Skip to content
Talk to Us

Blocks.ai publishes this comparison and sells in this market. Every claim about another product links to a public source.

Cloudflare MCP server portals vs n8n

Cloudflare MCP server portals

Cloudflare One feature that puts MCP servers behind one governed endpoint

n8n

Platform for AI agents and workflows you can see and control, built visually or with code

Short answer

Cloudflare says its MCP server portals, part of Cloudflare One, put MCP servers behind one governed endpoint; n8n describes itself as a platform for AI agents and workflows, on n8n Cloud or self-hosted.⁠Source 1, Source 2, Source 3, Source 4, Source 5 A portal controls which MCP tools people and agents reach through it; n8n can itself act as an MCP server and client.⁠Source 2, Source 6, Source 7, Source 8

By Blocks.ai teamLast checked

Where each one sits

Six layers of running AI agents at a company, and what each product’s own public sources say it covers.

These aren’t the same kind of product

Where they overlap
Both work with MCP: a portal proxies tool calls from MCP clients to MCP servers, and n8n can act as an MCP server and as an MCP client.⁠Source 2, Source 7, Source 8
Where they differ
Teams build and run agents and workflows in n8n, on n8n Cloud or self-hosted.⁠Source 5, Source 9 A portal manages MCP servers and tools; for portals, an agent registry is not publicly documented.⁠Source 2
Running both
Cloudflare says portals reach upstream MCP servers over Streamable HTTP or SSE.⁠Source 2
Public sources · checked 2 October 2026
  • Offered
  • Preview
  • Not publicly documented

Cloudflare MCP server portals

  • Build agents: Not publicly documented
  • Host and run agents: Not publicly documented
  • Identity and access: OfferedIdentity provider or service token⁠Source 2
  • Registry and governance: OfferedCentrally managed MCP servers⁠Source 2
  • Traffic between agents, tools, and models: OfferedProxy for MCP tool calls⁠Source 2
  • Agents across organizations: Not publicly documented

n8n

  • Build agents: OfferedLangChain-based AI Agent node⁠Source 9
  • Host and run agents: OfferedYour infrastructure or n8n’s⁠Source 4
  • Identity and access: Not publicly documented
  • Registry and governance: PreviewAgents stored in projects⁠Source 10
  • Traffic between agents, tools, and models: OfferedMCP client for external tools⁠Source 8
  • Agents across organizations: Not publicly documented

At a glance

TopicCloudflare MCP server portalsn8n
What it isPuts multiple MCP servers behind one HTTP endpoint, governed through Cloudflare Access.⁠Source 2, Source 3 Cloudflare says portals are part of Cloudflare One.⁠Source 1n8n describes itself as a platform for AI agents and workflows, built visually and with code.⁠Source 4 It can act as an MCP server and an MCP client.⁠Source 7, Source 8
Where it runsA portal’s hostname is a proxied CNAME record pointing to gateway.agents.cloudflare.com.⁠Source 2n8n Cloud, which stores data in Frankfurt, Germany, or self-hosted on your own infrastructure, on premises, or in a private cloud.⁠Source 5, Source 11, Source 12
IdentityPeople sign in through Cloudflare Access with their identity provider.⁠Source 2 Autonomous agents can use an Access service token.⁠Source 6Project roles set what each user can do, on every Cloud plan and registered self-hosted editions.⁠Source 13 SAML sign-in on Business and Enterprise plans, OIDC on Enterprise.⁠Source 14, Source 15 Per-agent identity from n8n is not publicly documented.
Pricing modelCloudflare says MCP server portals are available to all Cloudflare customers.⁠Source 16 A separate price for portals is not publicly documented.By monthly workflow executions, with unlimited users on paid plans.⁠Source 11 The self-hosted Community edition is free; Enterprise is priced through sales.⁠Source 11, Source 17
MaturityGenerally available since 24 September 2026, after an open beta announced on 26 August 2025.⁠Source 16, Source 18The Agents feature is in preview; n8n’s changelog dates its release to 21 September 2026.⁠Source 10, Source 19 n8n releases a new minor version most weeks.⁠Source 19

