
4/14/2026 · Sharon Goldberg, Matt Carey, Ivan Anguiano
What this post added
This post introduces a reference architecture for securing enterprise deployments of Model Context Protocol (MCP) and agentic workflows. It details the use of remote MCP servers hosted on Cloudflare's developer platform for better visibility and control, secured by Cloudflare Access for authentication. MCP server portals are introduced for centralized discovery, governance, and data loss prevention. A key contribution is the 'Code Mode' pattern for MCP server portals, which collapses upstream MCP servers into two tools (`portal_codemode_search` and `portal_codemode_execute`) to drastically reduce token costs by enabling on-demand tool discovery and execution within a sandboxed environment powered by Dynamic Workers.