Skip to content

[Access] Add Terraform configuration guide for MCP server portals#31004

Open
kennyj42 wants to merge 1 commit into
cloudflare:productionfrom
kennyj42:kjohnson/mcp-portal-terraform-cname
Open

[Access] Add Terraform configuration guide for MCP server portals#31004
kennyj42 wants to merge 1 commit into
cloudflare:productionfrom
kennyj42:kjohnson/mcp-portal-terraform-cname

Conversation

@kennyj42
Copy link
Copy Markdown
Collaborator

What this PR does

Adds a new 'Configure via Terraform' section to the MCP server portals page covering:

  • The cloudflare_zero_trust_access_mcp_server_portal resource
  • A critical warning that Terraform does not auto-create the CNAME record (unlike the dashboard)
  • A complete HCL example showing both the portal resource and the required cloudflare_dns_record CNAME to gateway.agents.cloudflare.com

Why

There is currently zero Terraform coverage for MCP portals. A customer (usespeak.dev) hit 522 errors because the Terraform provider silently skips CNAME creation. This was filed as MCP-108. Internal engineers have also been confused by this gap.

The CNAME must point to gateway.agents.cloudflare.com and be proxied through Cloudflare.

@kennyj42
Copy link
Copy Markdown
Collaborator Author

@GreenStage anything else you think we should add for this? Do we document doing the OAuth for servers anywhere?

@kennyj42 kennyj42 marked this pull request as ready for review May 22, 2026 18:16
@kennyj42 kennyj42 requested review from a team, asamborski and elithrar as code owners May 22, 2026 18:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants