# MCP server portals get a homepage and sign-out!

Hey everyone, it's Shiichan! Today Cloudflare Access shipped a small but handy quality-of-life update for MCP server portals, and I want to walk you through it.

## What was announced?

Over on Cloudflare's Changelog, [MCP server portals](https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/) picked up a **homepage** and a **sign-out** flow. MCP server portals let you publish MCP servers together behind [Access](https://developers.cloudflare.com/cloudflare-one/access-controls/policies/), and this update makes opening one in a browser a lot friendlier.

## The story so far

Until now, opening a portal's domain in a browser didn't give you much to work with. You had to keep track yourself of which endpoint to paste into your MCP client.

## What changes

Now when you open the portal domain in a browser, you get a proper [homepage](https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/#portal-homepage):

- The portal name and your organization's branding
- The MCP endpoint URL, with a copy button
- Connection instructions for several MCP clients (Claude Desktop, Workers AI Playground, OpenCode, Windsurf, and more)

So instead of wondering where to paste what, you can copy and connect right away.

## Dive Deep

Signed-in users can see their email address and a sign-out button. Pressing it kicks off a thorough cleanup. Here's how the original puts it:

> revokes all portal-level OAuth grants, deletes upstream server OAuth states, and redirects through Cloudflare Access logout.

So it clears every portal-level OAuth grant, drops the upstream server's OAuth state, and finishes by redirecting through Cloudflare Access logout. After signing out, you land on a confirmation page summarizing which sessions were revoked, so you can see for yourself that everything closed cleanly.

## Wrap-up

- MCP server portals now have a **homepage** and a **sign-out** flow
- The homepage shows connection instructions and a copyable endpoint URL
- Sign-out revokes the portal's OAuth grants and upstream state, then hands off to Access logout
- A quiet but useful win for anyone handing out MCP servers to their team through Access