by Cloudflare, Inc.
Cloudflare OS pricing, plans and limits
Cloudflare's open-source agent workspace, released under the Apache license, with Gatekeepers that mediate agent access and sandboxed apps called Gadgets.
- Best for
- Platform and security engineers at companies already on Cloudflare
- Not for
- Non-technical teams with no developer to deploy or maintain it
Should you use Cloudflare OS?
Pick Cloudflare OS if your company already runs on Cloudflare and wants a governed, self-hosted agent workspace it can fork, and you accept early-access software that runs only on Workers. Skip it if you need a managed product, a certified turnkey tool, or have no developer to build Gatekeepers.
Gatekeeper-held credentials and zero-start access mean shared work respects each viewer's own permissions.
The Apache 2.0 code can be forked, but it is built from Workers, Durable Objects and Dynamic Workers, so running it means running it on Cloudflare.
Also for
- IT and platform engineers rolling out governed AI agent access across an organization
- Operations and business teams who need internal tools built without filing engineering tickets
Show 2 more
- Security and compliance teams who need an audit trail of exactly which systems an AI agent touched
- Engineering leaders evaluating self-hosted alternatives to closed enterprise AI copilot suites
Also not for
- Buyers who need a managed, certified product today
Main trade-off
Early-access software with no managed edition yet, where each connected system needs a Gatekeeper that someone must build.
Cloudflare OS pricing
| Plan | Monthly price | What it includes |
|---|---|---|
| Open source (run locally) | Free | Apache 2.0 license, no fee, pnpm run-local starts the stack on wrangler and workerd, For trying the product, not production use |
| Deployed on Cloudflare (Workers Paid) | $5/mo | Minimum $5 a month per Cloudflare account, Dynamic Workers sandbox apps and need the Paid plan, Built-in models billed through AI Gateway, Your own Anthropic or OpenAI keys billed by the provider |
How the pricing works, in full
The software costs nothing: it is open source, and pnpm run-local runs it on your own machine as a trial. Deploying it to your own Cloudflare account needs the Workers Paid plan, a minimum charge of $5 a month per account, because Dynamic Workers, which sandbox the apps agents build, are available only on that plan. Included monthly usage is 10 million requests, 30 million CPU milliseconds and 1,000 unique Dynamic Workers, and beyond that Cloudflare charges $0.30 per million requests, $0.02 per million CPU milliseconds and $0.002 per extra Dynamic Worker per day, per its pricing pages read on 13 November 2026. Built-in model use is billed to the Cloudflare account through AI Gateway, and any Anthropic or OpenAI key you add is billed by that provider. No managed edition or price has been published.
Before you commit
- Dynamic Workers need the Workers Paid plan, and requests, CPU time and Dynamic Workers beyond the included usage are billed on top.
- Model usage is charged either to the account via AI Gateway or by the provider whose key you add.
- Engineering time to build and maintain Gatekeepers for each internal system.
What Cloudflare OS does
Cloudflare OS is an open-source agent workspace that Cloudflare released under Apache 2.0 on 5 August 2026, after running an earlier version internally since May. Employees chat with an agent that writes documents and builds sandboxed apps called Gadgets, while Gatekeepers hold credentials and mediate every read and write to company systems.
Gatekeepers
Service-specific Workers hold the credentials and mediate every agent read and write, narrowing access and requiring human approval for writes where configured.
Capability-based access
Instead of receiving MCP servers or API keys up front, each agent or app begins with no access and is introduced only to the resources a task needs.
Sandboxed Gadgets
Every agent-built app gets a Dynamic Worker for its server code, a private SQLite database, and a sandboxed iframe for its client.
Blueprints and multiplayer
Blueprints hand other people their own copy of a Gadget's code, and a Durable Object behind each Gadget lets several people edit it live.
Show all 6 features
Model routing through AI Gateway
Every inference call goes through Cloudflare AI Gateway, so one place decides which models are available and how spend is controlled.
