Cloudflare Gateway adds MCP traffic detection and an AI Security dashboard

Cloudflare announced on 2026-08-12 that Gateway, the secure web gateway in its Cloudflare One suite, now detects Model Context Protocol traffic automatically. Per the changelog entry, detection works by "inspecting protocol-specific headers and payload characteristics" rather than relying on destination lists.

The detection feeds a new HTTP policy selector named Is MCP, exposed in the API as experimental.is_mcp and marked beta. Administrators can use it to allow, block, or isolate MCP requests; the entry's example policy blocks MCP traffic that bypasses an organization's approved MCP portals. Cloudflare notes the selector "may change before general availability."

The same entry introduces an AI Security dashboard under Insights & Logs > Dashboards. It reports total MCP request volume, unique users, and unique MCP servers observed on the network, a timeseries of unique MCP servers over time, and a summary of which Gateway policies target MCP traffic.

A second Gateway entry published the same day adds a Traffic Source selector to HTTP and Network policies. Among its recognized on-ramps is "Traffic from an MCP portal," with the API value mcp_portal, so policies can treat portal-mediated MCP traffic differently from traffic arriving through the Cloudflare One client or proxy endpoints.