<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/cloudflare-os-an-open-platform-for-agents-apps-and-work-rpytup7mu" -->

---
title: Cloudflare OS: an open platform for agents, apps, and work
description: Cloudflare has open-sourced Cloudflare OS, an AI-powered platform that gives every employee in an organization an agent workspace grounded in company-specific...
canonical: https://daily.dev/posts/cloudflare-os-an-open-platform-for-agents-apps-and-work-rpytup7mu
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: Cloudflare OS: an open platform for agents, apps, and work | daily.dev
og:description: Cloudflare has open-sourced Cloudflare OS, an AI-powered platform that gives every employee in an organization an agent workspace grounded in company-specific...
og:url: https://daily.dev/posts/cloudflare-os-an-open-platform-for-agents-apps-and-work-rpytup7mu
og:image: https://api.daily.dev/og/posts/rpYtUP7Mu.png
og:image:alt: Cloudflare OS: an open platform for agents, apps, and work
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Cloudflare OS: an open platform for agents, apps, and work

**[Cloudflare](https://daily.dev/sources/cloudflare)** · 13 min read · 0 upvotes · 0 comments

## Summary

Cloudflare has open-sourced Cloudflare OS, an AI-powered platform that gives every employee in an organization an agent workspace grounded in company-specific context, skills, and internal systems. Built on Cloudflare Workers and Durable Objects, it features a security and governance framework called Gatekeepers that mediates access to internal resources — tracking what data agents observe and enforcing access policies downstream. Each workspace can produce documents, spreadsheets, live apps, and deterministic workflows. Apps are full-stack Workers with isolated SQLite state, shareable as blueprints. The platform integrates with MCP servers, routes all inference through Cloudflare AI Gateway for cost control, and supports any AI model. Two GitHub repositories are available: a core and a starter deployment based on Cloudflare's internal setup.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://blog.cloudflare.com/cloudflare-os>

## Community take

How the wider developer community reacted, aggregated from 1 discussion and 126 comments across hackernews (as of 2026-08-06).

**TL;DR:** Commenters are genuinely intrigued by the Sandstorm-revival angle and the fine-grained security model, but there's persistent skepticism about vendor lock-in, the 'OS' branding, and whether the blog post communicates the value clearly — with the project's creator (kentonv) actively clarifying self-hosting and open-source details in the thread.

**Sentiment:** 35% positive · 40% mixed · 25% skeptical

**The case for**

- The Sandstorm-inspired fine-grained sandbox model (one isolated instance per document/gadget) is seen as a meaningful security innovation that could let non-technical users safely vibe-code apps.
- Full self-hosting with the open-source workerd runtime, including ollama support for local LLMs, addresses many lock-in concerns raised in the thread.
- The Gatekeeper system's taint-tracking (flagging agents that have observed sensitive data from writing elsewhere) is praised as thoughtful groundwork for enterprise data governance.
- Dynamic Workers are noted as solving Sandstorm's original cold-start and memory-usage problems that made per-document containers impractical.
- The human-in-the-loop batch approval flow — where the agent simulates write outcomes and queues work without blocking — is highlighted as a practical improvement over auto-approve patterns.

**The pushback**

- Even with open-source code, running at company scale requires Cloudflare Workers Paid plan and Durable Objects, which commenters see as meaningful platform lock-in.
- The blog post is widely criticized for burying the lead and being too vague for any audience — the GitHub README and the author's tweet thread are considered far clearer.
- The 'OS' branding is broadly mocked as marketing inflation, with commenters noting the term has been so overused it signals hype rather than substance.
- Durable Objects don't currently scale out well in self-hosted workerd (a fix is in progress but wasn't ready at launch), limiting enterprise self-hosting viability.
- Some commenters question whether the access-control framework is sophisticated enough out-of-the-box for non-technical users, versus just being a framework that requires expert configuration.

**By community**

- hackernews (mixed): Enthusiastic about the Sandstorm security model revival and self-hosting confirmation, but divided on vendor lock-in, the 'OS' naming, and a blog post that failed to communicate the core value proposition.

**Hottest debate:** Whether 'open source' is meaningful here given the deep dependency on Cloudflare's Workers platform, even with self-hosting technically possible.

**Open questions**

- Will there be a public blueprint marketplace analogous to Sandstorm's app store?
- How does this compare functionally to Buzz, YC's qm, or smol machines for the same use cases?
- Can a self-hosted workerd instance realistically serve a company-wide deployment once the Durable Objects scaling fix lands?
- How does the platform handle cases where a non-technical user's vibe-coded gadget accidentally routes sensitive data to an external service via a Gatekeeper?