One-minute deploy wizard
os.cloudflare.app/deploy creates the Workers, KV namespaces and R2 bucket in your account, with Cloudflare Access sign-in for the admin.
Works with
- GitHub
- Google Docs
- MCP servers via Access MCP Server Portals
- Cloudflare Access
- Cloudflare AI Gateway
Capabilities
- AI agents
- Agent workspace
- Open source
- Self-hosted
- Zero trust
- Workflow automation
- MCP
Strengths and limits
Strengths
- Open-source licensed with no seat fee, so the cost is the Cloudflare plan and model usage rather than per-user licensing.
- Credentials stay with Gatekeepers and agents start with no access, a design technologies.org judged the first enterprise agent launch of 2026 whose security model would survive a competent skeptic.
- Model calls route through AI Gateway, which lets a team mix providers and watch spend in one place.
- A separate starter repository lets a company customize its deployment without patching the core, according to Cloudflare's announcement.
Limits
- The repository describes version 2 as early access with many rough edges.
- It runs on Cloudflare only, because the apps and Gatekeepers are Workers, and Dynamic Workers need the paid plan.
- Each Gatekeeper is bespoke software, so connecting many internal systems means building and maintaining many of them.
- No managed edition, vendor support terms or Cloudflare OS-specific certification is published.
- The only independent commentary found dates from launch week, so there is little third-party evidence from real deployments.
Cloudflare OS alternatives
| Tool | Price from | Free plan | Runs on | Rating |
|---|---|---|---|---|
| Cloudflare OS This page | $5/mo | Yes | Web | 3.3 |
 GleanPick Glean if you mainly need enterprise search across existing knowledge; pick Cloudflare OS if you need agents that write and run code against governed systems. | $50/mo | No | Web · iOS · Android | 4.2 |
 Microsoft CopilotPick Microsoft Copilot if your staff live in Microsoft 365; pick Cloudflare OS if you want the workspace and its access rules under your own control. | $9.99/mo | Yes | Web · iOS · Android · Mac · Windows | 4.5 |
 n8nPick n8n if you want a visual, node-based workflow builder; pick Cloudflare OS if you want a chat-first agent workspace with governed data access. | -- | Yes | Web | -- |
Cloudflare OS facts
- Deployment
- Cloud · Self-hosted
- Works offline
- No
- Minimum skill level
- Intermediate
- Price band
- Mid-range
- Maker founded
- 2009
- Training-data policy
- Cloudflare OS is the orchestration layer and does not train models; prompts go to whichever model provider the instance routes through AI Gateway.
- Compliance
- No Cloudflare OS-specific certification is listed on os.cloudflare.app or in the repository; Cloudflare's Trust Hub covers its platform
- Training
- README · Announcement blog post · Starter repository
- Total funding
- Cloudflare, Inc. is a public company; Cloudflare OS is a product of Cloudflare and is not funded separately
Data and privacy
Apache 2.0 (open source)
Questions about Cloudflare OS
How much does Cloudflare OS cost in 2026?
The software has no license fee, but running it on Cloudflare requires the Workers Paid plan, which starts at $5 a month per account, plus usage beyond the included allowances. Model calls through the built-in models are billed to the same account, and your own Anthropic or OpenAI keys are billed by those providers. Cloudflare has published no price for a managed edition.
Can I try Cloudflare OS for free?
Yes, locally: the README says running pnpm run-local starts the whole stack on wrangler and workerd at localhost:8787, so you can see what the product does without a Cloudflare bill. The README adds that this is not meant for production. A deployment to your own Cloudflare account is what needs the paid Workers plan.
How do I deploy Cloudflare OS?
Use the wizard at os.cloudflare.app/deploy: sign in with Cloudflare, name the instance and enter an admin email, and it provisions the Workers, KV storage and an R2 bucket for you on a workers.dev address, protected by Cloudflare Access. Teams that need custom Gatekeepers or code changes use the separate starter repository instead of the wizard.
Is Cloudflare OS ready for production use?
