import { APIResource } from "../../../../../resource.js";
import * as Core from "../../../../../core.js";
import { V4PagePaginationArray, type V4PagePaginationArrayParams } from "../../../../../pagination.js";
export declare class Portals extends APIResource {
    /**
     * Creates a new MCP portal for managing AI tool access through Cloudflare Access.
     *
     * @example
     * ```ts
     * const portal =
     *   await client.zeroTrust.access.aiControls.mcp.portals.create(
     *     {
     *       account_id: 'a86a8f5c339544d7bdc89926de14fb8c',
     *       id: 'my-mcp-portal',
     *       hostname: 'exmaple.com',
     *       name: 'My MCP Portal',
     *     },
     *   );
     * ```
     */
    create(params: PortalCreateParams, options?: Core.RequestOptions): Core.APIPromise<PortalCreateResponse>;
    /**
     * Updates an MCP portal configuration.
     *
     * @example
     * ```ts
     * const portal =
     *   await client.zeroTrust.access.aiControls.mcp.portals.update(
     *     'my-mcp-portal',
     *     { account_id: 'a86a8f5c339544d7bdc89926de14fb8c' },
     *   );
     * ```
     */
    update(id: string, params: PortalUpdateParams, options?: Core.RequestOptions): Core.APIPromise<PortalUpdateResponse>;
    /**
     * Lists all MCP portals configured for the account.
     *
     * @example
     * ```ts
     * // Automatically fetches more pages as needed.
     * for await (const portalListResponse of client.zeroTrust.access.aiControls.mcp.portals.list(
     *   { account_id: 'a86a8f5c339544d7bdc89926de14fb8c' },
     * )) {
     *   // ...
     * }
     * ```
     */
    list(params: PortalListParams, options?: Core.RequestOptions): Core.PagePromise<PortalListResponsesV4PagePaginationArray, PortalListResponse>;
    /**
     * Deletes an MCP portal from the account.
     *
     * @example
     * ```ts
     * const portal =
     *   await client.zeroTrust.access.aiControls.mcp.portals.delete(
     *     'my-mcp-portal',
     *     { account_id: 'a86a8f5c339544d7bdc89926de14fb8c' },
     *   );
     * ```
     */
    delete(id: string, params: PortalDeleteParams, options?: Core.RequestOptions): Core.APIPromise<PortalDeleteResponse>;
    /**
     * Read details of an MCP Portal
     *
     * @example
     * ```ts
     * const response =
     *   await client.zeroTrust.access.aiControls.mcp.portals.read(
     *     'my-mcp-portal',
     *     { account_id: 'a86a8f5c339544d7bdc89926de14fb8c' },
     *   );
     * ```
     */
    read(id: string, params: PortalReadParams, options?: Core.RequestOptions): Core.APIPromise<PortalReadResponse>;
}
export declare class PortalListResponsesV4PagePaginationArray extends V4PagePaginationArray<PortalListResponse> {
}
export interface PortalCreateResponse {
    /**
     * portal id
     */
    id: string;
    hostname: string;
    name: string;
    servers: Array<PortalCreateResponse.Server>;
    /**
     * Allow remote code execution in Dynamic Workers (beta)
     */
    allow_code_mode?: boolean;
    created_at?: string;
    created_by?: string;
    description?: string;
    modified_at?: string;
    modified_by?: string;
    /**
     * Route outbound MCP traffic through Zero Trust Secure Web Gateway
     */
    secure_web_gateway?: boolean;
}
export declare namespace PortalCreateResponse {
    interface Server {
        /**
         * server id
         */
        id: string;
        auth_type: 'oauth' | 'bearer' | 'unauthenticated';
        hostname: string;
        name: string;
        prompts: Array<{
            [key: string]: unknown;
        }>;
        tools: Array<{
            [key: string]: unknown;
        }>;
        created_at?: string;
        created_by?: string;
        default_disabled?: boolean;
        description?: string | null;
        error?: string;
        error_details?: Server.ErrorDetails;
        /**
         * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
         * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
         * customer portal hostname. New servers default to true; existing servers default
         * to false. Effective behavior is gated by the gateway worker's per-env rollout
         * mode KV key.
