Developer Platform

Workers subrequests to Cloudflare-proxied BYOIP hostnames are now identified as Cloudflare-to-Cloudflare traffic, preserving the CF-Worker header and cf.worker.upstream_zone field so security rules evaluate consistently. Bot Management fields on the destination zone now reflect the original end-user connection rather than the internal Cloudflare connection, fixing cases that returned false 403 responses. The change is automatic and requires no configuration changes.

The Agents SDK now provides a browserTool that gives an agent a Browser Run browser it can return to on later turns, with tabs, cookies, and login session intact while the session stays alive; the model drives it via the Chrome DevTools Protocol and screenshots return as inspectable images. Requires Agents SDK v0.28.0 or greater, with a Browser registered on the object's Lifecycle and the tool added to a Pi Durable extension registry before opening the harness.

The Cloudflare API MCP server now exposes Workers Issues as MCP Events, its first event type, letting clients discover cloudflare.alert.workers_observability_real_time_issue via events/list and subscribe with events/subscribe scoped to an account or a single Worker. When Issues detects a new or recurring issue, the server posts a signed event to the client's webhook so agents can investigate without polling.

The Agents SDK now provides a web_search tool that queries the public web through the Cloudflare Web Search API, returning a numbered list of titles, URLs, and trimmed descriptions for a given query and max results. It requires Agents SDK v0.27.0 or greater and registers via a Pi Durable extension registry, with AI SDK and TanStack AI adapters plus createAIWebSearch() and createHTTPWebSearch() for model-free searching.

Queues can now be created with jurisdictional restrictions so messages are stored and processed only within a specific jurisdiction, supporting GDPR and FedRAMP data residency requirements. Jurisdiction is set via the --jurisdiction flag on cf queues create or a jurisdiction parameter on the Create Queue API endpoint, and can only be set at creation and not changed afterwards.

The experimental OpenCodeHarness lets OpenCode 2.0 run in a plain Durable Object with sessions stored in SQLite and Lifecycle jobs that wake interrupted work after eviction. The agents/models/opencode provider connects OpenCode to Workers AI through the AI binding, and OpenCode plugins add custom tools, remote MCP servers, and skills.

Workers Builds now consistently posts preview URLs to GitHub pull requests and GitLab merge requests within a few seconds of a build completing, where posting previously could often take minutes.

Agents SDK 0.28.0 adds a beta web_fetch tool that reads URLs through Workers AI Markdown Conversion, handling HTML, PDF, and supported Office documents, requesting Markdown when available, and formatting JSON for the model. Long pages return in smaller windows with offsets to continue reading, and each result includes the final URL, HTTP status, and content type, with controls for allowed hosts, response size, timeouts, and redirects.

The Cloudflare API MCP server now serves Cloudflare skills through the Skills over MCP extension; clients supporting the extension discover them with skills/list and read files at skill:///. Add https://mcp.cloudflare.com/mcp to an MCP client that supports the extension to use them.

Clef-omni is available on Workers AI as a decision model that accepts audio (WAV or MP3) and video (MP4 or WebM) input alongside text and images, scoring every allowed answer in a single pass on a 30B-parameter MoE backbone with 3B active parameters. Clef-flash now costs less than Jev, and Clef is faster.

createBatch() now accepts an options object that creates up to 100 Workflow instances per call, using either a count that generates IDs or an instances list where each entry carries its own ID and params, with created and errors in the result. Passing an array to createBatch() is deprecated but existing code continues to work.

AI Gateway's POST /ai/run endpoint now returns HTTP 401 with error code 2009 when an AI provider rejects credentials, replacing provider-specific statuses such as ElevenLabs' 403, Google Vertex's 500, and other providers' 402; Google Vertex requests now fail without retrying the provider. Under Unified Billing, rejected credentials return HTTP 503.

Web Search API is now available in beta, letting AI agents search the Internet with a choice of Ceramic.ai, Exa, or Linkup as provider. Requests run through AI Gateway, so they appear in gateway logs, bill to AI Gateway credits at each provider's list API price with no markup, and support bringing your own provider API key.

The Agents SDK now provides a PiHarness class that lets you build long-running agents on Pi 1.0 and Pi Durable, persisting agent work in a Durable Object even if interrupted mid-turn. PiHarness is in beta, and both Pi packages are optional peer dependencies of agents.

D1 databases can now be created with a us jurisdiction so they run and persist data within the United States, for regional data residency requirements. Create one with npx wrangler@latest d1 create <name> --jurisdiction=us.

Workers KV namespaces can be created with a jurisdiction of eu, us, or fedramp that durably stores the namespace's data only within that region, set at creation via the dashboard, Wrangler, the cf CLI, or the REST API and not changeable afterwards. Workers can still access a jurisdiction-restricted namespace from anywhere, and KV data may be cached outside the jurisdiction on Cloudflare's network.

Cloudflare's Workers AI team released Clef and Clef-flash, decision models that read an input state and typed questions and return probabilities for allowed answers rather than free-form text, with weights open-sourced under Apache 2.0. Both are hosted on Workers AI with a 64K context window and drop-in compatibility with the System One API used by Jev, and Cloudflare is also launching an RL fine-tuning service for tuning Clef to specific workloads.

Workers Web Crypto now supports ML-KEM-768, ML-KEM-1024, and ML-DSA-44/65/87, adding key encapsulation and decapsulation methods, getPublicKey(), SubtleCrypto.supports(), and JWKs with the AKP key type. The features are opt-in via the webcrypto_modern_algorithms compatibility flag, and ML-KEM-512 is not supported.