Treat it as early access. The repository says version 2 is capable but has many rough edges, and a 6 August 2026 article on technologies.org notes that nobody had run it at scale outside Cloudflare. Development is active, with commits as recent as 12 November 2026, and Cloudflare says it runs the first version internally.
Do agents in Cloudflare OS get my API keys?
No. Gatekeepers hold the credentials, each agent begins with zero access and is introduced to specific resources one at a time, and a Gatekeeper can narrow an API's access and require human approval for writes. What an agent reads is recorded too, and anyone else who opens shared work is first checked against their own access.
About Cloudflare OS
Cloudflare OS is an open-source agent workspace from Cloudflare, released under the Apache 2.0 license on 5 August 2026. Cloudflare says it gave a first version to every employee in May 2026, that thousands of people across functions now use it daily, and that it rebuilt it as version 2 on a new foundation before open-sourcing it. On 13 November 2026 the GitHub repository showed 11.8k stars, 1.5k forks and 1,118 commits, the latest dated 12 November.
Read the full background
It combines three parts. An agent workspace is grounded in context and skills a company curates and runs agents in an isolated runtime where they write and execute code. Gadgets are the small apps an agent builds: each one's server code runs in a Dynamic Worker with its own SQLite database, its browser client sits in a sandboxed iframe, and sharing works like sharing a document, with live multi-user editing. A Blueprint shares a copy of a Gadget's code so each person runs and changes their own version.
Security rests on Gatekeepers, service-specific Workers that hold credentials and mediate access. Agents and apps start with access to nothing and are introduced to specific resources, writes can require human approval, every resource an agent observes is logged, and a second person opening shared work is checked against their own access. Existing MCP servers can be brought under Cloudflare Access through MCP Server Portals.
A deploy wizard at os.cloudflare.app/deploy sets up a few Workers, KV namespaces and an R2 bucket on a workers.dev address in about a minute, and Cloudflare Access sends the admin a one-time PIN. Built-in models run through AI Gateway and bill to the Cloudflare account, and Anthropic or OpenAI keys can be added on top. A separate starter repository is the place for custom Gatekeepers and interface changes, and Cloudflare names Presidio and Happy Cog as launch partners.
Where it loses: the repository itself calls this an early-access release with rough edges. An independent piece on technologies.org dated 6 August 2026 adds that self-hosting means hosting on Cloudflare, that each Gatekeeper is bespoke software someone must build and maintain, and that nobody had yet run it at scale outside Cloudflare. A team that wants a managed product with a vendor-run service should look at Microsoft Copilot or Glean, while n8n suits teams that mainly want visual workflow automation. The AI agent builders directory lists more.
Sources and guides
Official sources
- Cloudflare OS official site Vendor
- Cloudflare OS GitHub Repository Docs
- Cloudflare OS Announcement Blog Post Docs
- Deploy Cloudflare OS Docs
- GitHub repository GitHub
Product facts on this page (pricing, plans, integrations, compliance) are read from Cloudflare, Inc.'s own pages and documentation. The verdict is Hokai's reading of them, not the vendor's claim.
Lists that include Cloudflare OS
More AI Tools on Hokai
LindyAI teammate that handles email, meetings and workflows across 1,000+ apps; $50 in free credits for 7 days, then per-seat monthly credit packs.
NanoswarmPersonal AI agent platform for Telegram that deploys customizable bots with encrypted data storage, frontier model selection, and 24/7 availability in a few clicks.
Microsoft Copilot StudioBuild custom AI agents, workflows and apps without code, with MCP servers and credit-based billing billed through Azure.
StackAINo-code builder for enterprise AI agents with human approval steps, four deployment options and a free plan; part of Asana since May 2026.
CassidyNo-code AI automation platform for business teams: build agents and multi-step workflows grounded in company documents and CRM data, free to start on the Starter plan.
QueryPie AIPQueryPie AIP is an enterprise MCP gateway and agent builder from QueryPie, a database security company founded in 2017 in Seoul, South Korea.