Cloudflare OS: an open source agent workspace with capability-based governance
Cloudflare has open-sourced Cloudflare OS, the agent workspace it uses internally, to bring AI leverage beyond programmers. A workspace is grounded in company-curated context and skills, and starts each agent with zero access. Resources are exposed as typed bindings, while Gatekeepers—service-specific Workers—hold credentials, enforce policy, and log every observed resource. Sharing a dashboard does not become a way to leak an underlying table, because the platform re-checks the viewer against the observation log. Apps are full-stack Workers with their own SQLite state, and the same server methods are callable by both users and agents. Model routing and spend run through AI Gateway, so admins can set budgets and pick models per task. The code is on GitHub and deployable into a Cloudflare account, with a reference deployment included. Written for engineers working on agent infrastructure, access control, and internal development platforms.