What changed
No action needed unless you validate responses against a closed schema.
Affects GET /accounts/{account_id}/access/ai-controls/mcp/portals/{id}.
Who is affected
Code that reads GET /accounts/{account_id}/access/ai-controls/mcp/portals/{id} (result.servers[].updated_prompts[].server_enabled).
Before and after
| Where | Before | After |
|---|---|---|
| GET /accounts/{account_id}/access/ai-controls/mcp/portals/{id} · result.servers[].updated_prompts[].server_enabled | absent | present |
| POST /accounts/{account_id}/access/ai-controls/mcp/portals · result.servers[].updated_prompts[].server_enabled | absent | present |
| PUT /accounts/{account_id}/access/ai-controls/mcp/portals/{id} · result.servers[].updated_prompts[].server_enabled | absent | present |
Based on Cloudflare’s published API specification. How severity is decided.