Codex agent loop on Cloudflare Workers
An experimental Agents SDK example runs the Codex agent loop in a Cloudflare Durable Object with persistence and recovery.
The Deploy Log | Companies | Free, no signup
Cloudflare
Every row from Cloudflare in The Deploy Log: 64 rows, newest first, each linking the publisher's own page. The newest shipped are Codex agent loop on Cloudflare Workers and Exo agents on Cloudflare. 56 of them have a shipped date, the first and the newest . They fall in 4 months. The tables below count them by lane, month and platform.
| Lane | Rows |
|---|---|
| Tools and products | 61 |
| Funding and acquisitions | 1 |
| Figure | Value |
|---|---|
| First row dated | |
| Newest row dated | |
| Median days between release days, publisher's dates only | 2 |
| Rows with no publisher's date | 8 |
| Platform | Rows |
|---|---|
| Cloudflare Workers AI | 5 |
| Hugging Face | 1 |
Exo agents on Cloudflare
Exo agents can now run on Cloudflare with Durable Objects coordinating conversations and Sandboxes running Linux tools.
Markdown for Agents analytics and tracing
Cloudflare's Markdown for Agents is generally available with analytics, logs, playground, GraphQL API, and Traces span for monitoring conversions.
Nanocode agent harness in Durable Objects
Nanocode coding agents can now run in Cloudflare Durable Objects with persistent session history and recovery after interruptions.
AI Gateway provider key activity
AI Gateway shows usage activity for stored provider keys, with last-used and last-updated dates and a 90-day inactivity highlight.
Cloudflare Q3 2026 results
Revenue of $782.5 million, up 39% year-over-year, with Q4 guidance of $845.0 to $846.0 million.
AI Gateway model aliases
AI Gateway now supports model aliases, a pool of models called by one name with fallback or smart routing.
Cloudflare AI Crawler and Agent access policies
Cloudflare lets you set actions for top Personal Agents individually via Security > Settings > AI Crawler and Agent access policies.
AI Gateway authentication default
New AI Gateways now require authentication, on by default via API and dashboard.
AI assistant visibility in Account Abuse Protection
Account Abuse Protection now shows when a recognized AI assistant makes a login or sign up request, and which account it acted for.
Show the other 54 rows
Agents SDK v0.33.0
Agents SDK v0.33.0 upgrades PiHarness to Pi 1.5, cutting SQLite storage transactions by about 27x for long answers.
Browser Run crawl diagnostics
Browser Run /crawl results now include URL outcomes and robots.txt diagnostics for up to 50 origins.
AI Search billing and sync interval
AI Search billing postponed to December 1, 2026, and default sync interval changed from 6 to 24 hours.
Access service token tags
Access service tokens now support up to five key-value tags for organization and policy-based authorization.
Flagship local flag evaluation
Flagship bindings now evaluate flags against a local flag store during local development.
Browser Run Chrome 152
Browser Run now runs Chrome 152 by default with updated User-Agent, better site compatibility, and other fixes.
Workflows jurisdiction restriction
Workflows can now be restricted to eu, us, or fedramp jurisdictions.
Cloudflare Advanced Nameservers API
DNS settings endpoints now represent Advanced Nameservers with nameservers.type: "cloudflare.advanced", rolling out over seven days.
Cloudflare Managed Ruleset
Two rules for CVE-2026-111497 added to Cloudflare Managed Ruleset, enabled by default with action set to Log.
Workers Builds packageManager
Workers Builds now installs the npm version set in packageManager before dependencies, supporting npm, Yarn, pnpm, and Bun.
Agents SDK v0.30.0
Agents SDK v0.30.0 runs PiHarness on Pi 1.4 with hibernation, parked tasks, storage error recovery, and retried model streams.
Cloudflare Tunnel Read And Monitor role
Granular Tunnel Read And Monitor role is generally available, adding log streaming to read access for specific Tunnels.
Basin SQL OFFSET support
Basin SQL now supports OFFSET to skip a specified number of rows when retrieving query results.
Cloud Workload Security
Cloud Workload Security is now available in Beta, applying policy controls to cloud API requests.
Cloudflare API MCP server step-up authorization
The Cloudflare API MCP server now supports step-up authorization, available in all MCP clients that support it.
DeepSeek V4.1 Flash 1017 on Workers AI
DeepSeek V4.1 Flash 1017 is available on Workers AI with a 1,048,576 token context window and 20 requests per minute default rate limit.
BGP Route Filtering for IPsec/GRE
Cloudflare WAN and Magic Transit IPsec and GRE tunnels now support BGP import and export filtering.
Cloudflare Gateway Custom Applications
Custom applications can now be created in the Application Library and referenced in Gateway DNS, Network, and HTTP policies.
Pipecat PhoneLLM Mini on Workers AI
Pipecat PhoneLLM Mini is now available on Workers AI, built for voice agents and realtime AI applications.
Stream WebRTC live streaming
Ultra-low latency live video with WebRTC is generally available in Cloudflare Stream, with usage-based billing starting .
API Shield schema learning on demand
API Shield users can now manually request a schema learning run on demand.
OpenCode 2.0 on Cloudflare Agents SDK
Agents SDK 0.28.0 adds OpenCode 2.0 support through an experimental OpenCodeHarness, with SQLite sessions and Lifecycle jobs.
Unified Zero Trust dashboard navigation
Cloudflare dashboard now combines Zero Trust and main dashboard navigation, available to all customers starting today.
