Scaling MCP adoption: Our reference architecture for simpler, safer and cheaper enterprise deployments of MCP

This post details the implementation of a security architecture for enterprise-wide adoption of Model Context Protocol (MCP) and agentic workflows. It introduces two new concepts: Code Mode with MCP server portals to reduce token costs by enabling progressive tool disclosure and dynamic JavaScript execution, and the use of Cloudflare Gateway for Shadow MCP detection to identify unauthorized remote MCP servers. The post also describes the deployment of remote MCP servers on Cloudflare's developer platform for better visibility and control, and the integration of Cloudflare Access for authentication and authorization of MCP servers. MCP server portals are presented as a solution for discovery, centralized logging, policy enforcement, and data loss prevention.