--- title: Cloudflare open-sources a debugger for privacy protocols... description: Cloudflare has open-sourced pvcli, a command-line debugger for privacy-preserving protocols like Oblivious HTTP (OHTTP) and MASQUE, released under an MIT... canonical: https://daily.dev/posts/cloudflare-open-sources-a-debugger-for-privacy-protocols-used-by-apple-and-microsoft-with-ai-agents-bblkxlieu twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Cloudflare open-sources a debugger for privacy protocols used by Apple and Microsoft, with AI agents in mind | daily.dev og:description: Cloudflare has open-sourced pvcli, a command-line debugger for privacy-preserving protocols like Oblivious HTTP (OHTTP) and MASQUE, released under an MIT... og:url: https://daily.dev/posts/cloudflare-open-sources-a-debugger-for-privacy-protocols-used-by-apple-and-microsoft-with-ai-agents-bblkxlieu og:image: https://api.daily.dev/og/posts/bBLKxlieu.png og:image:alt: Cloudflare open-sources a debugger for privacy protocols used by Apple and Microsoft, with AI agents in mind og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Cloudflare open-sources a debugger for privacy protocols used by Apple and Microsoft, with AI agents in mind **[The New Stack](https://daily.dev/sources/newstack)** · 6 min read · 1 upvotes · 0 comments ## Summary Cloudflare has open-sourced pvcli, a command-line debugger for privacy-preserving protocols like Oblivious HTTP (OHTTP) and MASQUE, released under an MIT license. These protocols power services such as Apple's iCloud Private Relay and Microsoft's Edge Secure Network by splitting trust across independently operated infrastructure so no single party can link a user's identity to their destination. Debugging such systems is notoriously difficult because the same opacity that ensures privacy also prevents fault tracing. pvcli gives smaller teams access to tooling previously only feasible for large companies, with a curl-like syntax that makes it usable by both humans and AI agents. Cloudflare explicitly designed it with AI agent-based debugging in mind, as AI systems increasingly process personal data and need privacy-preserving inference pipelines. The tool is particularly relevant for regulated sectors like health and finance. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is pvcli and what does it do for OHTTP debugging? Pvcli is a command-line debugger for Oblivious HTTP (OHTTP) traffic, open-sourced by Cloudflare under an MIT license. It lets developers test and debug split-trust privacy infrastructure, such as Cloudflare's Privacy Proxy and Privacy Gateway used by Apple's iCloud Private Relay and Microsoft's Edge Secure Network, without building custom protocol tooling. Support for MASQUE is planned for a future release. _daily.dev surfaces tooling like pvcli for engineers debugging privacy-preserving infrastructure without deep protocol expertise._ ### Why is pvcli designed to work like curl and be usable by AI agents? Cloudflare engineer Fisher Darling modeled pvcli's command syntax closely on curl so that AI agents could construct and debug OHTTP requests on their own, calling it explicitly designed for agent-based debugging. Humans benefit too, since a curl-like interface feels familiar, but the primary design target was autonomous agent use rather than manual human-only troubleshooting. _Track how tooling like this reshapes agent-driven debugging workflows on daily.dev._ ### Why is debugging privacy protocols like OHTTP so difficult compared to normal network debugging? Split-trust systems like OHTTP intentionally deny visibility to any single operator: Apple's relay side sees where a request comes from but not its destination, while Cloudflare's Privacy Proxy sees the destination but not the user's IP, so neither party can link a user to a destination. This privacy guarantee is exactly why troubleshooting requires coordinating across multiple operators with encrypted, encoded traffic that resists manual inspection. _Developers weighing privacy-preserving architectures can follow real debugging trade-offs like these on daily.dev._ ## Similar posts on daily.dev - [Announcing Cloudflare OHTTP Gateway – expanding access to Cloudflare’s privacy-preserving infrastructure](https://daily.dev/posts/announcing-cloudflare-ohttp-gateway-expanding-access-to-cloudflare-s-privacy-preserving-infrastruc-llchhfrpe) · Cloudflare · 0 upvotes · 0 comments - [Cloudflare teams up with Chrome, Firefox, and Edge on a