What each one is

Cloudflare MCP server portals

Cloudflare says MCP server portals are part of Cloudflare One, its SASE platform.⁠Source 1 A portal gathers several MCP servers behind one HTTP endpoint, applies Cloudflare Access policies to who can connect, and logs each tool request.⁠Source 2 Portals became generally available on 24 September 2026.⁠Source 16

n8n

n8n describes itself as a platform for AI agents and workflows, built visually and with code, on n8n Cloud or self-hosted.⁠Source 4, Source 5 Its AI nodes are built on LangChain’s JavaScript framework.⁠Source 9 Agents, a preview feature, live in n8n projects alongside workflows.⁠Source 10

The differences that matter

  1. What each one manages

    Cloudflare MCP server portals

    MCP servers and their tools: admins add servers, choose the tools and prompt templates each portal exposes, and turned-off tools can’t be called through it.⁠Source 2

    n8n

    Workflows, which n8n says are built visually and with code, and agents, in preview, built in the Agent Builder from a model, instructions, and tools.⁠Source 4, Source 10

    For portals, a registry of agents is not publicly documented. For n8n, listing agents built outside n8n is not publicly documented.

  2. How each one uses MCP

    Cloudflare MCP server portals

    A portal sits between MCP clients and upstream MCP servers: it attaches credentials and proxies each tool call.⁠Source 2

    n8n

    n8n’s MCP Server Trigger node serves n8n tools and workflows to MCP clients; its MCP Client Tool node lets n8n agents call external MCP tools.⁠Source 7, Source 8

    Blocked users can still use a server’s direct URL; Cloudflare advises making Access its OAuth provider.⁠Source 2 n8n’s MCP audit events don’t cover MCP Server Trigger workflows.⁠Source 20

  3. Where it runs

    Cloudflare MCP server portals

    A portal’s hostname points to gateway.agents.cloudflare.com; portals can reach private MCP servers through Cloudflare Tunnel or another connector, with Gateway routing on.⁠Source 2, Source 21

    n8n

    n8n Cloud is hosted on Microsoft Azure with data in Frankfurt; self-hosted n8n runs on your own infrastructure, on premises, or in a private cloud.⁠Source 11, Source 12, Source 22

    Self-hosting portals is not publicly documented. On self-hosted n8n, air-gapped installs use a license certificate; otherwise the license key must ping n8n’s license server daily.⁠Source 11, Source 23

For security teams

What a security review asks, answered from each vendor’s public documentation.

TopicCloudflare MCP server portalsn8n
Network exposureClients use the portal’s HTTPS URL.⁠Source 2 Private MCP servers can join through outbound-only Cloudflare Tunnel, with Gateway routing on.⁠Source 2, Source 24Self-hosted n8n can run on premises or in a private cloud.⁠Source 12 Cloud-based MCP clients need a publicly accessible instance.⁠Source 25
IdentityIdentity provider login through Access, or a service token for agents, whose upstream calls use the admin credential.⁠Source 2, Source 6SAML sign-in on Business and Enterprise plans, OIDC on Enterprise.⁠Source 14, Source 15 Per-agent identity issued by n8n itself is not publicly documented.
Access changes and revocationDeleting a service token revokes it.⁠Source 26 A tool turned off in a portal can’t be called through it.⁠Source 2n8n disconnects a revoked OAuth MCP client at once.⁠Source 25 In preview, unpublishing stops users, channels, and schedules running an agent.⁠Source 10
Audit trailAccess logs each request made with a portal’s tools; Enterprise-plan Logpush exports include the user’s email and tool name.⁠Source 2, Source 27Enterprise plans can stream logs to syslog, a webhook, or Sentry.⁠Source 20 Agent sessions, in preview, show messages and tools used.⁠Source 10
ComplianceSuper Administrators can get Cloudflare’s PCI, SOC 2, and ISO documents.⁠Source 28 Which ones cover portals is not publicly documented.n8n says the company holds a SOC 2 Type 2 report, for enterprise customers; others get SOC 3.⁠Source 22, Source 29

Full comparison

18 criteria in five groups. Every cell links to its source, or says no public source answers it.