         */
        is_shared_oauth_callback_enabled?: boolean;
        last_successful_sync?: string;
        last_synced?: string;
        modified_at?: string;
        modified_by?: string;
        on_behalf?: boolean;
        status?: string;
        updated_prompts?: Array<Server.UpdatedPrompt>;
        updated_tools?: Array<Server.UpdatedTool>;
    }
    namespace Server {
        interface ErrorDetails {
            /**
             * Underlying error message
             */
            cause?: string;
            /**
             * True = MCP server returned an error. False = couldn't reach the server
             */
            is_upstream?: boolean;
            /**
             * MCP protocol error code
             */
            mcp_code?: number;
            /**
             * Whether the error is transient and worth retrying
             */
            retryable?: boolean;
            /**
             * HTTP status code from the server
             */
            status_code?: number;
        }
        interface UpdatedPrompt {
            name: string;
            /**
             * @deprecated Deprecated: use `portal_description` or `server_description`
             * instead. Populated for backward compatibility — portal-level wins when present,
             * otherwise falls back to server-level. Will be removed after the deprecation
             * window.
             */
            description?: string;
            enabled?: boolean;
            portal_alias?: string;
            portal_description?: string;
            server_alias?: string;
            server_description?: string;
        }
        interface UpdatedTool {
            name: string;
            /**
             * @deprecated Deprecated: use `portal_description` or `server_description`
             * instead. Populated for backward compatibility — portal-level wins when present,
             * otherwise falls back to server-level. Will be removed after the deprecation
             * window.
             */
            description?: string;
            enabled?: boolean;
            portal_alias?: string;
            portal_description?: string;
            server_alias?: string;
            server_description?: string;
        }
    }
}
export interface PortalUpdateResponse {
    /**
     * portal id
     */
    id: string;
    hostname: string;
    name: string;
    servers: Array<PortalUpdateResponse.Server>;
    /**
     * Allow remote code execution in Dynamic Workers (beta)
     */
    allow_code_mode?: boolean;
    created_at?: string;
    created_by?: string;
    description?: string;
    modified_at?: string;
    modified_by?: string;
    /**
     * Route outbound MCP traffic through Zero Trust Secure Web Gateway
     */
    secure_web_gateway?: boolean;
}
export declare namespace PortalUpdateResponse {
    interface Server {
        /**
         * server id
         */
        id: string;
        auth_type: 'oauth' | 'bearer' | 'unauthenticated';
        hostname: string;
        name: string;
        prompts: Array<{
            [key: string]: unknown;
        }>;
        tools: Array<{
            [key: string]: unknown;
        }>;
        created_at?: string;
        created_by?: string;
        default_disabled?: boolean;
        description?: string | null;
        error?: string;
        error_details?: Server.ErrorDetails;
        /**
         * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
         * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
         * customer portal hostname. New servers default to true; existing servers default
         * to false. Effective behavior is gated by the gateway worker's per-env rollout
         * mode KV key.
         */
        is_shared_oauth_callback_enabled?: boolean;
        last_successful_sync?: string;
        last_synced?: string;
        modified_at?: string;
        modified_by?: string;
        on_behalf?: boolean;
        status?: string;
        updated_prompts?: Array<Server.UpdatedPrompt>;
        updated_tools?: Array<Server.UpdatedTool>;
    }
    namespace Server {
        interface ErrorDetails {
            /**
             * Underlying error message
             */
            cause?: string;
            /**
             * True = MCP server returned an error. False = couldn't reach the server
             */
            is_upstream?: boolean;
            /**
             * MCP protocol error code
             */
            mcp_code?: number;
            /**
             * Whether the error is transient and worth retrying
             */
            retryable?: boolean;
            /**
             * HTTP status code from the server
             */
            status_code?: number;
        }
        interface UpdatedPrompt {
            name: string;
            /**
             * @deprecated Deprecated: use `portal_description` or `server_description`
             * instead. Populated for backward compatibility — portal-level wins when present,
             * otherwise falls back to server-level. Will be removed after the deprecation
             * window.
             */
            description?: string;
            enabled?: boolean;
            portal_alias?: string;
            portal_description?: string;
            server_alias?: string;
            server_description?: string;
        }
        interface UpdatedTool {
            name: string;
            /**
             * @deprecated Deprecated: use `portal_description` or `server_description`
             * instead. Populated for backward compatibility — portal-level wins when present,
             * otherwise falls back to server-level. Will be removed after the deprecation
             * window.
             */
            description?: string;
            enabled?: boolean;
            portal_alias?: string;
            portal_description?: string;
            server_alias?: string;
            server_description?: string;
        }
    }
}
export interface PortalListResponse {
    /**
     * portal id
     */
    id: string;
    hostname: string;
    name: string;
    servers: Array<PortalListResponse.Server>;
    /**
     * Allow remote code execution in Dynamic Workers (beta)
     */
    allow_code_mode?: boolean;
    created_at?: string;
    created_by?: string;
    description?: string;
    modified_at?: string;
    modified_by?: string;
    /**
     * Route outbound MCP traffic through Zero Trust Secure Web Gateway
     */
    secure_web_gateway?: boolean;
}
export declare namespace PortalListResponse {
    interface Server {
        /**
         * server id
         */
        id: string;
        auth_type: 'oauth' | 'bearer' | 'unauthenticated';
        hostname: string;
        name: string;
        prompts: Array<{
            [key: string]: unknown;
        }>;
        tools: Array<{
            [key: string]: unknown;
        }>;
        created_at?: string;
        created_by?: string;
        default_disabled?: boolean;
        description?: string | null;
        error?: string;
        error_details?: Server.ErrorDetails;
        /**
         * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
         * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
         * customer portal hostname. New servers default to true; existing servers default
         * to false. Effective behavior is gated by the gateway worker's per-env rollout
         * mode KV key.
