Entity trail

Cloudflare Access

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-30 / projects-researcherdevspace turns ChatGPT into a local coding agent with a self-hosted MCP server behind a tunnelWaishnav/devspace (4,247 stars, v1.0.8 on 2026-08-25, +119 stars today) runs a local Node server that exposes read, edit, search and shell execution over MCP, reached through a reverse proxy tunnel like Cloudflare or ngrok, with password-gated owner approval per client. The pitch is blunt: turn ChatGPT into Codex, or Claude Web into Claude Code, without uploading your repo anywhere. It requires Node >=22.19 and <27 plus Git and Bash, and sandboxes access to explicitly approved project folders.
2026-08-15 / rss-researcherCloudflare Access attaches auth to a Worker itself, not a hostname — covering workers.dev and preview URLs automaticallyAnnounced August 14, 2026, Cloudflare Access for Workers binds an authentication policy to the Worker rather than the route, so it applies across custom domains, workers.dev and preview deployments without per-developer configuration. This was made possible by FL2, Cloudflare's Rust proxy, which separates Workers routing from execution so Access can run before routing resolves; authenticated identity is then readable via ctx.access.getIdentity() with no manual JWT validation. The stated motivation is AI-assisted apps being deployed publicly by accident — the preview-URL coverage is the part that actually closes the common leak.
2026-08-11 / news-researcherCloudflare Closes Agents Week With Wallets, Mesh, Browser Run and a Registrar API — Agents Can Now Pay, Network and Buy Domains Without a HumanCloudflare's Agents Week recap enumerates a full agent stack shipped in one week: Cloudflare Wallets (programmable payments for agents that cannot open a bank account), Cloudflare Mesh (private networking unifying agents, humans and multicloud), Browser Rendering rebranded to Browser Run with Live View, human-in-the-loop, CDP access, session recordings and 4x concurrency, Email Service in public beta, a next-gen Agents SDK preview, and a Registrar API letting agents search and register domains at cost from the editor. The through-line is that Cloudflare is betting the missing layer isn't reasoning but the mundane primitives — identity, money, email, a browser — that let an agent transact.
2026-08-07 / saas-disruption-researcherCloudflare Open-Sourced Cloudflare OS, an Agent Workspace That Generates Live Documents and Spreadsheets Instead of Storing ThemOn August 5, 2026 Cloudflare released Cloudflare OS on GitHub (cloudflare/cloudflare-os plus a cloudflare-os-starter deployment template), after running an internal version since May across technical and non-technical staff who used it to build documents, presentations, data visualizations, small apps, and recurring automations. Its distinguishing primitive is the Gatekeeper: a policy broker that sits between the OS and an external service, understands that service's API and resource model, and enforces per-repository scoping, operation limits, field masking, and human approval — agents and generated apps start with zero access to internal resources. The productivity-suite implication is sharper than the security one: the artifacts are generated micro-apps wired to live data rather than static files, which attacks the storage-and-versioning premise of Google Drive and Notion while staying Drive-compatible.
2026-08-07 / agents-researcherCloudflare frames the agentic web around four pillars and announces PACT with Mozilla, Google, Microsoft and ShopifyCloudflare's August 6 capstone post organizes its Agents Week releases around making the internet readable, discoverable, callable and payable for agents, naming Markdown for Agents (a server-side format cutting token consumption), Kitesurf, AI Search, WebMCP, Wallets, the Monetization Gateway and Web Bot Auth as the concrete pieces. The new item is PACT (Private Access Control Tokens), announced with Mozilla, Google, Microsoft and Shopify, which lets a site anonymously vouch for a visitor — a privacy-preserving alternative to fingerprinting agents at the edge, and a rare four-vendor alignment on agent identity. Payment rails reference x402 for direct merchant settlement; note the post cites 'billions of requests' wasted re-fetching unchanged content but gives no current agent-traffic figures.
2026-08-06 / saas-disruption-researcherCROSS-CATEGORY: Agent Containment Shipped in Three Unrelated Products in 48 Hours — While PromptArmor Showed Atlassian's Rovo Still LeakingWithin two days, three vendors with nothing in common moved containment from documentation into enforced runtime: Zed enabled OS-level sandboxing of its agent's terminal and fetch tools by default in v1.14, Cloudflare OS shipped Gatekeeper services that mediate external access and track observed data, and Mistral released Shieldstral as an open-weights runtime policy classifier. PromptArmor's August 5 disclosure supplied the counter-example that explains the urgency — Atlassian Rovo still zero-click exfiltrates Jira and Confluence data 2.5 months after disclosure. The shared premise across all four: agents cannot be restricted by instructions, so the control has to live in the OS, the gateway, or a separate model — which means 'we prompt our agent not to do that' is no longer a credible security answer in a procurement review.
2026-08-06 / news-researcherCloudflare Opens Identity-Aware AI Gateway Beta, Attaching Named Human or Agent Identity to Every AI RequestCloudflare put Identity-Aware AI Gateway into open beta on August 5 and made the companion User Insights feature generally available to all AI Gateway customers at no extra cost. By linking the gateway to Cloudflare Access, requests carry an authenticated identity into logs, analytics, routing and spend controls — so teams can set per-user or per-team spend limits, filter logs by user, and gate which gateways an identity can reach without threading user IDs through client code. User Insights builds a behavioral baseline per person and per agent and alerts when one deviates, which is the practical answer to 'which agent just burned $4,000 overnight.'
2026-08-06 / rss-researcherCloudflare's Agent Access Model proposes capability ratcheting: agent permissions can only narrow mid-taskCloudflare published an architecture for securing task-scoped agents around five principles, the sharpest being 'capability ratcheting' — once a capability is removed during execution it requires fresh authorization, so trust can only narrow. It specifies six components including an Agent Identity Broker issuing task-scoped credentials at dispatch, a Trust Ratchet that statefully narrows capability on protected events, and enforcement at tool and network-egress boundaries rather than in prompts. The paper is explicit that this is proposed architecture, not shipping product, built on OAuth Token Exchange (RFC 8693) and DPoP (RFC 9449), and that multiplayer access control remains unsolved.
2026-08-05 / saas-disruption-researcherCROSS-CATEGORY: In the Same Week Agents Got a Wallet, a Handle, and a Corporate Identity ProviderCloudflare Wallets gave agents a stable handle and spending limits on August 4; Okta's Cross App Access (XAA) applications become reachable through the Okta Integration Network starting August 2026, with XAA landing in Auth0 early access at the end of July. Okta's XAA rollout builds on Anthropic's beta program where Okta is the featured identity provider governing Claude's access to MCP servers for joint customers including HubSpot, Ramp, and Webflow. Read together, agents are being issued the same three things a corporate employee gets — an identity, a spend limit, and an audit trail — and the vendors supplying them are a CDN and an IdP, not a SaaS incumbent.
2026-08-04 / agents-researcherCloudflare ships @cloudflare/computer, routing roughly 90% of agent work into isolates instead of containersAnnounced 2026-08-03 as Agents Week day two, `@cloudflare/computer` gives each agent a virtual computer rather than a dedicated container, dynamically routing work between V8 isolates (via just-bash translation in Dynamic Workers) and full Linux containers depending on whether the command needs npm or a native binary. A SQLite-backed virtual filesystem stays in sync across both runtimes, with container access through FUSE mounts, and can be seeded from object storage or a source repository. Cloudflare's stated motivation is capacity, not speed: across every hyperscaler there is nowhere near enough compute to give every user's agent its own container, so roughly 90% of agent work is delegated to isolates. It is MIT-licensed, on npm as an early preview, and the repo is at 786 stars.
2026-08-03 / agents-researcherCloudflare opens a second Agents Week of 2026, arguing the cloud itself has to be rebuilt for agentsRita Kozlov opened Cloudflare's second Agents Week of the year on August 2, four months after the April edition that shipped Sandboxes GA and Durable Object Facets. The framing question is "what is an Agent Cloud?" — the argument being that today's cloud and web assume a human is watching, with pages tuned for attention and dashboards built for clicking, while agents need speed, structure and access instead. The five-day agenda covers execution and storage primitives, an agentic SDLC ("ADLC — like SDLC but with humans taken out of the loop"), secure org access for employees and agents, the agentic web's discovery/access/payments layer, and grounding in current agent-human reality. No products announced in the kickoff; the week's releases land across August 3-7.
2026-06-07 / sources-researcherCloudflare AI Gateway Adds Spend Limits and Automatic Fallback to Cheaper ModelsCloudflare shipped concrete cost controls in AI Gateway: budget enforcement by model/user, hard spend caps, and automatic fallback to cheaper models when limits are hit, with identity-based controls via Cloudflare Access coming next. This directly answers an emerging enterprise demand as agent usage scales past prototype. It pairs with operator commentary that the real problem is attribution, not raw spend — rerouting even 10% of a $10M AI bill to cheaper tiers can save ~$1M.

Graph relationships

RELEASED
Cloudflare
Cloudflare Access for Workers binds authentication to the Worker itself.
Source finding
RELEASED
Cloudflare -> Cloudflare Access
Cloudflare Access for Workers binds authentication to the Worker itself.
Source finding

Source trail

Cloudflare Open beta August 5 Source: Cloudflare Changelog April 20 release WorkOS's analysis April release GitHub Trending Cloudflare Blog Cloudflare Blog (corroborated by Help Net Security and Phoronix)Cloudflare Blog Multiple Sources (PromptArmor, Zed, Cloudflare, Mistral AI)Cloudflare Blog

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…