Cloudflare MCP server portals and n8n compared on 18 criteria
Cloudflare MCP server portalsn8n
What it is
What it is and who it’s forCloudflare says portals are part of Cloudflare One, its SASE platform.⁠Source 1 A portal puts multiple MCP servers behind one HTTP endpoint, governed through Access.⁠Source 2, Source 3n8n says it is a platform for AI agents and workflows, built visually and with code.⁠Source 4 It runs on your infrastructure or n8n’s.⁠Source 5
MaturityGA since 24 September 2026, after an open beta announced on 26 August 2025.⁠Source 16, Source 18 Once called Agents Gateway in some contexts.⁠Source 2LangChain-based AI nodes GA since November 2023.⁠Source 9, Source 30 Agents shipped in preview in September 2026.⁠Source 19
Control
Agent registry and discoveryAdmins add MCP servers to Cloudflare Access for central management, up to 80 per portal.⁠Source 2 A registry of agents is not publicly documented.Agents, in preview, live in n8n projects.⁠Source 10 The node panel lists MCP servers to connect to an agent.⁠Source 31 Listing agents built elsewhere is not publicly documented.
Identity and access controlPeople sign in through Cloudflare Access with their identity provider; agents can use an Access service token.⁠Source 2, Source 6 Policies set who can connect to the portal URL.⁠Source 2n8n says agent access (preview) follows its roles.⁠Source 32 Project roles: every Cloud plan and registered self-hosted editions; custom roles: Enterprise.⁠Source 13
Ownership, policy, and revocationAdmins choose the tools and prompt templates each portal exposes; turned-off tools can’t be called through it.⁠Source 2 Service tokens can be turned off or deleted.⁠Source 26Agents (preview) can be unpublished and can pause for approval before sensitive tools run.⁠Source 10 Workflows can require human approval before an AI Agent runs a tool.⁠Source 33
Audit log and observabilityAccess logs each request made with a portal’s tools, viewable per portal or per server.⁠Source 2 Logpush export to storage or a SIEM is Enterprise only.⁠Source 2Enterprise log streaming to syslog, a webhook, or Sentry; MCP audit events cover the instance MCP server only.⁠Source 20 Agent sessions (preview) show tools used.⁠Source 10
Connection
How agents connectMCP clients connect to the portal’s HTTPS URL.⁠Source 2 Private-network servers connect through Cloudflare Tunnel or another connector, with Gateway routing on.⁠Source 2, Source 21The MCP Server Trigger node exposes a URL for MCP clients.⁠Source 7 For its instance MCP server, n8n says cloud-based clients need a publicly accessible instance.⁠Source 25
Agents across organizationsManages third-party MCP servers, and can use several identity providers for people at partners.⁠Source 3, Source 34 Partner-controlled agents in a portal: not publicly documented.n8n tools can be exposed to external AI agents through the MCP Server Trigger node.⁠Source 8 Another organization’s agents, under its control: not publicly documented.
Protocol supportStateless MCP 2026-07-28 and earlier 2025 Streamable HTTP clients and servers; upstream over Streamable HTTP or SSE.⁠Source 2 A2A support: not publicly documented.MCP server (a trigger node and a built-in instance server) and MCP client (a tool node).⁠Source 7, Source 8, Source 25 First-party A2A support is not publicly documented.
Frameworks, models, and clouds supportedMCP clients that support remote servers; setup steps cover Claude Desktop, Windsurf, and others.⁠Source 2 Some MCP servers reject proxy-based clients like portals.⁠Source 2AI nodes implement LangChain’s JavaScript framework, with your choice of agent, LLM, and memory.⁠Source 9 Managing agents built outside n8n is not publicly documented.
Operations
Deployment options and data residencyA portal’s hostname is a proxied CNAME record pointing to gateway.agents.cloudflare.com.⁠Source 2 Self-hosting a portal is not publicly documented.n8n Cloud on Microsoft Azure, with data stored in Frankfurt, Germany, or self-hosted, with data wherever you host it.⁠Source 11, Source 22
Compliance attestationsSuper Administrators can get Cloudflare’s PCI, SOC 2, ISO, and other compliance documents.⁠Source 28 Which ones cover portals is not publicly documented.n8n says the company holds a SOC 2 Type 2 report, available to enterprise customers.⁠Source 22, Source 29 Others can get the SOC 3 report.⁠Source 22
Support and SLASupport varies by plan, with professional services as Contract add-ons.⁠Source 35 Cloudflare states a 100% uptime SLA for paid Zero Trust plans.⁠Source 35Dedicated support on Enterprise only, with guaranteed response times available through SLAs.⁠Source 11 An uptime SLA percentage is not publicly documented.
Time and effort to get runningNeeds an active domain on Cloudflare and an identity provider on Cloudflare Zero Trust; then add servers, create a portal, and connect a client.⁠Source 2A 14-day n8n Cloud trial with Pro features, or a one-step local setup that needs Docker.⁠Source 12, Source 36 Paid self-hosted plans activate with a license key.⁠Source 17
Pricing model and public pricesCloudflare says MCP server portals are available to all Cloudflare customers.⁠Source 16 A separate price for portals is not publicly documented.By monthly workflow executions.⁠Source 11 Cloud Starter is $20 and Pro $50 a month, billed annually.⁠Source 11 Self-hosted Community is free.⁠Source 17
Building
Agent building toolsSeparately, Cloudflare’s Agents docs cover building and hosting agents on Cloudflare, and remote MCP servers can be built on Cloudflare Workers.⁠Source 3, Source 37n8n says its visual editor takes JavaScript or Python anywhere in a workflow.⁠Source 4 It has LangChain-based AI nodes and the Agent Builder, in preview.⁠Source 9, Source 10
Model accessCloudflare says its separate AI Gateway manages model traffic across AI providers.⁠Source 38 Models included with or required by portals: not publicly documented.Bring your own LLM credentials for providers such as OpenAI, Anthropic, and Google, and combine several models in one workflow.⁠Source 39, Source 40
Integrations and ecosystemCloudflare One supports all SAML and OIDC identity providers.⁠Source 34 Portals can be managed with Terraform.⁠Source 2 A connector marketplace is not publicly documented.n8n’s homepage states over 500 integrations, and n8n states 600+ community-built templates for agentic workflows.⁠Source 4, Source 41

