[Access] Changelog: service token support for MCP server portals

[kennyj42]

Adds a changelog entry announcing service token support for MCP server portals.

Pairs with the docs PR in #31734, which updates the Connect with a service token section in the MCP server portals guide.

Background

Backed by heimtor commit 49d3867 (MCP-204: Handle service_auth for mcp apps), released in heimtor 2026.6.7 on 2026-06-25. Service token sessions can now reach upstream MCP servers through a portal without the per-user OAuth flow, as long as each linked MCP server app has a Service Auth policy matching the token and the server's portal mapping has on_behalf: false.

[cloudflare-docs-bot]

Review

⚠️ 1 warning found in full PR diff.

Fan Out Code Review

This code review is in beta and may not always be helpful — use your judgment.

✅ No code review issues found.

Style Guide Review

Warnings (1)

File	Issue
changelog/cloudflare-one/2026-06-26-mcp-portal-service-tokens.mdx line 14	Bulleted list used for sequential steps — The To set this up: procedure uses a bulleted list for three sequential configuration steps. Fix: Use a numbered list for this procedure.

Commands

Only codeowners can run commands. Post a comment with the command to trigger it.

Command	Description
/review	Runs a review now. Incremental if a prior review exists, full if not.
/full-review	Re-reviews the entire PR diff from scratch, ignoring incremental history. Useful after a rebase, when you want a fresh review, or if the bot gets out of sync and reports issues that no longer exist.
/fan-out-review	Forces a full review using the per-file fan-out mode regardless of diff size. Each file is reviewed in its own session for maximum per-file detail. ⚠️ This may take a very long time on large PRs and may fail or time out — use only when you want the most thorough review and are willing to wait.
/holistic-review	Forces a full review using the holistic mode regardless of diff size. The entire diff is reviewed in one pass, enabling cross-file reasoning. Faster and more reliable on large PRs.
/ignore-review-limit	Permanently lifts the 2-review automatic limit for this PR. Future pushes will trigger reviews as normal.

[mvvmm]

/full-review