How does Cloudflare MCP Portals work?

Cloudflare MCP Portals is a cloud-based service that aggregates multiple MCP servers into a unified interface. It runs on Cloudflare's global network and integrates with Cloudflare One for Zero Trust security.

Which solution supports on-premise deployment?

Webrix Agent Access Platform supports on-premise, hybrid, and SaaS deployment options. Cloudflare MCP Portals is cloud-only and cannot be deployed on-premise.

How do the pricing models compare?

Webrix offers transparent enterprise pricing based on your organization's size and requirements. Cloudflare MCP Portals pricing is part of the Cloudflare One suite.

Which solution is better for compliance?

Webrix provides comprehensive audit trails, granular RBAC, and supports compliance frameworks like SOC 2 and HIPAA with on-premise deployment options. Cloudflare offers Zero Trust security but with cloud-only deployment.

Does Webrix detect shadow AI usage?

Yes. Webrix detects unmanaged MCPs, skills, and AI agents across your org—plus a browser extension that enforces governed AI usage. Cloudflare does not offer shadow AI detection.

Can I manage governance via GitHub?

Yes. Webrix supports full infrastructure-as-code governance via GitHub with 2-way sync. Your team can manage MCPs, skills, and plugins through PRs and reviews. Cloudflare uses dashboard-based configuration.

Webrix vs. Cloudflare MCP Portals: Which Enterprise MCP Gateway Is Right for You?

A comprehensive comparison for AI adoption leaders. Webrix delivers shadow AI detection, unified build & runtime guards, infrastructure-as-code governance, and a plugin marketplace. Cloudflare MCP Portals offers Zero Trust gateway with cloud-only deployment.

Last updated: April 2026

Webrix Admin Console

Complete AI governance platform with shadow AI detection, unified guards, plugin marketplace, infrastructure-as-code, and enterprise governance for scaled AI rollout.

Cloudflare MCP Server Portals

Zero Trust gateway that centralizes, secures, and monitors all MCP server connections across your organization.

The Bottom Line

Webrix is a full-stack AI governance platform with shadow AI detection, unified build & runtime guards, infrastructure-as-code via GitHub, and a plugin marketplace for enterprise-wide governance. Cloudflare MCP Portals offers fast, cloud-only deployment with Zero Trust security for teams already in the Cloudflare ecosystem.

Best for Webrix

Enterprises (500-5,000+ employees) needing shadow AI detection, unified guards, infrastructure-as-code governance, and a plugin marketplace.

Best for Cloudflare

Organizations on Cloudflare One wanting fast, cloud-hosted MCP aggregation for specific teams.

Key Differentiator

Webrix detects shadow AI, enforces unified guards at build & runtime, and lets you manage governance as code via GitHub. Cloudflare provides Zero Trust access for teams already on Cloudflare One.

Feature Comparison

Feature	Webrix Agent Access Platform	Cloudflare MCP Server Portals
Deployment	On your cloud, on-premise, or SaaS	Cloud-only (SaaS)
Authentication	OAuth2, OIDC, SAML SSO, API Tokens, JWT, Client Credentials, Server-to-Server	SSO via Cloudflare Access
Identity & Access Control	RBAC, SCIM, Groups, Permission Policies, Provisioning & Deprovisioning	Access policies, Identity provider integration, OAuth authentication
Machine Users	Service accounts for automated workflows, agents and integrations	Not supported
Built-in Connectors	100+ pre-built MCPs	Aggregates your existing MCP servers
Admin Console	Full web-based admin interface	Zero Trust dashboard (AI Controls)
Management	Complete orchestration, audit trails, visibility	Portal creation, sync, reauth, logs
Enterprise Support	24/7 dedicated support, onboarding	Cloudflare support tiers
Dedicated AE	Account Executive drives adoption success	Self-service
Guardrails	Policy-driven limits, audit hooks, token handling	Policy enforcement, AI WAF (planned)
Shadow AI Detection	Detects unmanaged MCPs, skills, and AI agents + browser extension	Not supported
Guards Layer	Unified build & runtime guards, easily extensible	Policy enforcement, AI WAF (planned)
Infrastructure as Code	GitHub-based governance—manage MCPs, skills, plugins via git	Cloudflare dashboard configuration
Plugin Marketplace	Skills, commands, MCPs, hooks—GitHub/GitLab 2-way sync	Not supported
CLI Access	Single CLI installs entire gateway in your IDE	Not supported
Pricing	Transparent enterprise pricing	Cloudflare One pricing
Status	Production (5,000+ employee deployments)	Open Beta

Who Each Solution Is Best For

Webrix is Best For:

Enterprises (500-5,000+ employees) needing to govern AI adoption across departments with strict security and visibility. Ideal if you:

Need shadow AI detection for MCPs, skills, and AI agents

Want unified build & runtime guards—easily extensible

Prefer infrastructure-as-code governance via GitHub

Need a plugin marketplace with GitHub/GitLab sync

Want a single CLI to install your gateway in any IDE

Require on-premise or hybrid deployment

Are building organization-wide AI adoption programs

Cloudflare MCP Portals is Best For:

Organizations in the Cloudflare ecosystem wanting fast, cloud-based MCP aggregation. Ideal if you:

Already use Cloudflare One for Zero Trust

Need cloud-hosted deployment only

Have existing MCP servers to unify

Prioritize speed over comprehensive governance

Are comfortable with beta technology

Have technical teams for infrastructure management

Deployment Flexibility

Different organizations have different requirements around data sovereignty, regulatory compliance, and infrastructure preferences. The ideal solution accommodates your existing infrastructure rather than forcing you to change it.