Which to choose

Choose Cloudflare MCP server portals if

  • You use Cloudflare One, which Cloudflare says includes portals, and want MCP servers behind your Access login and identity provider.⁠Source 1, Source 2
  • You want to choose which MCP tools each portal exposes, with Access policies deciding who can connect to it.⁠Source 2
  • You need MCP tool requests logged, and exported with the user’s email to a SIEM through Logpush on an Enterprise plan.⁠Source 2, Source 27
  • Your agents need MCP servers on your private network, reached through Cloudflare Tunnel or another connector, with Gateway routing on.⁠Source 2, Source 21

Choose n8n if

  • You want to build agents and workflows visually; n8n says you can write JavaScript or Python anywhere in a workflow.⁠Source 4
  • You need to self-host on premises or in a private cloud, or want managed hosting that stores data in the EU.⁠Source 11, Source 12
  • You want n8n workflows available as MCP tools to external AI agents, or n8n agents calling tools on external MCP servers.⁠Source 7, Source 8
  • You want pricing by workflow executions with unlimited users on paid plans, and a free self-hosted Community edition to start.⁠Source 11, Source 17

Questions buyers ask

Is either one an agent registry?

Admins add MCP servers to Cloudflare Access, and a portal lists the ones available to each user; a registry of agents is not publicly documented.⁠Source 2 n8n’s agents, in preview, live in n8n projects; listing agents built outside n8n is not publicly documented.⁠Source 10

Do they support MCP and A2A?

Portals proxy MCP tool calls and support stateless MCP 2026-07-28 and earlier 2025 Streamable HTTP clients and servers.⁠Source 2 n8n can act as an MCP server and an MCP client.⁠Source 7, Source 8 A2A support is not publicly documented for portals or as a built-in n8n feature.

How is each one priced?

Cloudflare says MCP server portals are available to all Cloudflare customers.⁠Source 16 A separate price for portals is not publicly documented. n8n prices plans by monthly workflow executions, and its self-hosted Community edition is free.⁠Source 11, Source 17

Can either one connect agents across organizations?

Cloudflare One can use several identity providers at once, for people at partners or contractors.⁠Source 34 n8n can expose tools to external AI agents through the MCP Server Trigger node.⁠Source 8 Bringing in another organization’s agents, under its own control, is not publicly documented for either.

