cloudflare 6.2.0 → 6.4.0

package/src/resources/zero-trust/access/ai-controls/mcp/portals.ts

@@ -197,6 +197,17 @@ export namespace PortalCreateResponse {
 
     error?: string;
 
+    error_details?: Server.ErrorDetails;
+
+    /**
+     * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
+     * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
+     * customer portal hostname. New public server creates default to true; existing
+     * servers default to false from migration until explicitly updated. Effective
+     * behavior is gated by the gateway worker's per-env rollout mode KV key.
+     */
+    is_shared_oauth_callback_enabled?: boolean;
+
     last_successful_sync?: string;
 
     last_synced?: string;
@@ -207,6 +218,11 @@ export namespace PortalCreateResponse {
 
     on_behalf?: boolean;
 
+    /**
+     * Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
+     */
+    secure_web_gateway?: boolean;
+
     status?: string;
 
     updated_prompts?: Array<Server.UpdatedPrompt>;
@@ -215,28 +231,59 @@ export namespace PortalCreateResponse {
   }
 
   export namespace Server {
+    export interface ErrorDetails {
+      /**
+       * Underlying error message
+       */
+      cause?: string;
+
+      /**
+       * True = MCP server returned an error. False = couldn't reach the server
+       */
+      is_upstream?: boolean;
+
+      /**
+       * MCP protocol error code
+       */
+      mcp_code?: number;
+
+      /**
+       * Whether the error is transient and worth retrying
+       */
+      retryable?: boolean;
+
+      /**
+       * HTTP status code from the server
+       */
+      status_code?: number;
+    }
+
     export interface UpdatedPrompt {
       name: string;
 
-      description?: string;
-
       enabled?: boolean;
 
       portal_alias?: string;
 
+      portal_description?: string;
+
       server_alias?: string;
+
+      server_description?: string;
     }
 
     export interface UpdatedTool {
       name: string;
 
-      description?: string;
-
       enabled?: boolean;
 
       portal_alias?: string;
 
+      portal_description?: string;
+
       server_alias?: string;
+
+      server_description?: string;
     }
   }
 }
@@ -301,6 +348,17 @@ export namespace PortalUpdateResponse {
 
     error?: string;
 
+    error_details?: Server.ErrorDetails;
+
+    /**
+     * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
+     * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
+     * customer portal hostname. New public server creates default to true; existing
+     * servers default to false from migration until explicitly updated. Effective
+     * behavior is gated by the gateway worker's per-env rollout mode KV key.
+     */
+    is_shared_oauth_callback_enabled?: boolean;
+
     last_successful_sync?: string;
 
     last_synced?: string;
@@ -311,6 +369,11 @@ export namespace PortalUpdateResponse {
 
     on_behalf?: boolean;
 
+    /**
+     * Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
+     */
+    secure_web_gateway?: boolean;
+
     status?: string;
 
     updated_prompts?: Array<Server.UpdatedPrompt>;
@@ -319,28 +382,59 @@ export namespace PortalUpdateResponse {
   }
 
   export namespace Server {
+    export interface ErrorDetails {
+      /**
+       * Underlying error message
+       */
+      cause?: string;
+
+      /**
+       * True = MCP server returned an error. False = couldn't reach the server
+       */
+      is_upstream?: boolean;
+
+      /**
+       * MCP protocol error code
+       */
+      mcp_code?: number;
+
+      /**
+       * Whether the error is transient and worth retrying
+       */
+      retryable?: boolean;
+
+      /**
+       * HTTP status code from the server
+       */
+      status_code?: number;
+    }
+
     export interface UpdatedPrompt {
       name: string;
 
-      description?: string;
-
       enabled?: boolean;
 
       portal_alias?: string;
 
+      portal_description?: string;
+
       server_alias?: string;
+
+      server_description?: string;
     }
 
     export interface UpdatedTool {
       name: string;
 
-      description?: string;
-
       enabled?: boolean;
 
       portal_alias?: string;
 
