Cloudflare OS: The AI ‘Operating System’ Cloudflare Runs On, Now Open Source

Cloudflare open-sourced the AI workspace its own staff uses daily. Every employee gets agents that build sandboxed, customizable apps, and a security layer approves risky actions asynchronously. In one month, the sales team saved over 10,000 hours.
artificial-intelligence
software-engineering
Author

Kabui, Charles

Published

2026-08-25

Keywords

cloudflare-os, ai-agents, agent-sandboxing, capability-based-security, gatekeepers

Download as PDF

Cloudflare open-sourced Cloudflare OS on August 5, 2026, the AI workspace its own workforce uses every day. It calls the project an operating system, but for a company, not a computer: each employee gets an agent workspace grounded in curated company context and skills. Ask it to research a topic and it writes and runs code to filter data instead of pulling everything into the model’s context window. Ask for a slide deck and it creates a private, sandboxed copy of that app just for you, running in a Dynamic Worker with its own database. Because each app is sandboxed, you can safely ask the agent to add features. Cloudflare says thousands of staff use it daily; in one month its sales team saved more than 10,000 hours and users built over 4,000 apps.

The quiet innovation is the approval model. Human-in-the-loop usually means the agent stops and waits for each yes, which nudges people toward auto-approve. Gatekeepers instead simulate the side effect, let the agent keep working, and you approve or reject actions in bulk later. Agents start with access to nothing; you introduce them to specific resources, and the platform records what an agent has seen so a shared output cannot leak data the viewer could not access. It is Apache-2.0, so any company can deploy its own copy and let non-technical staff build real tools without API keys.

When any employee can prompt an agent to build or change an app, the centralized model of software stops making sense; Cloudflare OS runs a private, modifiable instance of every app per user. It also treats agents as something traditional operating systems never managed, arguing they need capability-based security, not account permissions.

Read More: Cloudflare’s AI Playground makes testing models and MCP tools easy

Sources:

Disclaimer: For information only. Accuracy or completeness not guaranteed. Illegal use prohibited. Not professional advice or solicitation. Read more: /terms-of-service

Reuse

GNU GENERAL PUBLIC LICENSE v3.0(View License)

Citation

BibTeX citation:
@misc{kabui2026,
  author = {{Kabui, Charles}},
  title = {Cloudflare {OS:} {The} {AI} “{Operating} {System}”
    {Cloudflare} {Runs} {On,} {Now} {Open} {Source}},
  date = {2026-08-25},
  url = {https://toknow.ai/posts/cloudflare-os/},
  langid = {en-GB}
}
For attribution, please cite this work as:
Kabui, Charles. 2026. “Cloudflare OS: The AI ‘Operating System’ Cloudflare Runs On, Now Open Source.” https://toknow.ai/posts/cloudflare-os/.