How we compare

Read the full method

Every claim on this page links to a public source. Where none answers a question, the page says so.

We re-check every fact at least every 90 days. This page was last checked .

Something wrong or out of date? Tell us and we’ll correct it.

Sources

46 public sources, each with the date we checked it. Every one opens in a new tab.

  1. Source 1: Securing the AI Revolution: Introducing Cloudflare MCP Server Portals Cloudflare · checked Back:abcde

  2. Source 2: MCP server portals · Cloudflare One docs Cloudflare · checked Back:abcdefghijklmnopqrstuvwxyz2728293031323334353637383940414243

  3. Source 3: MCP governance · Cloudflare Agents docs Cloudflare · checked Back:abcde

  4. Source 4: AI Workflow Automation Platform - n8n n8n · checked Back:abcdefghi

  5. Source 5: Choose how to use n8n n8n · checked Back:abcde

  6. Source 6: Service token support for MCP server portals · Changelog Cloudflare · checked Back:abcd

  7. Source 7: MCP Server Trigger n8n · checked Back:abcdefgh

  8. Source 8: MCP Client Tool n8n · checked Back:abcdefghij

  9. Source 9: LangChain in n8n n8n · checked Back:abcdef

  10. Source 10: Build and manage agents n8n · checked Back:abcdefghijk

  11. Source 11: n8n Plans and Pricing n8n · checked Back:abcdefghijkl

  12. Source 12: Host n8n n8n · checked Back:abcde

  13. Source 13: Set permissions and roles (RBAC) n8n · checked Back:ab

  14. Source 14: Set up SAML n8n · checked Back:ab

  15. Source 15: Set up OIDC n8n · checked Back:ab

  16. Source 16: MCP server portals are now generally available · Changelog Cloudflare · checked Back:abcdef

  17. Source 17: Compare editions n8n · checked Back:abcde

  18. Source 18: MCP server portals · Changelog Cloudflare · checked Back:ab

  19. Source 19: Changelog n8n · checked Back:abc

  20. Source 20: Stream logs to external systems n8n · checked Back:abc

  21. Source 21: Private MCP server support for MCP server portals · Changelog Cloudflare · checked Back:abc

  22. Source 22: Security at n8n n8n · checked Back:abcde

  23. Source 23: Manage your license n8n · checked Back to text

  24. Source 24: Cloudflare Tunnel · Cloudflare One docs Cloudflare · checked Back to text

  25. Source 25: Connect to n8n MCP server n8n · checked Back:abcd

  26. Source 26: Service tokens · Cloudflare One docs Cloudflare · checked Back:ab

  27. Source 27: MCP Portal Logs · Cloudflare Logs docs Cloudflare · checked Back:ab

  28. Source 28: Compliance documentation · Cloudflare Fundamentals docs Cloudflare · checked Back:ab

  29. Source 29: n8n Trust Center n8n · checked Back:ab

  30. Source 30: Release notes 1.x n8n · checked Back to text

  31. Source 31: MCP servers n8n · checked Back to text

  32. Source 32: Introducing n8n Agents n8n · checked Back to text

  33. Source 33: Human-in-the-loop for tools n8n · checked Back to text

  34. Source 34: Identity providers · Cloudflare One docs Cloudflare · checked Back:abc

  35. Source 35: Cloudflare Access | Zero Trust Network Access (ZTNA) Cloudflare · checked Back:ab

  36. Source 36: Try free then choose a plan n8n · checked Back to text

  37. Source 37: Build Agents on Cloudflare · Cloudflare Agents docs Cloudflare · checked Back to text

  38. Source 38: AI Security | Cloudflare Cloudflare · checked Back to text

  39. Source 39: n8n AI Terms n8n · checked Back to text

  40. Source 40: Integrate AI n8n · checked Back to text

  41. Source 41: n8n AI agent builder n8n · checked Back to text

  42. Source 42: Your company's private network Blocks.ai · checked Back to text

  43. Source 43: Network requirements Blocks.ai · checked Back to text

  44. Source 44: Solutions: Agent sprawl Blocks.ai · checked Back to text

  45. Source 45: Solutions: Partner networks Blocks.ai · checked Back to text

  46. Source 46: Pricing Blocks.ai · checked Back to text