+      portal_description?: string;
+
       server_alias?: string;
+
+      server_description?: string;
     }
   }
 }
@@ -405,6 +499,17 @@ export namespace PortalListResponse {
 
     error?: string;
 
+    error_details?: Server.ErrorDetails;
+
+    /**
+     * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
+     * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
+     * customer portal hostname. New public server creates default to true; existing
+     * servers default to false from migration until explicitly updated. Effective
+     * behavior is gated by the gateway worker's per-env rollout mode KV key.
+     */
+    is_shared_oauth_callback_enabled?: boolean;
+
     last_successful_sync?: string;
 
     last_synced?: string;
@@ -415,6 +520,11 @@ export namespace PortalListResponse {
 
     on_behalf?: boolean;
 
+    /**
+     * Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
+     */
+    secure_web_gateway?: boolean;
+
     status?: string;
 
     updated_prompts?: Array<Server.UpdatedPrompt>;
@@ -423,28 +533,59 @@ export namespace PortalListResponse {
   }
 
   export namespace Server {
+    export interface ErrorDetails {
+      /**
+       * Underlying error message
+       */
+      cause?: string;
+
+      /**
+       * True = MCP server returned an error. False = couldn't reach the server
+       */
+      is_upstream?: boolean;
+
+      /**
+       * MCP protocol error code
+       */
+      mcp_code?: number;
+
+      /**
+       * Whether the error is transient and worth retrying
+       */
+      retryable?: boolean;
+
+      /**
+       * HTTP status code from the server
+       */
+      status_code?: number;
+    }
+
     export interface UpdatedPrompt {
       name: string;
 
-      description?: string;
-
       enabled?: boolean;
 
       portal_alias?: string;
 
+      portal_description?: string;
+
       server_alias?: string;
+
+      server_description?: string;
     }
 
     export interface UpdatedTool {
       name: string;
 
-      description?: string;
-
       enabled?: boolean;
 
       portal_alias?: string;
 
+      portal_description?: string;
+
       server_alias?: string;
+
+      server_description?: string;
     }
   }
 }
@@ -540,6 +681,17 @@ export namespace PortalReadResponse {
 
     error?: string;
 
+    error_details?: Server.ErrorDetails;
+
+    /**
+     * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
+     * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
+     * customer portal hostname. New public server creates default to true; existing
+     * servers default to false from migration until explicitly updated. Effective
+     * behavior is gated by the gateway worker's per-env rollout mode KV key.
+     */
+    is_shared_oauth_callback_enabled?: boolean;
+
     last_successful_sync?: string;
 
     last_synced?: string;
@@ -550,6 +702,11 @@ export namespace PortalReadResponse {
 
     on_behalf?: boolean;
 
+    /**
+     * Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway
+     */
+    secure_web_gateway?: boolean;
+
     status?: string;
 
     updated_prompts?: Array<Server.UpdatedPrompt>;
@@ -558,28 +715,59 @@ export namespace PortalReadResponse {
   }
 
   export namespace Server {
+    export interface ErrorDetails {
+      /**
+       * Underlying error message
+       */
+      cause?: string;
+
+      /**
+       * True = MCP server returned an error. False = couldn't reach the server
+       */
+      is_upstream?: boolean;
+
+      /**
+       * MCP protocol error code
+       */
+      mcp_code?: number;
+
+      /**
+       * Whether the error is transient and worth retrying
+       */
+      retryable?: boolean;
+
+      /**
+       * HTTP status code from the server
+       */
+      status_code?: number;
+    }
+
     export interface UpdatedPrompt {
       name: string;
 
-      description?: string;
-
       enabled?: boolean;
 
       portal_alias?: string;
 
+      portal_description?: string;
+
       server_alias?: string;
+
+      server_description?: string;
     }
 
     export interface UpdatedTool {
       name: string;
 
-      description?: string;
-
       enabled?: boolean;
 
       portal_alias?: string;
 
+      portal_description?: string;
+
       server_alias?: string;
+
+      server_description?: string;
     }
   }
 }