**Highlights**

> What do you mean? This is 100% open source and self-hostable! https://github.com/cloudflare/cloudflare-os It runs on the open source Workers Runtime: https://github.com/cloudflare/workerd You can run it at home if you want. There's even a Home Assistant Gatekeeper.
> — [kentonv on hackernews · 2 comments](https://news.ycombinator.com/item?id=49183694)

> Reads do not require approval. Only writes do. Reads are, however, limited to only the resources you have explicitly attached. Moreover, since agents and gadgets run in a sandbox with essentially no access to the outside world except via approved channels (Gatekeepers), it's essentially not possible for the agent to leak secrets it has seen unless you approve a later write. In fact, the system actually keeps track of everything the agent / gadget has observed to know if it is "tained", and can use that to flag later actions as dangerous, e.g. due to prompt injection or possible leaking of secrets. (This is still evolving, but all the groundwork is there.) (Of course, this assumes you trust the LLM provider itself not to steal secrets from your prompts. Most LLM providers offer zero-data-retention options, but if you don't trust them you can also use a local LLM. We support ollama and will support others in time.)
> — [kentonv on hackernews](https://news.ycombinator.com/item?id=49184031)

> Sandstorm's use of containers was just a means to an end. The real innovation was the fine-grained instances -- each document in its own container. No other container platform did that. But honestly, it didn't work well, because of cold start times and memory usage. It's bad enough when a server takes seconds to start, but if every document you open has a long startup time and uses hundreds of MB of RAM, it's really painful. Cloudflare OS doesn't use containers. It uses Dynamic Workers, which are 100x more efficient: https://blog.cloudflare.com/dynamic-workers/ So the stuff I have been building in Workers for the past 9 years turns out to be the thing that Sandstorm needed all along. What a coincidence. :)
> — [kentonv on hackernews](https://news.ycombinator.com/item?id=49184183)

> > So you can run it off the public internet with no sneaky external dependency on cloudflare, slack etc? Yes. It even supports ollama and works decently well with some local LLMs. > And it would be functionally the same? With the same performance if you put enough hardware there? Honestly it is faster running locally. > If so cool, and that should have been clearly in the announcement, We had so many things we wanted to say, it was hard to fit them all into one story. The blog post is for an enterprise audience. My tweet thread is for the hacker audience.
> — [kentonv on hackernews · 2 comments](https://news.ycombinator.com/item?id=49183843)

> Gatekeepers can specify the sensitivity of their data. A Gatekeeper can actually flag an observation (a read operation) as being so sensitive that the agent should be prohibited from writing anywhere else after having seen that. This is what allowed us to connect Cloudflare OS to our own sensitive internal data sources, containing things like customer data, revenue info, etc. Once you connect to one of those, the system enforces no data can be shared out of it. That said, the policies are a bit blunt right now, maybe overly restrictive. We're going to be evolving it further.
> — [kentonv on hackernews](https://news.ycombinator.com/item?id=49184242)

**Source threads**

- [hackernews](https://news.ycombinator.com/item?id=49182996) · 121 points · 126 comments

## Similar posts on daily.dev

- [Cloudflare OS: Cloudflare's Open-Source Corporate AI Platform Built on a Capability-Based Model](https://daily.dev/posts/cloudflare-os-cloudflare-s-open-source-corporate-ai-platform-built-on-a-capability-based-model-1tqgbhiwj) · InfoQ · 1 upvotes · 0 comments
- [Cloudflare’s AI Platform: an inference layer designed for agents](https://daily.dev/posts/cloudflare-s-ai-platform-an-inference-layer-designed-for-agents-70umlv07w) · Cloudflare · 1 upvotes · 0 comments
- [Introducing the Cloudflare One stack: agent-powered deployment](https://daily.dev/posts/introducing-the-cloudflare-one-stack-agent-powered-deployment-znchzyuie) · Cloudflare · 1 upvotes · 0 comments
- [Cloudflare Demonstrates Moltworker, Bringing Self-Hosted AI Agents to the Edge](https://daily.dev/posts/cloudflare-demonstrates-moltworker-bringing-self-hosted-ai-agents-to-the-edge-tpslsmm7l) · InfoQ · 2 upvotes · 0 comments

---

Tags: [#open-source](https://daily.dev/tags/open-source), [#ai-agents](https://daily.dev/tags/ai-agents), [#mcp](https://daily.dev/tags/mcp), [#cloudflare](https://daily.dev/tags/cloudflare)

[View this post on daily.dev](https://daily.dev/posts/cloudflare-os-an-open-platform-for-agents-apps-and-work-rpytup7mu)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"Cloudflare OS: an open platform for agents, apps, and work","url":"https://daily.dev/posts/cloudflare-os-an-open-platform-for-agents-apps-and-work-rpytup7mu","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cloudflare-os-an-open-platform-for-agents-apps-and-work-rpytup7mu"},"datePublished":"2026-08-05T13:02:51.710Z","dateModified":"2026-08-06T15:54:37.910Z","description":"Cloudflare has open-sourced Cloudflare OS, an AI-powered platform that gives every employee in an organization an agent workspace grounded in company-specific...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/148f27fc61b1d42015bcbee19cca3e5e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/148f27fc61b1d42015bcbee19cca3e5e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Cloudflare","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Cloudflare","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/38522e1d11354cd6b7af66f9d4316735","url":"https://daily.dev/sources/cloudflare"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cloudflare-os-an-open-platform-for-agents-apps-and-work-rpytup7mu","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"open-source,ai-agents,mcp,cloudflare","timeRequired":"PT13M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Cloudflare","item":"https://daily.dev/sources/cloudflare"},{"@type":"ListItem","position":3,"name":"Cloudflare OS: an open platform for agents, apps, and work"}]}
```