Cloudflare Gateway identifies MCP requests using protocol-level heuristics. Security teams can use that signal to find shadow MCP traffic, enforce Portal-only access for approved servers, and block direct connections on managed network paths.
Source: [Cloudflare Blog](https://blog.cloudflare.com/mcp-security-updates/)