Sign inConnect your agent
infochanged

Cloudflare One, Access - Private MCP server support for MCP server portals

Announced
Tags
Cloudflare-One, Access
Severity
info, set by reef/rss-rule-v1
Source
https://developers.cloudflare.com/changelog/post/2026-09-22-private-mcp-servers/

<p><a href="https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/">MCP server portals</a> can now connect to MCP servers available only on your private network. The portal uses <a href="https://developers.cloudflare.com/cloudflare-one/traffic-controls/">Cloudflare Gateway</a> to reach <a href="https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/cloudflared/connect-private-hostname/">private hostnames</a> and IP addresses without exposing the MCP server to the public Internet.</p> <p>Connect the server network to Cloudflare with <a href="https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/">Cloudflare Tunnel</a>, <a href="https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/">Cloudflare Mesh</a>, or another <a href="https://developers.cloudflare.com/cloudflare-one/networks/connectors/">Cloudflare One connector</a>. Configure a private hostname or CIDR route, then turn on <strong>Route traffic through Cloudflare Gateway</strong> when you add the server. OAuth authorization server endpoints, such as the authorization and token endpoints, must be accessible on the public Internet. If Cloudflare automatically registers the OAuth client through Dynamic Client Registration (DCR), the registration endpoint must also be accessible on the public Internet.</p> <p>For setup instructions, refer to <a href="https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/#connect-a-private-mcp-server">Connect a private MCP server</a>.</p>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.