On July 29, 2026, Cloudflare enabled post-quantum (PQ) authentication for the mutually authenticated TLS connections between its edge and customer origin servers, through Authenti…
On July 29, 2026, Cloudflare shipped a WAF Managed Ruleset update adding new protections against a Nuxt Server Island remote code execution vulnerability and Alibaba Fastjson dese…
On July 28, 2026, Cloudflare's Browser Run added a structured handoff for human-in-the-loop workflows. Using Cloudflare-specific CDP commands, an agent driving a browser can forma…
Cloudflare now requires the Workers Paid plan (from $5/month) to run three resource-intensive Workers AI models: Kimi K2.6, Kimi K2.7-Code, and GLM-5.2. Cloudflare frames the chan…
On July 28, 2026, Cloudflare began requiring the Workers Paid plan to run three resource-intensive models on Workers AI: @cf/moonshotai/kimi-k2.6, @cf/moonshotai/kimi-k2.7-code, a…
In late July 2026, Cloudflare shipped support for the newly finalized Model Context Protocol 2026-07-28 specification across both its hosted MCP servers and Agents SDK v0.20.0. Th…
On July 27, 2026, Cloudflare open-sourced pvcli, a curl-like command-line tool built to simplify testing of complex privacy protocols such as Oblivious HTTP (OHTTP). It gives deve…
On July 27, 2026, Cloudflare added createTestHarness() to Wrangler, an API for running integration tests across Workers. It supports multi-Worker routing, request mocking, and Pla…
On July 23, 2026, Cloudflare updated its Agents SDK packages — agents, @cloudflare/ai-chat, @cloudflare/codemode, and @cloudflare/think — to support both Vercel AI SDK v6 and v7.…
On July 23, 2026, Cloudflare launched Cache Response Rules, which let customers modify cache behavior based on the origin's response - adjusting headers like Set-Cookie and Cache-…
In a July 22, 2026 update, Cloudflare's Agents and Workers products stopped re-converting MCP JSON Schemas to Zod on every model turn by reusing converted input and output schemas…
Cloudflare added a Temporary Accounts API that lets platforms create temporary preview accounts via the REST API and deploy a live Worker before a user signs in, returning a claim…
Cloudflare's Agents SDK now lets agents connected to Model Context Protocol servers via addMcpServer handle elicitation requests, so an MCP server can pause a tool call to ask the…
Cloudflare's Markdown for Agents conversion now preserves security and caching headers from the origin and honors origin Content Signals, and it fixes relative-link resolution for…
Cloudflare added Precursor, a client-side JavaScript that continuously evaluates behavioral signals across a session and updates bot scores in real time, feeding re-validation int…
Cloudflare's R2 Data Catalog now accepts Admin Read-only API tokens for read operations, so clients and agents can query Iceberg catalog data without being granted Admin Read & Wr…
On July 8, 2026 Cloudflare made Moondream 3.1 available on Workers AI, a mixture-of-experts vision-language model (9B total / 2B active, 32K context) that answers questions about…
Cloudflare's Workers AI toMarkdown and AI Search now convert GIF and BMP images into searchable Markdown descriptions, extending the existing JPEG, PNG, WebP, and SVG support with…
On July 8, 2026 Cloudflare launched Drop, which turns a dragged folder or zip of static assets into a live URL on Cloudflare's network in seconds — no Cloudflare account, Wrangler…
Cloudflare shipped Drop, letting anyone drag a folder or zip into the browser and get a live site on Cloudflare's global network in seconds — with no account, no Wrangler config,…
Cloudflare unveiled the Monetization Gateway during Agents Week 2026, letting site owners charge any caller — including AI agents — for access to web pages, datasets, APIs, or MCP…
As part of Agents Week 2026, Cloudflare paired its new purpose-based crawler classification with commercial partnerships that compensate creators when AI systems use their content…
During Agents Week 2026, Cloudflare launched the ability to manage automated traffic by purpose — Search, Agent, and Training crawlers — rather than as one undifferentiated bot cl…
On June 26, 2026 Cloudflare added service-token support to Access MCP server portals, letting autonomous agents and bots reach upstream MCP servers through a portal without a brow…
Cloudflare added custom topics to AI prompt protection, extending predefined detections for PII, source code, and jailbreak attempts with organization-specific concepts. Teams can…
Cloudflare updated Browser Run's `/snapshot` endpoint with a formats parameter that can return multiple page representations in one call. In addition to HTML and screenshots, deve…
Cloudflare released Agents SDK v0.12.4 with a cluster of reliability upgrades across `agents`, `@cloudflare/ai-chat`, `@cloudflare/think`, and `@cloudflare/voice`. The update impr…
Cloudflare released Agents SDK v0.12.4 with chat recovery, retry configuration, durable Think submissions, and Voice connection control. It later added dashboard and GraphQL usage…
Cloudflare Gateway now supports natural-language policy creation for DNS, HTTP, and Network firewall policies. Administrators can describe the outcome they want in plain language,…
Cloudflare added Moonshot AI's Kimi K2.6 to Workers AI on April 20 with day-0 support. The company positions it as a native multimodal agentic model with a 262.1k context window,…
Cloudflare expanded AI Crawl Control on April 17 with new tools for the 'agentic Internet,' including Content Format insights and a renamed Directives tab linked to an external ag…
Cloudflare added Redirects for AI Training on April 17 so verified AI training crawlers can be sent to canonical URLs when they request duplicate or deprecated pages. Humans, sear…
Cloudflare added hybrid search and relevance boosting to AI Search on April 16, giving developers more control over how retrieval results are found and ranked. The change strength…
Cloudflare changed new AI Search instances so they include built-in storage and a vector index, and added namespace-level Workers bindings for runtime instance management and cros…
Cloudflare added a new AI Gateway REST API on `api.cloudflare.com` that lets developers call OpenAI, Anthropic, Google, and Workers AI models through one authentication model and…
Cloudflare changed new AI Search instances so they include built-in storage and vector indexes by default, added namespace-level Workers bindings, and later added Wrangler command…
Cloudflare added three observability and intervention features to Browser Run on April 15, 2026: Live View, Human in the Loop, and Session Recordings, letting developers watch age…
Cloudflare added WebMCP support to Browser Run on April 15, letting agents discover and call website tools directly through the browser instead of relying only on screenshot-and-c…
Cloudflare launched Agent Lee on April 15 as an in-dashboard AI assistant that understands a customer's Cloudflare account and works across product surfaces through natural langua…
Cloudflare renamed Browser Rendering to Browser Run on April 15 and used the relaunch to raise Workers Paid concurrency and session-creation limits. The product is now framed expl…
Cloudflare added two major upgrades to Agent Lee on April 15: write operations with explicit approval and inline generative UI for charts and structured telemetry views. The chang…
Cloudflare added wrangler browser commands on April 14 so developers can create, list, view, and close Browser Run sessions from the terminal. The change moves Browser Run closer…