Topic

#cloudflare

Loot, blog posts and adjacent themes connected to this topic. Follow the tag to keep it in your orbit.

#cloudflare
Loot

More from this topic

Explore all loot
Debug Cloudflare Workers locally with traces an AI agent can read

Debug Cloudflare Workers locally with traces an AI agent can read

0
Text: AI-generated
AI-generated · Automatically published by LinkLoot. Cloudflare’s new local tracing flow exposes OpenTelemetry traces, logs, and binding state during local Worker development so agents can inspect failures without a deploy loop. AI-generated: This Loot was created and published automatically by LinkLoot and was not substantively reviewed by a human editor. Cloudflare added local tracing for Workers in wrangler dev and vite dev, with a read-only Local Explorer API that AI agents can query while debugging local failures. What it is wrangler dev and vite dev now automatically capture structured OpenTelemetry traces and correlated console logs during local Worker invocations. When Cloudflare detects an AI agent session, it prints a terminal hint for /cdn-cgi/explorer/api, which exposes an OpenAPI schema and observability endpoints. Who it helps This is useful for developers using coding agents on Cloudflare Workers. Instead of asking an agent to infer failures from terminal logs alone, you can give it a structured local signal: traces, spans, timing, errors, console logs, and binding state. How to evaluate it Run a Worker locally, trigger a failing request, then inspect Local Explorer in the browser or point your agent at the read-only explorer API. Check whether the agent can identify the failing operation, edit the code, rerun the request, and verify the fix without deploying temporary diagnostics. Limits and risks The API is local and read-only, but trace data can still expose request details, environment behavior, or sensitive logs. Review what your Worker logs before handing the endpoint to an agent. This is a developer convenience, not a substitute for production observability or security review. Sources Cloudflare changelog
Free
Review open
0
Test Cloudflare Browser Run requests before wiring a Worker

Test Cloudflare Browser Run requests before wiring a Worker

0
Text: AI-generated
AI-generated · Automatically published by LinkLoot. Cloudflare's new Browser Run Playground lets developers trial screenshots, PDFs, extraction, and AI-structured scraping from the dashboard before writing integration code. AI-generated: This Loot was created and published automatically by LinkLoot and was not substantively reviewed by a human editor. What it is Cloudflare Browser Run now has a dashboard Playground for testing Quick Actions against a live browser. You can submit a URL or raw HTML, adjust viewport and page-load settings, preview output, and copy working request code. Who it helps It is useful for developers building browser automation, scraping, QA capture, agent browsing, or document-generation workflows on Cloudflare. It reduces setup time when you need to prove that a page can be captured, parsed, or turned into structured data before creating a Worker. How to evaluate it Start with a non-sensitive URL, test screenshots or Markdown extraction, then compare the copied request against the Browser Run Quick Actions documentation. If you use AI extraction, test with a small JSON schema first so costs and output shape are visible before adding it to a production flow. Limits and risks The Playground is not a free sandbox. Cloudflare says Playground requests incur Browser Run charges, and AI extraction also incurs Workers AI charges. Treat target pages as untrusted input, avoid submitting secrets, and check site terms before automating extraction at scale. Sources Cloudflare changelog
Free
Review open
0
Find slow Cloudflare Worker startup code from Wrangler

Find slow Cloudflare Worker startup code from Wrangler

0
Text: AI-generated
AI-generated · Automatically published by LinkLoot. Wrangler 4.116.0 adds wrangler check startup, giving Workers developers local bundle-size and CPU-startup signals before cold starts hurt production latency. AI-generated: This Loot was created and published automatically by LinkLoot and was not substantively reviewed by a human editor. Cloudflare added a practical diagnostic command for Workers teams that need to shrink cold-start cost before deploying a heavier bundle. What it is wrangler check startup reports a Worker's raw and compressed bundle sizes, then summarizes local CPU activity during startup. The report includes sampled time, active time, garbage collection, idle time, and a saved .cpuprofile file for deeper inspection in Chrome DevTools or VS Code. Who it helps Use it when a Worker or Durable Object has grown through dependencies, framework code, large generated files, or expensive top-level initialization. It is most useful before a launch, after a dependency upgrade, or when a fast local route still feels slow after deployment. How to evaluate it Update to Wrangler 4.116.0 or later, run the startup check locally, then inspect the .cpuprofile if the summary points to heavy startup work. Treat the numbers as a local signal, then deploy or upload a version when you need Cloudflare's authoritative startup-time behavior. Limits and risks Cloudflare notes that the profile runs on your local machine, so it will not exactly match Cloudflare's runtime. The command is a diagnostic tool, not a production latency guarantee. It also will not tell you whether a slow request comes from downstream APIs, storage calls, or route-level logic after startup. Sources Cloudflare changelog
Free
Review open
0
Add Cloudflare AI Search to agent apps without hand-rolling retrieval

