name string
    prompts {[key: string]: string}[]
    secureWebGateway boolean
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    status string
    tools {[key: string]: string}[]
    updatedPrompts ZeroTrustAccessAiControlsMcpServerUpdatedPrompt[]
    updatedTools ZeroTrustAccessAiControlsMcpServerUpdatedTool[]
    zeroTrustAccessAiControlsMcpServerId string
    server id
    account_id str
    auth_credentials str
    auth_type str
    Available values: "oauth", "bearer", "unauthenticated".
    created_at str
    created_by str
    description str
    error str
    error_details ZeroTrustAccessAiControlsMcpServerErrorDetailsArgs
    hostname str
    is_shared_oauth_callback_enabled bool
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    last_successful_sync str
    last_synced str
    modified_at str
    modified_by str
    name str
    prompts Sequence[Mapping[str, str]]
    secure_web_gateway bool
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    status str
    tools Sequence[Mapping[str, str]]
    updated_prompts Sequence[ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs]
    updated_tools Sequence[ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs]
    zero_trust_access_ai_controls_mcp_server_id str
    server id
    accountId String
    authCredentials String
    authType String
    Available values: "oauth", "bearer", "unauthenticated".
    createdAt String
    createdBy String
    description String
    error String
    errorDetails Property Map
    hostname String
    isSharedOauthCallbackEnabled Boolean
    When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirectUri for upstream on-behalf OAuth, instead of the customer portal hostname. New public server creates default to true; existing servers default to false from migration until explicitly updated. Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
    lastSuccessfulSync String
    lastSynced String
    modifiedAt String
    modifiedBy String
    name String
    prompts List<Map<String>>
    secureWebGateway Boolean
    Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
    status String
    tools List<Map<String>>
    updatedPrompts List<Property Map>
    updatedTools List<Property Map>
    zeroTrustAccessAiControlsMcpServerId String
    server id

    Supporting Types

    ZeroTrustAccessAiControlsMcpServerErrorDetails, ZeroTrustAccessAiControlsMcpServerErrorDetailsArgs

    Cause string
    Underlying error message
    IsUpstream bool
    True = MCP server returned an error. False = couldn't reach the server
    McpCode double
    MCP protocol error code
    Retryable bool
    Whether the error is transient and worth retrying
    StatusCode double
    HTTP status code from the server
    Cause string
    Underlying error message
    IsUpstream bool
    True = MCP server returned an error. False = couldn't reach the server
    McpCode float64
    MCP protocol error code
    Retryable bool
    Whether the error is transient and worth retrying
    StatusCode float64
    HTTP status code from the server
    cause string
    Underlying error message
    is_upstream bool
    True = MCP server returned an error. False = couldn't reach the server
    mcp_code number
    MCP protocol error code
    retryable bool
    Whether the error is transient and worth retrying
    status_code number
    HTTP status code from the server
    cause String
    Underlying error message
    isUpstream Boolean
    True = MCP server returned an error. False = couldn't reach the server
    mcpCode Double
    MCP protocol error code
    retryable Boolean
    Whether the error is transient and worth retrying
    statusCode Double
    HTTP status code from the server
    cause string
    Underlying error message
    isUpstream boolean
    True = MCP server returned an error. False = couldn't reach the server
    mcpCode number
    MCP protocol error code
    retryable boolean
    Whether the error is transient and worth retrying
    statusCode number
    HTTP status code from the server
    cause str
    Underlying error message
    is_upstream bool
    True = MCP server returned an error. False = couldn't reach the server
    mcp_code float
    MCP protocol error code
    retryable bool
    Whether the error is transient and worth retrying
    status_code float
    HTTP status code from the server
    cause String
    Underlying error message
    isUpstream Boolean
    True = MCP server returned an error. False = couldn't reach the server
    mcpCode Number
    MCP protocol error code
    retryable Boolean
    Whether the error is transient and worth retrying
    statusCode Number
    HTTP status code from the server

    ZeroTrustAccessAiControlsMcpServerUpdatedPrompt, ZeroTrustAccessAiControlsMcpServerUpdatedPromptArgs

    Name string
    Alias string
    Description string
    Enabled bool
    Name string
    Alias string
    Description string
    Enabled bool
    name string
    alias string
    description string
    enabled bool
    name String
    alias String
    description String
    enabled Boolean
    name string
    alias string
    description string
    enabled boolean
    name String
    alias String
    description String
    enabled Boolean

    ZeroTrustAccessAiControlsMcpServerUpdatedTool, ZeroTrustAccessAiControlsMcpServerUpdatedToolArgs

    Name string
    Alias string
    Description string
    Enabled bool
    Name string
    Alias string
    Description string
    Enabled bool
    name string
    alias string
    description string
    enabled bool
    name String
    alias String
    description String
    enabled Boolean
    name string
    alias string
    description string
    enabled boolean
    name String
    alias String
    description String
    enabled Boolean

    Import

    $ pulumi import cloudflare:index/zeroTrustAccessAiControlsMcpServer:ZeroTrustAccessAiControlsMcpServer example '<account_id>/<id>'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Viewing docs for Cloudflare v6.18.0
    published on Thursday, Jul 16, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial