Cloudflare OSpricing, plans and limits

Last updated: 2026-08-17

Cloudflare OS is an open-source AI agent workspace Cloudflare released under Apache 2.0 on August 5, 2026, passing 6,000 GitHub stars within 48 hours. It runs on Cloudflare Workers, giving every employee a browser-based agent that researches, writes documents, and builds sandboxed internal apps called Gadgets through capability-scoped Gatekeeper connectors.

About Cloudflare OS

Cloudflare OS is an open-source AI agent workspace built by Cloudflare, the San Francisco based network and security company founded in 2009. Released under the Apache 2.0 license on August 5, 2026, it gives every employee in an organization a browser-based agent that can research, write documents, and build small internal apps, without needing to be a developer. Cloudflare built the platform to run its own workforce first: by the time it open-sourced the code, thousands of Cloudflare employees across every team were already using it daily, and the public repository passed 6,000 GitHub stars within 48 hours of launch. The platform is built around two core primitives. Gatekeepers are service-specific Workers that sit between an agent and an external system such as GitHub, Slack, Notion, Confluence, Google, Supabase, or a company database, and they mediate every read and write an agent attempts, enforcing scoped permissions and, when configured, human approval before an action runs. Gadgets are the small applications an agent builds on request, such as a dashboard, a form, or a slide deck, and each one runs in its own sandboxed Dynamic Worker with its own SQLite database, so nothing an agent writes for one person or team can silently touch another's data. Agents start with zero standing access and are only ever handed scoped capability objects, never raw API keys or OAuth tokens, which is the opposite default from most enterprise copilot products. Cloudflare OS targets non-technical staff first: operations, marketing, and support teams use it to turn a request into a working document, spreadsheet, or internal tool without filing a ticket to engineering. IT and security teams use the Gatekeeper layer to decide exactly which systems agents can touch and to review a log of every resource an agent has observed. Because it routes model calls through Cloudflare AI Gateway, teams can mix or swap LLM providers per workspace and control spend centrally instead of committing to one vendor's model. Cloudflare OS itself carries no license fee: it is free, Apache 2.0 licensed software that a company deploys into its own Cloudflare account and runs on Workers, Durable Objects, and Dynamic Workers. The only ongoing costs are standard Cloudflare Workers and AI Gateway usage plus whatever LLM provider a workspace routes through. It runs entirely in the browser, so there is no native Windows, macOS, iOS, or Android app, and self-hosting today requires a developer to deploy the starter repository with pnpm and Wrangler; Cloudflare has said a fully managed, no-deploy dashboard version is planned but not yet released or priced as of August 2026. Cloudflare pairs the open-source release with implementation partners including Presidio and Happy Cog for organizations that want help wiring the platform into their existing systems, and the company has said it plans to add development containers and bring Cloudflare OS workspaces directly into Slack and other chat tools in future releases.

Pricing

Cloudflare OS is free, open-source software (Apache 2.0) with no license fee to self-host. You pay standard Cloudflare Workers, Durable Objects, and AI Gateway usage rates for the infrastructure it runs on, plus API fees for whichever LLM provider you connect through AI Gateway. A fully managed, hosted version is planned but has no published pricing as of August 2026.

Key Features

• Gatekeeper connectors: Service-specific Workers mediate every agent read or write to GitHub, Slack, Notion, Confluence, Google, Supabase, and internal databases, enforcing scoped permissions and optional human approval before any action runs.
• Sandboxed Gadgets: Every app an agent builds runs in its own Dynamic Worker sandbox with a dedicated SQLite database, so a tool built for one team cannot read or write another team's data.
• Zero standing access: Agents receive scoped capability objects instead of raw API keys or OAuth tokens, and start every session with zero permissions until a Gatekeeper explicitly grants them.
• Model-agnostic routing: All inference runs through Cloudflare AI Gateway, letting a workspace mix or switch LLM providers per team and enforce a shared spend budget instead of locking into one model vendor.
• Real-time multiplayer Gadgets: Generated apps support Google-Docs-style simultaneous multi-user editing via Cap'n Web RPC, so a team can co-edit an agent-built spreadsheet or dashboard live.
• Blueprints: Any Gadget can be published as a shareable Blueprint template that other teams clone and customize without redeploying a central service.
• Observation logging: Every resource an agent reads is logged and attached to that agent's work; when a second person opens the workspace, Gatekeepers re-check that person's own access before revealing the observed data.

Pros

• Free and open source, unlike closed enterprise copilot suites that charge per seat; a company only pays for the Cloudflare Workers and LLM usage it consumes.
• Gatekeeper capability objects mean agents never hold raw API keys or OAuth tokens, a stricter default than most 2026 enterprise AI copilots that grant agents standing service accounts.
• Cleared 3,900 GitHub stars on day one of its August 5, 2026 launch, with Cloudflare's own workforce already running it in production since May 2026.
• Model routing through Cloudflare AI Gateway lets a team switch or blend LLM providers without rewriting agent code, avoiding single-vendor lock-in.

Cons

• No managed, no-deploy dashboard exists yet as of August 2026; self-hosting requires a developer to run the starter repository with pnpm and Wrangler, which shuts out fully non-technical IT teams at the setup stage.
• No published pricing for the future managed product, and running costs scale with Cloudflare Workers, Durable Objects, and whichever LLM provider a workspace routes through, making total cost hard to forecast up front.
• The interface only runs in a browser tab, so teams that need an installable desktop client or an offline mode are out of luck.
• As a project days old at review time (open-sourced August 5, 2026), it lacks the years of production hardening and third-party security audits that competing enterprise agent platforms already have.

Visit Cloudflare OS Official Website