Webrix offers maximum deployment flexibility:

On-Premise Deployment: Self-hosted in your data center or private cloud (AWS, Azure, GCP)

SaaS Deployment: Fully managed by Webrix in SOC 2 compliant infrastructure

Hybrid Model: Some components on-prem (e.g., connectors to internal systems) with cloud management

Air-Gapped Support: Deployment in disconnected environments for maximum security

Multi-Region: Deploy across multiple regions for compliance and performance

Single-Tenant Options: Dedicated infrastructure for organizations with isolation requirements

Cloudflare provides cloud-only deployment:

Cloud-Hosted SaaS: MCP Portals run entirely in Cloudflare's global network

Cloudflare One Integration: Leverages Cloudflare's edge network for performance

No Self-Hosting: Cannot be deployed on-premise or in private cloud

Security & Governance

Enterprise AI adoption requires robust security controls that go beyond basic authentication. The right solution combines identity management, access control, audit trails, and credential vaulting to deliver secure, governed AI rollout at scale.

Webrix delivers comprehensive AI-native security:

Shadow AI Detection: Discover unmanaged MCPs, skills, and AI agents org-wide

Browser Extension: Enforce governed AI usage wherever employees work

Unified Guards: Build & runtime policy enforcement, easily extensible

SSO & SCIM: Enterprise identity management with automated provisioning

Audit Trails: Complete activity logs for compliance (SOC 2, HIPAA)

Cloudflare focuses on Zero Trust access:

Cloudflare Access: SSO integration via existing Identity Providers

Policy Enforcement: Centralized access policies for MCP connections

Comprehensive Logging: Aggregated MCP request logs across all servers

Cloud-Only: No on-premise deployment for air-gapped or regulated environments

AI WAF: Planned feature for prompt injection protection (not yet available)

Connectors & MCP Library

The value of an MCP gateway depends on how quickly teams can connect their tools. Pre-built connectors and extensibility determine adoption velocity and long-term flexibility.

Webrix provides 100+ pre-built connectors with custom MCP support:

Plugin Marketplace: Skills, commands, MCPs, hooks—all in one place

GitHub/GitLab Sync: 2-way sync for Claude, Codex, Cursor integration

API-to-MCP: Turn any REST API into a governed MCP in minutes

CLI Access: Single CLI installs your entire gateway in any IDE

Employee-Driven: Let teams propose new plugins for org-wide approval

Cloudflare aggregates your existing MCP servers:

MCP Server Aggregation: Unifies multiple existing MCP servers behind one endpoint

Bring Your Own MCPs: Requires teams to build or source their own MCP servers

Single Portal Endpoint: Simplifies user configuration with one URL for all servers

No Pre-built Connectors: Does not include ready-to-use integrations

Employee Experience

The employee experience determines adoption rates. The right solution makes it effortless for teams to discover, connect, and start using AI with approved tools—while maintaining security and governance.

Webrix provides a unified Employee Connect panel:

Employee Connect Panel: Browse MCPs, skills, commands, and plugins

One-Click Integration: Connect any approved AI agent (Cursor, Claude, Codex) instantly

Single CLI: Install your entire gateway in your favorite IDE

Browser Extension: Governed AI usage enforced wherever you work

Self-Service Discovery: Browse and enable approved plugins without IT intervention

Cloudflare provides portal URL access:

Portal URL: Single endpoint with access to pre-approved MCP servers

Simplified Configuration: Load all authorized servers from one URL

Policy-Enforced Access: Zero Trust policies control which tools users can access

No Visual Interface: Configuration is URL-based, not a user-friendly panel

Support & Onboarding

Deployment speed and ongoing support determine time-to-value. The right partner helps you succeed from day one.

Webrix provides dedicated success resources:

Dedicated Technical Account Executive: Assigned to drive your organization's AI adoption success

Rapid Deployment: Most deployments completed within days, not months

24/7 Support: Direct access via mutual Slack channel for real-time assistance

Proactive Guidance: Strategic counsel on rollout, governance, and optimization

Cloudflare support varies by account tier:

Tier-Based Support: Access depends on your Cloudflare One plan (Free, Pro, Business, Enterprise)

Self-Service Model: Community forums and documentation for lower tiers

Enterprise Support: Priority support available for Enterprise accounts

Open Beta Status: MCP Portals currently in beta with evolving support resources

Infrastructure as Code

Manage your AI governance process the way your team already works—with git.

Webrix offers full infrastructure-as-code governance:

GitHub-Native: Manage MCPs, skills, plugins, and policies via git

2-Way Sync: Changes in GitHub flow to Webrix and back

Team Workflows: PRs, reviews, and approvals for governance changes

Claude/Codex/Cursor: Integrate directly from your repo

Cloudflare provides dashboard-based configuration:

Web Dashboard: Configure via Cloudflare One console

API Access: Programmatic configuration available

No Git Integration: No native git-based governance workflow

Cloudflare Ecosystem: Managed within Cloudflare's platform

FAQs

Yes, Webrix supports on-premise, hybrid, and SaaS deployment options—ideal for regulated industries (healthcare, finance) requiring data sovereignty. Cloudflare MCP Portals is cloud-only SaaS, which works well for organizations comfortable with cloud-hosted solutions.