What changed
No action needed unless you validate responses against a closed schema.
Affects POST /accounts/{account_id}/access/ai-controls/mcp/portals.
Who is affected
Code that reads POST /accounts/{account_id}/access/ai-controls/mcp/portals (result.servers[].updated_prompts[].portal_enabled).
Before and after
| Where | Before | After |
|---|---|---|
| POST /accounts/{account_id}/access/ai-controls/mcp/portals · result.servers[].updated_prompts[].portal_enabled | absent | present |
| GET /accounts/{account_id}/access/ai-controls/mcp/portals/{id} · result.servers[].updated_prompts[].portal_enabled | absent | present |
| PUT /accounts/{account_id}/access/ai-controls/mcp/portals/{id} · result.servers[].updated_prompts[].portal_enabled | absent | present |
Based on Cloudflare’s published API specification. How severity is decided.