Add Cloudflare AI Search to agent apps without hand-rolling retrieval

0
Cloudflare published integration paths for using AI Search from the Vercel AI SDK, LangChain, and the Cloudflare Agents SDK. Cloudflare AI Search is now easier to plug into agent and RAG apps because Cloudflare added official guides and framework integrations for common agent stacks. What it is Cloudflare’s July 30 changelog adds an Agents section for AI Search, including examples for the Vercel AI SDK, LangChain, and the Cloudflare Agents SDK. The AI SDK path uses the ai-search-provider package, while LangChain gets a CloudflareAISearchRetriever through langchain-cloudflare. Who it helps This is useful for developers who already index content in Cloudflare and want grounded answers inside an agent loop. It is especially relevant if you are building Workers-based assistants, support bots, internal knowledge tools, or RAG flows that should return source chunks instead of opaque completions. How to evaluate it Start with one small AI Search instance and wire it into a single answer path. Check whether the retrieved chunks are exposed cleanly in your UI or logs, then test failure modes: empty search results, stale indexed content, permission boundaries, and prompt-injection attempts inside retrieved documents. Limits and risks This is a practical integration update, not a new foundation model or major platform shift. You still need to manage Cloudflare credentials, indexing quality, source filtering, and retrieval safety. Treat indexed external content as untrusted input when passing it into an agent. Access and pricing Cloudflare links AI Search to its normal plan and sales pages. Check your account’s AI Search availability and billing before moving beyond a prototype. Sources Cloudflare changelog Cloudflare AI Search docs
Free
Review open
0
Update Cloudflare Agents without forcing an AI SDK migration

Update Cloudflare Agents without forcing an AI SDK migration

0
Cloudflare Agents packages now support AI SDK v6 and v7, so teams can update agent tooling while choosing their own migration timing. Cloudflare updated its Agents SDK packages so agents, @cloudflare/ai-chat, @cloudflare/codemode, and @cloudflare/think support both AI SDK v6 and v7. That is useful if you maintain a Cloudflare-based agent app and want the latest Agents packages without turning the dependency update into a forced AI SDK migration. The supported peer ranges are ai@^6 ^7 and @ai-sdk/react@^3 ^4. Cloudflare's note says to pair AI SDK v6 with @ai-sdk/react v3, or AI SDK v7 with @ai-sdk/react v4. Think also normalizes streaming, tool-completion events, and telemetry across both major versions. Use this as a practical upgrade checkpoint: Check whether your app is on AI SDK v6 or v7. Update the Cloudflare Agents packages. Keep the matching @ai-sdk/react major version. Test streaming output, tool calls, and telemetry before deployment. This is a Loot item, not a broad platform-news post: the main value is a clean migration path for teams already building with Cloudflare Agents.
Free
Review open
0
Manage Cloudflare Feature Flags from Wrangler

Manage Cloudflare Feature Flags from Wrangler

0
Cloudflare added wrangler flagship, a command suite for creating Flagship apps, managing feature flags, running rollouts, splitting traffic, evaluating flags, and using CLI kill switches from local terminals or CI. Cloudflare's new wrangler flagship commands give Worker teams a direct CLI path for feature-flag operations that previously pushed developers back into dashboards or custom API scripts. Use it when you need to create Flagship apps, bind flags to a Worker project, define boolean/string/number/JSON variations, roll out a variation by percentage, split traffic, evaluate a flag for a targeting key, or disable a flag as a kill switch. Practical checks before adopting it: Update Wrangler and confirm Flagship is available for the account. Use CLOUDFLAREAPITOKEN in automation with the narrow Flagship read/write permissions Cloudflare documents. Keep flag keys stable because application code evaluates by key. Prefer --json output in scripts so CI jobs can capture app IDs and flag state safely. Treat destructive commands carefully: deleting an app removes its flags and changelog history, and Cloudflare rejects deletion when a Worker still references the app through a Flagship binding. This is a Tool, not a prompt: the value is the official CLI surface for release control, rollout automation, and agent-friendly deployment checks.
Free
Review open
0
Deploy Cloudflare Workers from an Agent Without OAuth Using Temporary Accounts

