Cloudflare 推出新功能检测并保护 MCP 流量
原标题：How Cloudflare detects MCP traffic and helps secure it
AI 摘要
Cloudflare 宣布推出新的 Cloudflare One 功能，用于识别和检查 MCP（模型上下文协议）流量，显示哪些用户和服务器在生成该流量，并控制受管网络路径上的直接连接。这些控制措施结合 MCP Server Portals，帮助管理员确保代理使用经批准的路径，防止影子 MCP 流量。文章详细分析了 MCP 工具调用的结构，并比较了在客户端、网络边界和 MCP 服务器三个位置进行控制的优缺点。
正文节选
Most companies designed their resource permissions with a human user in mind. A senior engineer may be able to deploy to production, query a sensitive database, or revoke another user's access. Those privileges come with risk, but that risk has traditionally been bounded by two assumptions: the engineer will use human judgment, and the engineer can only act at human speed. An engineer who sees an unexpected result will usually stop and reconsider their actions. Any human being can only click, ty