MCP Gateway DatasheetSelection guide · Rev 2026-11-03

In short: Cloudflare scores 5.15 out of 10 and shares seventh place in this guide. Its strongest area is per-call authorization, and its weakest is human approval. Deployment is listed as SaaS. Pricing was not found on the pages read. Each score below has a reason and a dated source.

Features

  • One portal URL for many MCP servers
  • Cloudflare Access identity check at the portal
  • Upstream OAuth handling with optional Cloudflare-hosted callback
  • Service tokens for non-identity clients
  • Portal logs

Specifications

ParameterValueSource
Product typeMCP server portal in Cloudflare One[cf-portals]
Identity checkCloudflare Access policies[cf-portals]
Client authOAuth discovery on 401; service tokens[cf-portals]
AuditPortal logs, Gateway HTTP logs[cf-portals]
Price as publishedNot found on page read[cf-portals]

How does Cloudflare score on each criterion?

CriterionWeightScoreReasonSource
G1 Identity-bound per-call authorization257Cloudflare Access validates the user's identity at the portal, and policies decide which upstream servers that user reaches.[cf-portals]
G2 Credential brokering205The portal completes upstream OAuth and holds client secrets, though users may still log in to each server themselves.[cf-portals]
G3 Human approval and escalation152No human approval step was found on the page read.[cf-portals]
G4 Server registry and discovery105Admins list upstream servers in each portal, but discovery of unregistered servers was not described.[cf-portals]
G5 Audit evidence106Portal logs and Gateway HTTP logs are documented.[cf-portals]
G6 Standards106Clients receive a 401 with OAuth discovery metadata, and non-identity service tokens are supported.[cf-portals]
G7 Deployment and buying clarity104Part of Cloudflare One as SaaS; a price for MCP portals was not found on the page read.[cf-portals]
Total1005.15Sum of score times weight, divided by 100.

Typical deployment

SaaS, inside Cloudflare One.

Pricing as published

Not found on the page read.

Works alongside your identity provider?

Yes. Access can apply instant authentication through a single configured identity provider. [cf-portals]

Frequently asked questions

Does Cloudflare work alongside my identity provider?
Yes. Access can apply instant authentication through a single configured identity provider.
How is Cloudflare deployed?
SaaS, inside Cloudflare One.
What does Cloudflare cost?
Not found on the page read.

How does it compare?

Revision history

RevChange
2026-11-03First issue of this datasheet.

Sources

By The Datasheet desk · Published and reviewed 2026-11-03