Deploy Cloudflare Workers from an Agent Without OAuth Using Temporary Accounts

0
Cloudflare Temporary Accounts let an agent run wrangler deploy --temporary, publish a Worker for 60 minutes, verify it, redeploy changes, and hand a claim URL to a human. Use it for agent-built prototypes, demos, and review links when you do not want the agent handling a permanent Cloudflare login or API token. Check limits before production: unclaimed deployments expire, a human still needs to claim the account, and permanent workloads need normal ownership and security review. Cloudflare Temporary Accounts let an agent run wrangler deploy --temporary, publish a Worker for 60 minutes, verify it, redeploy changes, and hand a claim URL to a human. Use it for agent-built prototypes, demos, and review links when you do not want the agent handling a permanent Cloudflare login or API token. Check limits before production: unclaimed deployments expire, a human still needs to claim the account, and permanent workloads need normal ownership, observability, and security review.
Free
Review open
0
Make Cloudflare Workflows retry around rate limits instead of fixed timers

Make Cloudflare Workflows retry around rate limits instead of fixed timers

0
Cloudflare Workflows now lets each step calculate its next retry delay from the failed attempt and error, useful for rate limits, Retry-After handling, and flaky downstream APIs. Cloudflare added dynamic retry delays to Workflows on July 9, 2026. Instead of picking only a fixed delay plus constant, linear, or exponential backoff, a Workflow step can now pass a function to retries.delay and calculate the next wait from the current attempt and the thrown error. Use this when a workflow calls APIs with different failure modes: wait longer on rate-limit errors, retry faster after a short network failure, or map provider guidance such as Retry-After into your next delay. This is a practical fit for customer sync jobs, AI-provider orchestration, payment/CRM integrations, and any durable workflow that should avoid both blind hammering and unnecessary waiting. Check before using Confirm your Workflow code is using the current Cloudflare Workflows API and docs. Treat error-message matching as a fallback; prefer structured error data when your SDK exposes it. Add a maximum retry count and clear terminal-error path so bad credentials or malformed payloads do not loop. Test against one intentionally rate-limited API call before relying on it for paid providers. Sources Cloudflare changelog: dynamic retry delay support for Workflows. Cloudflare Workflows docs: sleeping, retrying, and the retries.delay function shape.
Free
Review open
0
Run fast vision checks at the edge with Moondream 3.1 on Workers AI

Run fast vision checks at the edge with Moondream 3.1 on Workers AI

0
Cloudflare added Moondream 3.1 to Workers AI, giving developers a low-latency vision model for image queries, captions, detection, and coordinate pointing. Cloudflare has added Moondream 3.1 to Workers AI as @cf/moondream/moondream3.1-9B-A2B, making it easier to run practical vision tasks close to users without standing up a separate model server. What it is Moondream 3.1 is a compact vision-language model with a 9B total parameter mixture-of-experts design and 2B active parameters. Cloudflare positions it for real-time image work where latency matters: moderation, screenshot inspection, document field extraction, live overlays, and agent workflows that need to inspect a visual state before choosing the next action. Who should try it Use it if you already build on Cloudflare Workers, Workers AI, or AI Gateway and need image understanding inside a request path. It is most useful for teams that need quick visual answers rather than a heavyweight offline analysis pipeline. What to evaluate Test the four main task modes: query, caption, point, and detect. Check latency with your own image sizes and prompt complexity; Cloudflare's example numbers are for a simple single-subject image. Confirm pricing through Workers AI before moving high-volume moderation or camera workloads into production. Compare output quality against your current vision model on the exact images your product sees. Limits and risks Cloudflare says animated GIFs and complex images can change processing behavior, and real latency depends on image detail and request shape. Treat it as a candidate for evaluation, not a drop-in guarantee for safety-critical computer vision. Sources Cloudflare changelog: https://developers.cloudflare.com/changelog/ Moondream: https://moondream.ai/
Free
Review open
0
Preview Static Sites for One Hour with Cloudflare Drop

Preview Static Sites for One Hour with Cloudflare Drop

0
Cloudflare Drop lets you upload a folder or ZIP of static assets, get a temporary live preview for one hour, then claim the deployment into a Cloudflare account if it is worth keeping. Cloudflare Drop is a browser-based way to test static sites without setting up Git, Wrangler, or even a Cloudflare account first. Upload HTML, CSS, JavaScript, images, fonts, or a ZIP archive, then share or test the temporary preview URL for one hour. Use it for quick demos, AI-generated static exports, client previews, landing-page drafts, documentation microsites, and handoffs where a live URL is more useful than a screenshot. If the preview works, claim it into a Cloudflare account, verify email when needed, and then add a domain, observability, access controls, or Markdown for Agents. Limits to check: the preview is temporary until claimed, the workflow is for static assets, and production projects still need the usual ownership, domain, security, and maintenance checks. Treat Drop as a fast preview lane, not a replacement for a governed deployment pipeline.
Free
Review open
0
LinkLoot preview for Use Cloudflare Mythos to Find Real Codebase Bugs with AI Agents

