How Cloudflare detects MCP traffic and helps secure it
Cloudflare Gateway now detects Model Context Protocol traffic via protocol-level heuristics to expose shadow MCP usage and enforce approved-server access.
Cloudflare Gateway identifies Model Context Protocol (MCP) requests using protocol-level heuristics. Security teams can use the signal to discover shadow MCP traffic on managed networks, enforce Portal-only access for approved MCP servers, and block direct connections. The updates extend standard gateway and zero-trust controls to AI agent traffic.
- Gateway flags MCP requests using protocol-level heuristics
- Enables discovery of shadow MCP traffic on managed networks
- Supports Portal-only enforcement for approved MCP servers and blocking direct connections
- Vendors
- Cloudflare
From the original article

Cloudflare Gateway identifies MCP requests using protocol-level heuristics. Security teams can use that signal to find shadow MCP traffic, enforce Portal-only access for approved servers, and block direct connections on managed network paths.
By AJ Gerstenhaber · blog.cloudflare.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.