Gateway MCP protocol detection and AI Security dashboard
Cloudflare Gateway now automatically detects Model Context Protocol (MCP) traffic and includes a new experimental MCP selector for HTTP policies to allow, block, or isolate MCP requests. A new AI security report dashboard provides visibility into MCP usage, including request volume, unique users, MCP servers, and policy targeting data.
Cloudflare Gateway now automatically detects Model Context Protocol (MCP) ↗ traffic flowing through your network. MCP is the standard protocol used by AI agents to connect to external tools and data sources. Gateway identifies MCP requests by inspecting protocol-specific headers and payload characteristics.
MCP policy selector
A new Is MCP selector (experimental.is_mcp) is available in HTTP policies. Use this selector to build Gateway rules that allow, block, or isolate MCP traffic.
This selector is currently in beta and may change before general availability.
For example, the following policy blocks MCP traffic that does not arrive through an approved MCP portal:
| Selector | Operator | Value | Logic | Action |
|---|---|---|---|---|
| Is MCP | is | True | And | Block |
| Traffic Source | is not | MCP portal |
AI security report
A new AI security report dashboard under Insights & Logs > Dashboards provides visibility into MCP usage across your organization. The dashboard includes:
- Total MCP request volume, unique users, and unique MCP servers
- A timeseries chart of unique MCP servers observed over time
- A summary of Gateway policies that target MCP traffic
For more information, refer to HTTP policies.
Source: original entry ↗
More from Cloudflare
Follow Cloudflare to get its new changes in your feed and email digest.
DNS - Configure Advanced Custom Nameservers with nameserver sets
Nameserver sets are now available in beta for Enterprise accounts, allowing you to group custom nameserver names with Cloudflare-assigned IP addresses and assign them to multiple zones. This new approach replaces legacy custom_ns sets with reusable, immutable objects that support up to 3 IPv4 and 3 IPv6 addresses per nameserver and can leverage Advanced anycast network groups for improved resiliency.
Emergency WAF managed rule for active RCE vulnerability
Cloudflare released an emergency WAF update with a new managed rule to block exploitation of a critical remote code execution vulnerability in popular web frameworks. The Generic Rules - Remote Code Execution detection prevents attackers from executing arbitrary system commands via malicious input with invalid path sequences.
Cloudflare API MCP server sends Workers Issues as MCP Events
The Cloudflare API MCP server now exposes Workers Issues as MCP Events through webhook subscriptions, allowing agents to receive real-time notifications when production failures are detected without polling. Clients can subscribe to cloudflare.alert.workers_observability_real_time_issue scoped to an account or individual Worker.