Use Cloudflare Mythos to Find Real Codebase Bugs with AI Agents

0
A practical defensive guide for checking your own codebase with AI agents: narrow scopes, parallel hunts, adversarial validation, reachability tracing, dedupe, gapfill, and governance gates. Built from the core operational lessons in Cloudflare's Project Glasswing write-up.
29
Review open
0
Blog

Related reads

Browse blog
Tools & Apps

Cloudflare merges Workers AI and AI Gateway billing into one control plane

AI-generated · Automatically published by LinkLoot. Cloudflare is unifying Workers AI and AI Gateway so developers can call Cloudflare-hoste

Tools & Apps

Cloudflare adds identity-aware controls to AI Gateway for enterprise AI spend

AI-generated · Automatically published by LinkLoot. Cloudflare launched Identity-Aware AI Gateway in open beta and made User Insights genera

Tools & Apps

Cloudflare ships emergency WAF rules for active RCE and SQLi attacks

Cloudflare's July 17 emergency WAF release adds block-mode detections for active unauthenticated RCE and SQL injection exploitation in popul

Tools & Apps

Cloudflare exposes Temporary Accounts through its API

Cloudflare now lets platforms create temporary preview accounts through the REST API, giving AI app builders and coding-agent products a way

Tools & Apps

Replace Cloudflare Workers KV legacy API routes before October

Cloudflare has deprecated the legacy Workers KV namespace API paths and will stop serving them on October 15, 2026. Update integrations from

Tools & Apps

Cloudflare Precursor Makes Bot Detection a Full-Session Problem

Cloudflare has launched Precursor, a session-based bot detection system that watches browser behavior across a full visit instead of relying

AI & Automation

Set AI crawler rules at the origin: Cloudflare Markdown for Agents now preserves Content-Signal headers

Cloudflare's July 13 update makes origin-set Content-Signal, security, and cache headers survive Markdown for Agents conversion, giving publ

Tools & Apps

Check Durable Object Storage Before Your Next Cloudflare Worker Deploy

Cloudflare now requires new Durable Object namespaces to use the SQLite storage backend for accounts that do not already have KV-backed name

Tools & Apps

Fix Cloudflare Tunnel API Scripts Before October 5 Route Changes

Cloudflare will remove CIDR-encoded Zero Trust route endpoints and stop returning tunnel connection arrays on October 5, 2026. Teams using s

Tools & Apps

Harden Cloudflare IPsec Tunnels Before Quantum Downgrade Risk Reaches Production

Cloudflare added beta IKEv2 full-transcript authentication for WAN and Magic Transit IPsec tunnels, closing a downgrade gap that can survive

AI & Automation

Use Cloudflare Browser Run accessibility trees before agents guess from screenshots

Cloudflare Browser Run now exposes a direct accessibility tree endpoint, giving AI agents and automation tools structured page context witho

Tools & Apps

Count Cloudflare Workflows steps before August billing starts

Cloudflare Workflows now has per-step pricing in its billing model, with step and storage billing scheduled to start no earlier than August

Tools & Apps

Stop deleting Cloudflare R2 Iceberg files by hand

Cloudflare now warns in the dashboard and Wrangler before manual deletes on R2 Data Catalog buckets, reducing the risk of corrupting Apache

Tools & Apps

Check Cloudflare WAF Logs Before Citrix and Kemp Exploit Traffic Turns Noisy

Cloudflare has scheduled new WAF detections for Citrix NetScaler CVE-2026-8451 and Progress Kemp LoadMaster CVE-2026-8037, giving defenders

Tools & Apps

Register Cloudflare One Virtual Appliances without waiting on account teams

Cloudflare now lets Enterprise WAN teams register virtual appliances, generate one-time keys, and rotate keys directly from the dashboard.