privacy-first anti-bot protocol](https://daily.dev/posts/cloudflare-teams-up-with-chrome-firefox-and-edge-on-a-privacy-first-anti-bot-protocol-rexmxgi6t) · The Next Web · 1 upvotes · 0 comments - [CtrlAI: Transparent proxy that secures AI agents with guardrails](https://daily.dev/posts/ctrlai-transparent-proxy-that-secures-ai-agents-with-guardrails-f6eeimc9b) · Product Hunt · 1 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#cloudflare](https://daily.dev/tags/cloudflare) [View this post on daily.dev](https://daily.dev/posts/cloudflare-open-sources-a-debugger-for-privacy-protocols-used-by-apple-and-microsoft-with-ai-agents-bblkxlieu) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Cloudflare open-sources a debugger for privacy protocols used by Apple and Microsoft, with AI agents in mind","url":"https://daily.dev/posts/cloudflare-open-sources-a-debugger-for-privacy-protocols-used-by-apple-and-microsoft-with-ai-agents-bblkxlieu","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cloudflare-open-sources-a-debugger-for-privacy-protocols-used-by-apple-and-microsoft-with-ai-agents-bblkxlieu"},"datePublished":"2026-07-27T13:06:49.910Z","dateModified":"2026-09-13T20:55:29.366Z","description":"Cloudflare has open-sourced pvcli, a command-line debugger for privacy-preserving protocols like Oblivious HTTP (OHTTP) and MASQUE, released under an MIT...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c5d5f4a64a21538930e6a414c574326d?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c5d5f4a64a21538930e6a414c574326d?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The New Stack","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The New Stack","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/newstack","url":"https://daily.dev/sources/newstack"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cloudflare-open-sources-a-debugger-for-privacy-protocols-used-by-apple-and-microsoft-with-ai-agents-bblkxlieu","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-agents,cloudflare","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The New Stack","item":"https://daily.dev/sources/newstack"},{"@type":"ListItem","position":3,"name":"Cloudflare open-sources a debugger for privacy protocols used by Apple and Microsoft, with AI agents in mind"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/cloudflare-open-sources-a-debugger-for-privacy-protocols-used-by-apple-and-microsoft-with-ai-agents-bblkxlieu#faq","mainEntity":[{"@type":"Question","name":"What is pvcli and what does it do for OHTTP debugging?","acceptedAnswer":{"@type":"Answer","text":"Pvcli is a command-line debugger for Oblivious HTTP (OHTTP) traffic, open-sourced by Cloudflare under an MIT license. It lets developers test and debug split-trust privacy infrastructure, such as Cloudflare's Privacy Proxy and Privacy Gateway used by Apple's iCloud Private Relay and Microsoft's Edge Secure Network, without building custom protocol tooling. Support for MASQUE is planned for a future release. daily.dev surfaces tooling like pvcli for engineers debugging privacy-preserving infrastructure without deep protocol expertise."}},{"@type":"Question","name":"Why is pvcli designed to work like curl and be usable by AI agents?","acceptedAnswer":{"@type":"Answer","text":"Cloudflare engineer Fisher Darling modeled pvcli's command syntax closely on curl so that AI agents could construct and debug OHTTP requests on their own, calling it explicitly designed for agent-based debugging. Humans benefit too, since a curl-like interface feels familiar, but the primary design target was autonomous agent use rather than manual human-only troubleshooting. Track how tooling like this reshapes agent-driven debugging workflows on daily.dev."}},{"@type":"Question","name":"Why is debugging privacy protocols like OHTTP so difficult compared to normal network debugging?","acceptedAnswer":{"@type":"Answer","text":"Split-trust systems like OHTTP intentionally deny visibility to any single operator: Apple's relay side sees where a request comes from but not its destination, while Cloudflare's Privacy Proxy sees the destination but not the user's IP, so neither party can link a user to a destination. This privacy guarantee is exactly why troubleshooting requires coordinating across multiple operators with encrypted, encoded traffic that resists manual inspection. Developers weighing privacy-preserving architectures can follow real debugging trade-offs like these on daily.dev."}}]} ```