Why AI tools know nothing about your company — until now
This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).
Cloudflare launched CloudflareOS, an open-source AI workspace platform that gives employees secure, context-aware access to internal company systems and AI tools. Unlike legacy VDI or raw API key approaches, it uses capability-based access — granting agents access to specific resources rather than broad system permissions. Built on Dynamic Workers and Durable Objects Facets, it isolates each app's runtime and storage, disables outbound networking by default, and uses Gatekeepers to mediate external service access. The platform captures company-specific context (terminology, policies, workflows) once, making it available across every employee workspace. It supports any AI model via Cloudflare AI Gateway, with cost visibility broken down by person, team, or app. An external enterprise AI architect cautions that owning context is not the same as having accurate context — keeping that context current is where most deployments will struggle.
Table of contents
In AI, every new work session starts from zeroCapability-based access beats handing agents raw API keysWhat happens when it all goes wrongHow do we measure business ‘context’?Pricing platforms by the token is the wrong meter entirelyOwning your own context is not the same as your context being any goodNo developer required (yet)Questions this post answers
What is capability-based access in Cloudflare OS and how does it differ from using raw API keys for agents?
Capability-based access grants an agent permission to one specific resource rather than broad system access. Unlike raw API keys — which give agents wide access to entire systems — Cloudflare OS records exactly what the agent observed and verifies that anyone viewing the agent's output is also authorized to access the underlying source. This limits blast radius and creates an auditable access trail. Teams locking down AI agent permissions in production track approaches like this on daily.dev.
What are Dynamic Workers and Durable Objects Facets in Cloudflare OS?
Dynamic Workers provide lightweight isolated runtimes that load each app's code on demand, while Durable Objects Facets give each app isolated SQLite storage under platform supervision. Outbound networking is disabled by default, and Gatekeepers — service-specific Workers — sit between Cloudflare OS and external services to expose only explicitly granted resources. Cloudflare states these primitives were invented because the required isolation was previously not achievable. Developers building multi-tenant agent platforms find architecture decisions like these covered on daily.dev.