AI Controls
AI ControlsMcp
AI ControlsMcpPortals
List MCP Portals
Create a new MCP Portal
Read details of an MCP Portal
Update an MCP Portal
Delete an MCP Portal
ModelsExpand Collapse
PortalListResponse object { id, hostname, name, 9 more }
servers: array of object { id, auth_type, hostname, 22 more }
auth_type: "oauth" or "bearer" or "unauthenticated"Authentication method used to connect to the upstream MCP server.
Authentication method used to connect to the upstream MCP server.
auth_config_summary: optional object { auth_mode, client_secret_version, config, 2 more } Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
authentication_status: optional "not_required" or "required" or "connected" or 2 moreWhether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Hide this server’s tools and prompts by default. To expose specific capabilities, set enabled: true for them in updated_tools or updated_prompts.
When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true.
Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
Deprecated: use code_mode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
code_mode: optional "off" or "opt_in" or "default_on" or "enforced"Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400.
Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400.
PortalCreateResponse object { id, hostname, name, 9 more }
servers: array of object { id, auth_type, hostname, 22 more }
auth_type: "oauth" or "bearer" or "unauthenticated"Authentication method used to connect to the upstream MCP server.
Authentication method used to connect to the upstream MCP server.
auth_config_summary: optional object { auth_mode, client_secret_version, config, 2 more } Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
authentication_status: optional "not_required" or "required" or "connected" or 2 moreWhether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Hide this server’s tools and prompts by default. To expose specific capabilities, set enabled: true for them in updated_tools or updated_prompts.
When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true.
Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
Deprecated: use code_mode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
code_mode: optional "off" or "opt_in" or "default_on" or "enforced"Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400.
Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400.
PortalReadResponse object { id, hostname, name, 9 more }
servers: array of object { id, auth_type, hostname, 22 more }
auth_type: "oauth" or "bearer" or "unauthenticated"Authentication method used to connect to the upstream MCP server.
Authentication method used to connect to the upstream MCP server.
auth_config_summary: optional object { auth_mode, client_secret_version, config, 2 more } Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
authentication_status: optional "not_required" or "required" or "connected" or 2 moreWhether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Hide this server’s tools and prompts by default. To expose specific capabilities, set enabled: true for them in updated_tools or updated_prompts.
When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true.
Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
Deprecated: use code_mode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
code_mode: optional "off" or "opt_in" or "default_on" or "enforced"Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400.
Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400.
PortalUpdateResponse object { id, hostname, name, 9 more }
servers: array of object { id, auth_type, hostname, 22 more }
auth_type: "oauth" or "bearer" or "unauthenticated"Authentication method used to connect to the upstream MCP server.
Authentication method used to connect to the upstream MCP server.
auth_config_summary: optional object { auth_mode, client_secret_version, config, 2 more } Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
authentication_status: optional "not_required" or "required" or "connected" or 2 moreWhether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Hide this server’s tools and prompts by default. To expose specific capabilities, set enabled: true for them in updated_tools or updated_prompts.
When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true.
Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
Deprecated: use code_mode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
code_mode: optional "off" or "opt_in" or "default_on" or "enforced"Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400.
Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400.
PortalDeleteResponse object { id, hostname, name, 8 more }
Deprecated: use code_mode for new integrations. true maps to any non-off Code Mode policy; false maps to code_mode: off. If both fields are sent, they must be consistent or the request returns a 400.
code_mode: optional "off" or "opt_in" or "default_on" or "enforced"Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400.
Code Mode policy for this portal. off: Code Mode is unavailable; query parameters are ignored. opt_in: Code Mode is off by default; clients turn it on with ?codemode=search_and_execute. default_on: Code Mode is on by default; clients can opt out with ?codemode=off. enforced: Code Mode is always on; query parameters are ignored. Defaults to opt_in when omitted on create. If both code_mode and allow_code_mode are sent, they must be consistent or the request returns a 400.
AI ControlsMcpServers
List MCP Servers
Create a new MCP Server
Read the details of an MCP Server
Update an MCP Server
Delete an MCP Server
Sync MCP Server Capabilities
ModelsExpand Collapse
ServerListResponse object { id, auth_type, hostname, 19 more }
auth_type: "oauth" or "bearer" or "unauthenticated"Authentication method used to connect to the upstream MCP server.
Authentication method used to connect to the upstream MCP server.
auth_config_summary: optional object { auth_mode, client_secret_version, config, 2 more } Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
authentication_status: optional "not_required" or "required" or "connected" or 2 moreWhether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true.
Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
updated_prompts: optional array of object { name, alias, description, enabled } Server-wide prompt capability overrides.
Server-wide prompt capability overrides.
ServerCreateResponse object { id, auth_type, hostname, 19 more }
auth_type: "oauth" or "bearer" or "unauthenticated"Authentication method used to connect to the upstream MCP server.
Authentication method used to connect to the upstream MCP server.
auth_config_summary: optional object { auth_mode, client_secret_version, config, 2 more } Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
authentication_status: optional "not_required" or "required" or "connected" or 2 moreWhether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true.
Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
updated_prompts: optional array of object { name, alias, description, enabled } Server-wide prompt capability overrides.
Server-wide prompt capability overrides.
ServerReadResponse object { id, auth_type, hostname, 19 more }
auth_type: "oauth" or "bearer" or "unauthenticated"Authentication method used to connect to the upstream MCP server.
Authentication method used to connect to the upstream MCP server.
auth_config_summary: optional object { auth_mode, client_secret_version, config, 2 more } Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
authentication_status: optional "not_required" or "required" or "connected" or 2 moreWhether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true.
Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
updated_prompts: optional array of object { name, alias, description, enabled } Server-wide prompt capability overrides.
Server-wide prompt capability overrides.
ServerUpdateResponse object { id, auth_type, hostname, 19 more }
auth_type: "oauth" or "bearer" or "unauthenticated"Authentication method used to connect to the upstream MCP server.
Authentication method used to connect to the upstream MCP server.
auth_config_summary: optional object { auth_mode, client_secret_version, config, 2 more } Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
authentication_status: optional "not_required" or "required" or "connected" or 2 moreWhether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true.
Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
updated_prompts: optional array of object { name, alias, description, enabled } Server-wide prompt capability overrides.
Server-wide prompt capability overrides.
ServerDeleteResponse object { id, auth_type, hostname, 19 more }
auth_type: "oauth" or "bearer" or "unauthenticated"Authentication method used to connect to the upstream MCP server.
Authentication method used to connect to the upstream MCP server.
auth_config_summary: optional object { auth_mode, client_secret_version, config, 2 more } Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
Safe subset of auth_credentials surfaced to the dashboard. Includes auth_mode (dcr|manual), has_client_secret, client_secret_version, and the OAuth endpoints + client_id for manual servers. Never includes the secret value.
authentication_status: optional "not_required" or "required" or "connected" or 2 moreWhether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
Whether administrative authentication is required before capabilities can be synced. Manual OAuth is user-managed and has no administrative authentication flow.
When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true.
Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway.
updated_prompts: optional array of object { name, alias, description, enabled } Server-wide prompt capability overrides.
Server-wide prompt capability overrides.