         */
        is_shared_oauth_callback_enabled?: boolean;
        last_successful_sync?: string;
        last_synced?: string;
        modified_at?: string;
        modified_by?: string;
        on_behalf?: boolean;
        status?: string;
        updated_prompts?: Array<Server.UpdatedPrompt>;
        updated_tools?: Array<Server.UpdatedTool>;
    }
    namespace Server {
        interface ErrorDetails {
            /**
             * Underlying error message
             */
            cause?: string;
            /**
             * True = MCP server returned an error. False = couldn't reach the server
             */
            is_upstream?: boolean;
            /**
             * MCP protocol error code
             */
            mcp_code?: number;
            /**
             * Whether the error is transient and worth retrying
             */
            retryable?: boolean;
            /**
             * HTTP status code from the server
             */
            status_code?: number;
        }
        interface UpdatedPrompt {
            name: string;
            /**
             * @deprecated Deprecated: use `portal_description` or `server_description`
             * instead. Populated for backward compatibility — portal-level wins when present,
             * otherwise falls back to server-level. Will be removed after the deprecation
             * window.
             */
            description?: string;
            enabled?: boolean;
            portal_alias?: string;
            portal_description?: string;
            server_alias?: string;
            server_description?: string;
        }
        interface UpdatedTool {
            name: string;
            /**
             * @deprecated Deprecated: use `portal_description` or `server_description`
             * instead. Populated for backward compatibility — portal-level wins when present,
             * otherwise falls back to server-level. Will be removed after the deprecation
             * window.
             */
            description?: string;
            enabled?: boolean;
            portal_alias?: string;
            portal_description?: string;
            server_alias?: string;
            server_description?: string;
        }
    }
}
export interface PortalDeleteResponse {
    /**
     * portal id
     */
    id: string;
    hostname: string;
    name: string;
    /**
     * Allow remote code execution in Dynamic Workers (beta)
     */
    allow_code_mode?: boolean;
    created_at?: string;
    created_by?: string;
    description?: string;
    modified_at?: string;
    modified_by?: string;
    /**
     * Route outbound MCP traffic through Zero Trust Secure Web Gateway
     */
    secure_web_gateway?: boolean;
}
export interface PortalReadResponse {
    /**
     * portal id
     */
    id: string;
    hostname: string;
    name: string;
    servers: Array<PortalReadResponse.Server>;
    /**
     * Allow remote code execution in Dynamic Workers (beta)
     */
    allow_code_mode?: boolean;
    created_at?: string;
    created_by?: string;
    description?: string;
    modified_at?: string;
    modified_by?: string;
    /**
     * Route outbound MCP traffic through Zero Trust Secure Web Gateway
     */
    secure_web_gateway?: boolean;
}
export declare namespace PortalReadResponse {
    interface Server {
        /**
         * server id
         */
        id: string;
        auth_type: 'oauth' | 'bearer' | 'unauthenticated';
        hostname: string;
        name: string;
        prompts: Array<{
            [key: string]: unknown;
        }>;
        tools: Array<{
            [key: string]: unknown;
        }>;
        created_at?: string;
        created_by?: string;
        default_disabled?: boolean;
        description?: string | null;
        error?: string;
        error_details?: Server.ErrorDetails;
        /**
         * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
         * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
         * customer portal hostname. New servers default to true; existing servers default
         * to false. Effective behavior is gated by the gateway worker's per-env rollout
         * mode KV key.
         */
        is_shared_oauth_callback_enabled?: boolean;
        last_successful_sync?: string;
        last_synced?: string;
        modified_at?: string;
        modified_by?: string;
        on_behalf?: boolean;
        status?: string;
        updated_prompts?: Array<Server.UpdatedPrompt>;
        updated_tools?: Array<Server.UpdatedTool>;
    }
    namespace Server {
        interface ErrorDetails {
            /**
             * Underlying error message
             */
            cause?: string;
            /**
             * True = MCP server returned an error. False = couldn't reach the server
             */
            is_upstream?: boolean;
            /**
             * MCP protocol error code
             */
            mcp_code?: number;
            /**
             * Whether the error is transient and worth retrying
             */
            retryable?: boolean;
            /**
             * HTTP status code from the server
             */
            status_code?: number;
        }
        interface UpdatedPrompt {
            name: string;
            /**
             * @deprecated Deprecated: use `portal_description` or `server_description`
             * instead. Populated for backward compatibility — portal-level wins when present,
             * otherwise falls back to server-level. Will be removed after the deprecation
             * window.