Workers Builds preview URLs
Workers Builds now posts preview URLs to GitHub pull requests and GitLab merge requests within seconds of a build completing.
Clef-omni
Cloudflare released Clef-omni, an open-weight decision model that takes audio in wav or mp3, video in mp4 or webm, image and text input. Cloudflare also cut the price of Clef-flash so it is now cheaper than Jev, and made Clef faster.
Clef-omni on Workers AI
Clef-omni adds audio and video input, Clef-flash is cheaper, and Clef is faster.
Cloudflare Workers flamegraphs
On-demand CPU and memory profiling with flamegraphs for Workers and Durable Objects.
AI Security for Apps unsafe topic categories
Updated unsafe topic detection categories are now available in cf.llm.prompt.unsafe_topic_categories.
Cloudflare One Client for Windows
Cloudflare One Client for Windows 2026.8.2100.0 is GA with faster reconnections, lower memory use, and service recovery.
Cloudflare One Client for macOS
Cloudflare One Client for macOS 2026.8.2100.0 is GA with faster connects, lower memory use, and split tunnel fixes.
Cloudflare Organizations GA
Cloudflare Organizations is generally available for Enterprise customers and MSSP/Distributor partners, with nested sub-organizations for partners.
AI Search
Cloudflare's AI Search is generally available, combining Workers AI, Vectorize, R2, and Browser Run into a fully managed index and retrieval pipeline, with billing starting .
Cloudflare Basin
Cloudflare Basin is generally available as a serverless data analytics platform built on Apache Iceberg and R2 Object Storage, including Basin Pipelines, Basin Catalog, and Basin SQL.
Clef decision models
Cloudflare released two trained decision models, Clef and Clef-flash, hosted on Workers AI. Clef is currently the leader when evaluated against the Jev Decision Index, and the models are open-sourced on Hugging Face under an Apache 2.0 license.
Workers KV Instant
Workers KV Instant, powered by Quicksilver, offers 100 times faster p99 reads than classic mode with reads resolving in under two milliseconds at p99, and writes replicating in around 250ms for 99% of writes.
Protected Quick Tunnels
Starting with cloudflared 2026.9.3, you can add --allowed-mail to a Quick Tunnel command, and the tunnel only lets in the email addresses and domains you choose, with visitors proving ownership via a one-time PIN from Cloudflare Access.
Workers post-quantum crypto
Cloudflare Workers added support for post-quantum-resistant algorithms within Web Crypto, including ML-KEM-768 and ML-KEM-1024 for key encapsulation and ML-DSA-44, ML-DSA-65, and ML-DSA-87 for signatures, behind the webcrypto_modern_algorithms compatibility flag.
Cloudflare Web Search API
Web Search API beta on AI Gateway with Ceramic.ai, Exa, and Linkup providers, billed at list API price.
Strict service token authentication
Cloudflare Access added a strict service token authentication setting, default on for organizations created after .
Workers KV namespace jurisdictions
Workers KV namespace jurisdictions are generally available with eu, us, and fedramp regions.
Workers Observability in Custom Dashboards
Cloudflare adds Workers Observability Logs and Traces datasets to Custom Dashboards, with up to 100 dashboards per account.
Workers Web Crypto ML-KEM/ML-DSA
Workers Web Crypto API now supports ML-KEM-768, ML-KEM-1024, ML-DSA-44, ML-DSA-65, and ML-DSA-87.
AI Gateway Machine Payments
AI Gateway supports Machine Payments in beta for /ai/run with select open models via x402 stablecoin payments.
Cloudflare One Client for Windows
Beta release 2026.8.2033.1 is available with fixes for traffic blocking, reauthentication, DNS, and client crashes.
AI Gateway User Insights
User Insights for AI Gateway is available to all customers at no additional cost, showing model overuse and potential savings.
Cloudflare Application Profiles
Positive security enforcement with Cloudflare Application Profiles.
Cloudflare Containers disk limit
Custom Container instance types can now allocate up to 20 GB disk regardless of memory.
Cloudflare network log fields
Gateway network logs and Network Session Logs now identify Mesh, Workers VPC, and Tunnel replica traffic.
Threat Signals
Agentic skills for open-source threat intelligence, free for every Cloudflare account.
Python Workers
Python Workers are now generally available on Cloudflare.
Adaptive Intelligence
Cloudflare launched Adaptive Intelligence on , a bot detection engine that makes getting through so slow and costly that attacks stop being worth running, analyzing more than a trillion requests a day.
Vulnerability Discovery
Cloudflare announces early access to Vulnerability Discovery and Remediation, using OpenAI Daybreak models to detect and propose fixes for codebase vulnerabilities.
Bot Preference Sync
Cloudflare's Bot Preference Sync, available to all customers from Free to Enterprise, updates robots.txt to match your AI bot configuration for Search, Agent, and Training traffic.
CT Monitoring GA
Cloudflare made Certificate Transparency Monitoring generally available, now filtering out Cloudflare-issued certificates to reduce noise for over 650,000 customer domains.
For Cloudflare's own page or README, this badge links here: <a href="https://deployedbyai.com/log/company/a248aed96312/cloudflare/?k=badge"><img src="https://deployedbyai.com/log/company/a248aed96312/badge.svg" alt="Cloudflare in The Deploy Log" width="257" height="20"></a>
One line every time AI actually ships, around the clock, free on Threads and Bluesky. Every one is in The Deploy Log with its source.