Summary

The day was dominated by Cloudflare building out a full agent-native web stack — a stateless MCP rewrite that runs in a single Worker, a WebMCP preview that makes any proxied site agent-callable without code changes, the Kitesurf agent-first browser, and Radar Researcher as a reference agent — alongside its Precursor system for telling humans from agents at the edge. Running in parallel, vendors moved to govern and contain agents inside enterprise boundaries: Anthropic shipped self-hosted Claude Code environments and beta scanning of third-party skills and plugins, while Vercel deepened enterprise controls with native SIEM audit drains, public container repos, and AI Gateway plus Sandbox inside Hermes Agent.

Key themes

  • Cloudflare is assembling a full agent-native web stack in one week: a fully stateless MCP rewrite (2026-07-28 spec) that runs in a single Worker and autoscales like ordinary serverless, the WebMCP preview that turns any Cloudflare-proxied site into an agent-callable surface via a dashboard toggle with no code changes, the Kitesurf agent-first browser running in V8 isolates on Workers, and Radar Researcher as a flagship agent built entirely on its own primitives.
  • The human-versus-agent boundary is becoming a first-class edge control. Cloudflare's Precursor adds continuous client-side behavioral scoring to catch subtly inhuman traffic that network signals alone miss, complementing its bot-management and agent-identity work so sites can allow wanted agents and block extractive ones without breaking real users.
  • Vendors are racing to add supply-chain governance as agent extension ecosystems expand: Anthropic's beta scanning of third-party Claude skills and plugins (returning pass, warn, or fail on upload or edit) lands the same week as Cloudflare's MCP-server controls, treating unvetted extensions as a growing attack surface.
  • Enterprises are pulling agent execution inside their own boundary. Claude Code's self-hosted environments (public beta) let Team and Enterprise customers run agent sessions on their own runners to reach internal services and data without exposing them to the internet, while Vercel adds native SIEM destinations (Datadog, Splunk, Panther) to Audit Log Drains for compliance-sensitive teams.
  • Neutral, multi-model infrastructure is positioning itself as the substrate under other agents: Vercel brought its AI Gateway (inference across 200+ models with no token markup) and microVM Sandbox into Hermes Agent, and opened public read-only Container Registry repositories to keep image distribution on-platform.

Notable items

  • Cloudflare rewrites MCP as a fully stateless protocol so servers run in a single Worker and autoscale like ordinary serverless functions — the day's highest-impact infrastructure shift for the fast-growing MCP ecosystem.
  • Claude Code launches self-hosted environments (public beta), letting Team and Enterprise customers run agent sessions on their own compute to reach internal databases, registries, and toolchains without opening them to the public internet.
  • Cloudflare previews WebMCP, exposing website tools to visiting AI agents via a single dashboard toggle with no site code changes — a shift from brittle scraping toward structured tool calls.
  • Cloudflare launches Kitesurf, an agent-first browser running in V8 isolates on Workers that uses 3–7x less CPU and memory than Chromium for agent tasks, at the cost of slower software rendering.
  • Cloudflare introduces Precursor, continuous client-side verification that injects JavaScript to detect subtly inhuman bot and agent traffic that network signals alone miss.
  • Anthropic adds automatic security scanning (pass/warn/fail) for third-party Claude skills and plugins on Enterprise plans, in beta, across Claude, Cowork, and Enterprise plugin marketplaces.
  • Vercel brings AI Gateway (200+ models, no token markup) and microVM Sandbox into Hermes Agent for markup-free inference and isolated execution of generated code.
  • Cloudflare launches Radar Researcher, a natural-language agent for exploring Internet data, built end-to-end on Cloudflare Workers, the Agents SDK, Durable Objects, Workers AI, and AI Gateway.
  • Vercel Audit Log Drains add Datadog, Splunk, and Panther as native SIEM destinations, replacing Custom SIEM Log Streaming for Enterprise teams.
  • Vercel Container Registry adds public, read-only repositories any Vercel account can pull, moving toward parity with Docker Hub and GitHub Container Registry.

Source coverage

Source rows used: 10