MCP is the door, and the control plane is the house
Presented by: Ayush Thakur, Kenny Johnson
Originally aired on October 24 @ 12:30 AM - 1:00 AM EDT
MCP makes it easy to connect agents to tools. That is both the unlock and the danger. At Cloudflare, we connected internal agents to systems like GitLab, Backstage, Jira, Sentry, Prometheus, Google Workspace, and our internal Release Manager. It quickly became clear that the hard problem was not “can the agent call a tool?” It was “which tool, for which user, under which policy, with what context cost, and what scope of impact?” This talk covers MCP at enterprise scale: how we use Cloudflare Access for identity, MCP server portals for governance, Code Mode to reduce token overhead, and sandboxed execution to constrain what model-generated code can do. We share lessons from running MCP internally and why unmanaged MCP becomes entropy surprisingly fast.
English