Tools & Apps

Fix Cloudflare Worker type drift before workers-types v5 removes dated entrypoints

Cloudflare released @cloudflare/workers-types v5 with only latest and experimental runtime type entrypoints, making wrangler-generated types

Tools & Apps

Cache localized Cloudflare pages without splitting every URL

Cloudflare Cache Rules now honor the HTTP Vary response header, letting teams cache multiple variants of the same URL by headers such as Acc

Tools & Apps

Use Wrangler auth profiles to stop switching Cloudflare logins by hand

Cloudflare added Wrangler auth profiles, letting Workers developers bind named OAuth logins to project directories and switch Cloudflare acc

Money & Finance

Charge APIs and MCP Tools with Cloudflare's x402 Monetization Gateway

Cloudflare opened the waitlist for Monetization Gateway, a usage-based payment layer for web pages, datasets, APIs, and MCP tools using x402

Business & Karriere

Use Cloudflare's AI traffic controls before crawler defaults change

Cloudflare now lets all customers manage AI crawler traffic by Search, Agent, and Training behavior, with new onboarding defaults scheduled

Tools & Apps

Cloudflare adds organization audit logs to the dashboard

Cloudflare Organization Super Administrators can now view organization-level Audit Logs v2 in the dashboard, not only through API access.

Tools & Apps

Protect Cloudflare WARP macOS Registrations With Secure Enclave Keys

Cloudflare One Client for macOS 2026.6.822.0 adds hardware-backed registration with Secure Enclave support, giving Zero Trust admins a stron

Tools & Apps

Run Cloudflare agent work in the background with the new Agents SDK update

Cloudflare's latest Agents SDK update adds detached background sub-agents, durable progress, a unified runTurn entry point, and recovery fix

Tools & Apps

Check FortiSandbox Exposure: Cloudflare Adds CVE-2026-39813 WAF Logging

Cloudflare scheduled a new managed WAF detection for Fortinet FortiSandbox CVE-2026-39813 on June 29, 2026. The rule starts in log mode, so

Tools & Apps

Keep Durable Objects in the US: Cloudflare Adds a `us` Jurisdiction

Cloudflare now lets developers restrict Durable Objects compute and storage to the United States, giving Workers teams a cleaner option for

Tools & Apps

Use Cloudflare PACT to prepare for a web with fewer CAPTCHAs

Cloudflare, Mozilla, Google, Microsoft, and Shopify are developing Private Access Control Tokens, a privacy-preserving way for sites to dist

Tools & Apps

Harden Ghost sites: Cloudflare WAF now blocks the CVE-2026-26980 SQL injection path

Cloudflare added managed WAF protection for Ghost CMS CVE-2026-26980, a critical Content API SQL injection fixed in Ghost 6.19.1. Patch firs

Tools & Apps

Run long agent tasks on Cloudflare without losing progress

Cloudflare Agents SDK v0.17.0 adds detached background sub-agent runs, progress milestones, and a unified runTurn entry point for more resil

Tools & Apps

Block Ivanti Sentry CVE-2026-10520 faster: Cloudflare WAF adds managed protection

Cloudflare has added a managed WAF rule for CVE-2026-10520, a critical Ivanti Sentry OS command injection flaw that CISA and NVD list as act

Tools & Apps

Cloudflare Workflows Adds Saga Rollbacks for Durable Step Compensation

Cloudflare Workflows now supports saga-style rollbacks, letting developers attach compensation logic directly to durable `step.do()` calls w

Tools & Apps

Cloudflare adds temporary accounts so AI agents can deploy Workers without signup

Cloudflare Temporary Accounts let AI agents deploy Workers with Wrangler, keep the preview live for 60 minutes, iterate during that window,

Tools & Apps

Cloudflare AI Gateway spend limits turn LLM cost control into a routing decision

Cloudflare added dollar-based spend limits to AI Gateway, letting teams cap model spend by provider, model, user, team, or application and r

Tools & Apps

Astro 6.4 adds a pluggable Markdown pipeline and Rust processor option

Astro 6.4 introduces a pluggable Markdown processor API, an experimental Rust-based Markdown processor, and helpers for Cloudflare advanced

Tools & Apps

Cloudflare Dynamic Workers make AI-agent sandboxing lighter than containers

Cloudflare says Dynamic Workers let developers run AI-generated code in lightweight isolates, positioning the open beta as a faster sandboxi

AI & Automation

Cloudflare Workers AI adds Kimi K2.5 for larger agent workloads

Cloudflare says Workers AI now runs Kimi K2.5, giving builders a hosted open-source model with long context, tool calling, vision inputs, an

AI & Automation

Cloudflare Mythos lesson: stop asking one agent to scan your whole codebase

Cloudflare's Project Glasswing write-up is not just about Mythos chaining exploits. The bigger lesson is how to structure AI agents for real

Tools & Apps

Daf·thunk is an open-source Cloudflare workflow editor for teams that want visual automation without a heavyweight stack

Daf·thunk combines a visual workflow editor, Cloudflare-native execution, and AI-ready nodes in a newly surfaced open-source project worth w