Cloudflare OS

Cloudflare OS is not a desktop kernel. It is the AI work environment Cloudflare built for its own teams: an agent chat surface preloaded with how the company operates, plus a model of software where every doc-like thing is a private sandboxed app (a “gadget”) the agent can create or edit for you. The Workers team built it on Durable Objects, Dynamic Workers, and Facets, and they open-sourced it so other companies can copy the pattern rather than bolt another chat box onto SaaS.

Most “company AI” products stop at chat with connectors. Founders actually need safe autonomy: agents that can build small apps, touch real systems, and still leave security sleeping. Cloudflare OS is a concrete reference architecture for that — used inside Cloudflare daily — not another demo coding agent.

You run it locally with pnpm run-local or deploy to a Cloudflare account. Agents work in a chat UI. When you ask for slides, a whiteboard, or a custom dashboard, the system spins up a private gadget instance just for you instead of calling a shared SaaS app. Gatekeepers wrap external services with narrow auth, action logs, and a clever async human-in-the-loop: the agent can keep planning while side effects are simulated until you approve them in bulk later.

Unlike chat suites or coding agents, the unit of work is the gadget — a per-user sandboxed app you can modify safely — backed by Gatekeepers that fix the “agent stuck waiting for approval” problem without jumping to auto-approve everything.

• Public demo available

• Cloudflare Computer ↗
• OpenWorker ↗