Moving past bots vs. humans
… Therefore, most servers decide to apply access control logic based on the information they receive. If a single IP address is making 10x the number of requests as others, it might be blocked. …
Search
Managed OAuth for Access: make internal apps agent-ready in one click
… These have their place in simple use cases and quick prototypes, and Cloudflare Access supports service tokens for this purpose. But the service account approach quickly shows its limits when fine-grained access controls and audit logs are required. …
Introducing Flagship: feature flags built for the age of AI
… You can request for access here . …
Introducing the Agent Readiness score. Check to see if your site is agent-ready
… When you enter your site, Cloudflare makes requests to it to check which standards it supports, and provides a score based on four dimensions: Discoverability: robots.txt , sitemap.xml , Link Headers RFC 8288 Content: Markdown for Agents Bot Access Control: Content Signals , AI bot rules in robots.… …
Announcing Claude Compliance API support with Cloudflare CASB
… Cloudflare Access with MCP server portals centralizes agent connections to corporate tools behind a single protected endpoint. Administrators control which users and agents can reach which systems, and every request is logged for audit. …
The AI engineering stack we built internally — on the platform we ship
… Each layer maps to a Cloudflare product or tool we use: What we built Built with Zero Trust authentication Cloudflare Access Centralized LLM routing, cost tracking, BYOK, and Zero Data Retention controls AI Gateway On-platform inference with open-weight models Workers AI MCP Server Portal with sing… …
Cloudflare’s AI Platform: an inference layer designed for agents
… By including custom metadata with your requests, you can get a breakdown of your costs on the attributes that you care about most, like spend by free vs. paid users, by individual customers, or by specific workflows in your app. const response = await env.AI.run '@cf/moonshotai/kimi-k2.5', { prompt… …
Orchestrating AI Code Review at scale
… The ConfigureContext gives plugins a controlled surface to affect the review. They can register agents, add AI providers, set environment variables, inject prompt sections, and alter fine-grained agent permissions. No plugin has direct access to the final configuration object. …
Project Glasswing: what Mythos showed us
… For instance, it might turn a use-after-free bug into an arbitrary read and write primitive, hijack the control flow, and use return-oriented programming ROP chains to take full control over a system. …
Code Orange: Fail Small is complete. The result is a stronger Cloudflare network
… Before this Code Orange initiative, our "break glass" pathways were restricted to a handful of people and offered limited tool access. …