All news with #cloudflare tag

🗂 Artifacts is a Git-compatible, versioned filesystem built for agent-first workflows. It enables programmatic repo creation, credential issuance, and commit operations via a REST API or a native Workers API while remaining accessible to any standard Git client. Cloudflare implements Artifacts on Durable Objects with a Zig-to-WASM Git engine and supports import, forking, git-notes, and session-scoped repositories. The feature is in private beta for paid Workers plans, with a public beta expected in early May.

🔍 Cloudflare introduced AI Search, a plug-and-play search primitive that provides a unified retrieval layer for agents, support bots, and coding assistants. It pairs hybrid semantic (vector) and BM25 keyword matching, managed storage, and built-in vector indexes so developers can create instances at runtime without provisioning separate infrastructure. The service integrates with Workers, the Agents SDK, and Wrangler, supports metadata boosts and cross-instance queries, and can optionally rerank results with a cross-encoder.

✉️ Cloudflare has opened Email Sending to public beta, enabling applications and agents to send transactional email directly from Workers or via REST and SDKs. The service pairs with Email Routing to provide full bidirectional workflows—receive, process, persist, and reply—without external infrastructure. Built-in deliverability features (SPF, DKIM, DMARC) and global delivery on Cloudflare’s network simplify operations. Tooling additions include a Workers binding, MCP server, Wrangler CLI commands, a Cloudflare Email skill, and an open-source Agentic Inbox reference app.

🤖 Agent Lee is an in-dashboard AI assistant that understands your Cloudflare account and can troubleshoot, visualize, and modify resources on demand. Built on Cloudflare primitives like Workers, Durable Objects, and the Agents SDK, it uses a TypeScript Codemode to generate server-side calls that run through a sandboxed MCP proxy. Write operations require explicit user approval via an elicitation gate, and the beta — serving ~18,000 daily users and ~250k tool calls per day — is available now.

🔎 Cloudflare has renamed Browser Rendering to Browser Run and expanded it into a remote browser platform tailored for AI agents. It runs full Chrome sessions across Cloudflare’s global network and can be driven by code or AI using Puppeteer, Playwright, Quick Actions, direct CDP access, or MCP/WebMCP. New features include Live View for real-time inspection, Human-in-the-Loop handoffs for operator intervention, a CDP endpoint for low-level automation, and Session Recordings for replay and debugging. The service raises concurrency and Quick Actions limits and is available on Workers Free and Paid plans.

🧠 Project Think is Cloudflare’s next-generation Agents SDK, introducing primitives and an opinionated base class to build long-running, serverless AI agents. It combines durable execution with fibers, isolated sub-agents (Facets) backed by per-agent SQLite, persistent tree-structured sessions, and sandboxed code execution via Dynamic Workers and @cloudflare/codemode. The Think base class wires workspace, toolchains, resumable streams, and extensions together so developers can deploy resumable, auditable agents that cost nothing when idle.

🚀 Cloudflare today launched the Registrar API in beta, enabling programmatic domain search, availability checks, and direct registration. Designed for editors, CI pipelines, and agent-driven workflows, the API exposes a simple Search → Check → Register flow that agents can use to suggest names, confirm pricing, and complete purchases using account defaults. Registrations are offered at-cost, with WHOIS privacy enabled by default and explicit fee acknowledgement required for premium domains.

🔊 Cloudflare released an experimental voice pipeline for the Agents SDK via the @cloudflare/voice package, enabling real-time voice input and output on the same agent architecture developers already use. The extension preserves the same Durable Object instance, Agent class, tooling, and SQLite-backed persistence while adding withVoice, withVoiceInput, React hooks, a framework-agnostic VoiceClient, and built-in Workers AI STT/TTS providers to get started without external API keys. Audio streams over the existing WebSocket, uses continuous STT for turn detection, and streams sentence-chunked TTS to improve time-to-first-audio, while offering hooks, provider adapters, telephony options, and support for multimodal text/voice interactions.

🚀 Cloudflare upgraded Workflows with V2, a rearchitected control plane to meet machine-speed, agent-driven workloads. The update raises defaults to 50,000 concurrent instances, 300 instances/sec per account, and 2,000,000 queued instances per workflow, and introduces horizontally scalable components SousChef and Gatekeeper to distribute metadata and concurrency slots. The redesign preserves reliability via Engine-driven instance state, Durable Object alarms, and a staged, zero‑downtime migration that converted legacy Account Durable Objects into SousChefs.

🔐 Cloudflare outlines how it centralized and secured company-wide use of the Model Context Protocol (MCP) by combining controls from Cloudflare One and its developer platform. The post explains why locally hosted MCP servers posed supply‑chain and administration risks and how Cloudflare moved to governed, remote MCP servers with Access-based authentication, audit logging, and CI/CD templates. It highlights MCP server portals, Code Mode to reduce token costs, and Gateway detection for shadow MCP.

