FeatureApr 17, 2026

Homepage and sign-out for MCP server portals

MCP server portals display a homepage when users visit the portal domain in a browser.

The homepage shows:

The portal name and organization branding
The MCP endpoint URL with a copy button
Per-client connection instructions for Claude Desktop, Workers AI Playground, OpenCode, Windsurf, and other MCP clients

Authenticated users see their email address and a Sign out button. Selecting Sign out revokes all portal-level OAuth grants, deletes upstream server OAuth states, and redirects through Cloudflare Access logout. A confirmation page shows a summary of the revoked sessions.

For more information, refer to MCP server portals.

Read the original announcement

All Access updates →

New strict service token authentication setting for Access
The strict service token authentication setting applies consistent behavior to requests made with service tokens. When the setting is on for a Zero Trust organization, Access handles requests with service token headers as follows:
AccessFeatureOct 2, 2026
Simplified permissions for tagging targets with Access for Infrastructure
You can now tag targets using only the Zero Trust Write API token permission. Previously, tagging targets through the API required both Zero Trust Write and Tag Write permissions on the API token.

Homepage and sign-out for MCP server portals

More from Access

Homepage and sign-out for MCP server portals

More from Access