             */
            description?: string;
            enabled?: boolean;
            portal_alias?: string;
            portal_description?: string;
            server_alias?: string;
            server_description?: string;
        }
        interface UpdatedTool {
            name: string;
            /**
             * @deprecated Deprecated: use `portal_description` or `server_description`
             * instead. Populated for backward compatibility — portal-level wins when present,
             * otherwise falls back to server-level. Will be removed after the deprecation
             * window.
             */
            description?: string;
            enabled?: boolean;
            portal_alias?: string;
            portal_description?: string;
            server_alias?: string;
            server_description?: string;
        }
    }
}
export interface PortalCreateParams {
    /**
     * Path param
     */
    account_id: string;
    /**
     * Body param: portal id
     */
    id: string;
    /**
     * Body param
     */
    hostname: string;
    /**
     * Body param
     */
    name: string;
    /**
     * Body param: Allow remote code execution in Dynamic Workers (beta)
     */
    allow_code_mode?: boolean;
    /**
     * Body param
     */
    description?: string;
    /**
     * Body param: Route outbound MCP traffic through Zero Trust Secure Web Gateway
     */
    secure_web_gateway?: boolean;
    /**
     * Body param
     */
    servers?: Array<PortalCreateParams.Server>;
}
export declare namespace PortalCreateParams {
    interface Server {
        /**
         * server id
         */
        server_id: string;
        default_disabled?: boolean;
        is_shared_oauth_callback_enabled?: boolean;
        on_behalf?: boolean;
        updated_prompts?: Array<Server.UpdatedPrompt>;
        updated_tools?: Array<Server.UpdatedTool>;
    }
    namespace Server {
        interface UpdatedPrompt {
            name: string;
            alias?: string;
            description?: string;
            enabled?: boolean;
        }
        interface UpdatedTool {
            name: string;
            alias?: string;
            description?: string;
            enabled?: boolean;
        }
    }
}
export interface PortalUpdateParams {
    /**
     * Path param
     */
    account_id: string;
    /**
     * Body param: Allow remote code execution in Dynamic Workers (beta)
     */
    allow_code_mode?: boolean;
    /**
     * Body param
     */
    description?: string;
    /**
     * Body param
     */
    hostname?: string;
    /**
     * Body param
     */
    name?: string;
    /**
     * Body param: Route outbound MCP traffic through Zero Trust Secure Web Gateway
     */
    secure_web_gateway?: boolean;
    /**
     * Body param
     */
    servers?: Array<PortalUpdateParams.Server>;
}
export declare namespace PortalUpdateParams {
    interface Server {
        /**
         * server id
         */
        server_id: string;
        default_disabled?: boolean;
        is_shared_oauth_callback_enabled?: boolean;
        on_behalf?: boolean;
        updated_prompts?: Array<Server.UpdatedPrompt>;
        updated_tools?: Array<Server.UpdatedTool>;
    }
    namespace Server {
        interface UpdatedPrompt {
            name: string;
            alias?: string;
            description?: string;
            enabled?: boolean;
        }
        interface UpdatedTool {
            name: string;
            alias?: string;
            description?: string;
            enabled?: boolean;
        }
    }
}
export interface PortalListParams extends V4PagePaginationArrayParams {
    /**
     * Path param
     */
    account_id: string;
    /**
     * Query param: Search by id, name, hostname
     */
    search?: string;
}
export interface PortalDeleteParams {
    account_id: string;
}
export interface PortalReadParams {
    account_id: string;
}
export declare namespace Portals {
    export { type PortalCreateResponse as PortalCreateResponse, type PortalUpdateResponse as PortalUpdateResponse, type PortalListResponse as PortalListResponse, type PortalDeleteResponse as PortalDeleteResponse, type PortalReadResponse as PortalReadResponse, PortalListResponsesV4PagePaginationArray as PortalListResponsesV4PagePaginationArray, type PortalCreateParams as PortalCreateParams, type PortalUpdateParams as PortalUpdateParams, type PortalListParams as PortalListParams, type PortalDeleteParams as PortalDeleteParams, type PortalReadParams as PortalReadParams, };
}
//# sourceMappingURL=portals.d.ts.map