🔐 Cloudflare is launching Managed OAuth for Cloudflare Access in open beta, enabling agents that speak OAuth 2.0 to authenticate to internal apps with a single click. When enabled, Access acts as the authorization server and uses the www-authenticate header to point agents to the /.well-known/oauth-authorization-server. Agents can dynamically register (RFC 7591), perform PKCE (RFC 7636), and receive JWTs to act on behalf of users, removing the need for static service accounts.

🔐 Cloudflare announces updates to secure non-human identities—agents, scripts, and third-party tools—by enhancing credential detection, OAuth visibility, and resource-scoped RBAC. New scannable token formats (with identifiable prefixes and checksums) and integration with GitHub Secret Scanning enable rapid verification and automated revocation of leaked tokens. Cloudflare One DLP extends prevention across network, email, SaaS, and AI traffic. The Dashboard now surfaces connected OAuth apps and permissions to simplify review and revocation.

🔒 Cloudflare Mesh provides a developer-friendly private network that unifies access for users, devices, and AI agents across clouds and the Cloudflare edge. Integrated with Cloudflare One, Mesh uses the Cloudflare One Client and Mesh nodes to route bidirectional, many-to-many traffic with built-in Gateway policies, DNS filtering, device posture checks, and DLP. It supports Workers VPC bindings and the Agents SDK so serverless agents and Durable Objects can securely reach private services, with a free tier for up to 50 nodes and 50 users.

🚀 Cloudflare released a technical preview of a rebuilt CLI distributed as the new cf command to provide unified, consistent access across its extensive API surface. The preview demonstrates a TypeScript-based schema and code-generation pipeline that produces consistent commands, configuration, bindings, and OpenAPI output for both agents and developers. It also introduces Local Explorer, an open beta available in Wrangler and the Cloudflare Vite plugin, which mirrors Cloudflare APIs locally so you can inspect and modify KV, R2, D1, Durable Objects and Workflows during development.

🧩 Durable Object Facets let you instantiate dynamic Durable Object classes inside a supervisor Durable Object, giving each AI-generated app its own isolated SQLite-backed storage. Using the Dynamic Worker Loader API, a supervisor loads agent code, instantiates the exported DurableObject class as a facet via this.ctx.facets.get(...), and forwards requests while retaining logging, quotas, and billing controls. Facets enable near-zero-latency local storage and safe multi-tenant application patterns.

🧰 Cloudflare has declared Sandboxes and Cloudflare Containers generally available, delivering persistent, isolated development environments tailored for AI agents and human developers. Key additions include secure credential injection via an egress proxy, PTY-backed WebSocket terminals, persistent Python/JavaScript/TypeScript interpreters, filesystem event streams, background dev servers with public preview URLs, and fast disk-state snapshots. Higher instance limits and Active CPU Pricing reduce cost and improve scalability; the SDK is at version 0.8.9.

🔐 Cloudflare has added outbound Workers to its Sandboxes and Containers, providing programmable egress proxies that let sandboxed workloads connect, add observability, and perform safe authentication. Handlers such as outboundByHost and global outbound functions can inject headers, block requests, or log traffic without exposing secrets to the guest. The proxy runs locally beside the sandbox with minimal latency and integrates with platform bindings like KV and R2 for identity‑aware, dynamic controls.

🔔 Cloudflare is launching Agents Week to announce platform work aimed at scaling one-to-one AI agents across the Internet. The post argues that traditional container-based cloud models don't map well to ephemeral, per-user agents and highlights Workers and lightweight isolates as efficient primitives alongside GA container sandboxes and improved browser rendering. It also stresses integrating security, identity, payment, and open standards like MCP to make agents practical and sustainable.

🚀 Cloudflare announced it has provisioned 500 Tbps of external interconnection capacity across 330+ cities, a milestone reflecting 16 years of global network scaling. This figure represents aggregate provisioned ports to transit providers, IXPs, private peers and CNI — not peak traffic, with the unused portion reserved as the DDoS budget. The company attributes resilience to running security and developer platforms on every server and to automated, server‑level mitigation using eBPF, dosd and global propagation via Quicksilver.

🔐 Cloudflare says it is “actively adjusting” its post-quantum cryptography priorities after Google moved its PQC migration deadline up to 2029, citing algorithmic advances. The company reports that more than half of its traffic is already protected against harvest-now/decrypt-later using ML-KEM (a PQC standard ratified in 2024), and plans to deploy post-quantum certificates in 2027 to guard against active attacks. Bas Westerbaan noted Google demonstrated a breakthrough with a zero-knowledge proof while withholding key details.