Cloudflare OS: An Overview of the Open-Source AI Agent Platform

Overview

• Cloudflare has introduced a new open-source version of Cloudflare OS, aimed at equipping every employee with an AI agent and development tools.
• This iteration features an agent workspace, a security framework called "Gatekeepers," and a system for deploying personalized applications as Cloudflare Workers.
• A major advantage is the option to run the platform on proprietary infrastructure, enabling access to private data without broad API key exposure.

Originally intended for internal use, Cloudflare OS was rolled out to its employees in May, as highlighted by CEO Matthew Prince. Individuals outside the engineering team began using it for various tasks, including document drafting and automating repetitive tasks. The newly launched version is now available for external organizations to integrate with their systems.

According to the company, "Security must be an integral part of the platform, not something each individual developing an app or using an agent has to manage independently," underscoring the product's emphasis on security.

Key Features of Cloudflare OS

Cloudflare OS is built around three primary components. The first is the agent workspace, which organizes conversations based on the organization’s specific knowledge and provides a secure coding environment. The second is a new governance system that safeguards organizational records from agents. Lastly, it includes a framework for developing personal apps, enabling users to convert chats into documents, workflows, or small applications.

Sam Rhea, Cloudflare's CIO, detailed the security approach for this initiative, emphasizing the risks associated with providing API keys to users and agents. Instead of granting broad access, agents start without permissions and must request specific resources, which are managed by a Gatekeeper—a Cloudflare Worker that oversees access. This method prevents credentials from being exposed to agents or their code.

This architecture is more efficient than relying solely on the Model Context Protocol (MCP), which lacks the ability to specify the resources accessed by agents. Cloudflare OS logs all actions and verifies user permissions before allowing access to workspaces or outputs generated by agents.

Applications created by agents operate as genuine Cloudflare Workers, utilizing Dynamic Workers and Durable Object Facets tailored for this platform, and communicate through Cap'n Web, an open-source RPC system. The company stated, "If you can create a tool to perform a task yourself, agents can leverage your tool to accomplish that task in your absence."

While the vision is ambitious, some users may question the platform's open-source nature, as all agents, applications, and governance systems are hosted on Cloudflare's infrastructure. The term "open" refers to code accessibility, but the runtime remains under centralized control.