Cloudflare

Recently shipped Precursor session-based bot detection, Internal DNS GA, Agents SDK MCP 2026-07-28 support, and declarative Durable Object migrations.

Precursor enables session-based bot detection for all customers. Client-side JavaScript continuously evaluates behavioral signals across a session, re-validates challenge clearance as behavior changes, and updates bot scores with session context.

WAF blocked emerging critical vulnerabilities. New rules target Nuxt Server Island RCE (GHSA-9473-5f9j-94wq), Alibaba Fastjson deserialization RCE, and Citrix NetScaler ADC memory disclosure (CVE-2026-8451). Emergency rules block active exploitation of a critical RCE and SQLi vulnerability in popular web frameworks.

Internal DNS reached GA. Authoritative and recursive DNS for private networks runs on the same global network as public DNS, Zero Trust, and application services. Split-horizon DNS is managed via separate views over shared zones, with resolver policies enforced by Gateway.

Agents SDK v0.20.0 added MCP 2026-07-28 release candidate support. Workers can serve tools, prompts, resources, and elicitation without an MCP transport session or Durable Object. The client manager probes for the stateless protocol first, falling back to the legacy handshake.

Declarative Durable Object class lifecycle with exports. A new exports field in Wrangler configuration replaces the imperative migrations array. Cloudflare compares declared classes against what's deployed to automatically create, rename, or delete state.

TLS handshakes to origins are now faster and automatic. Automatic key exchange predicts the preferred algorithm and sends its key share in the first ClientHello, avoiding a round trip. Prefers post-quantum X25519MLKEM768.

MCP server portals can now use static OAuth credentials. Connect to upstream MCP servers (Slack, GitHub) that require pre-registered OAuth clients, with support for custom endpoints, scopes, and client_secret_post or client_secret_basic authentication.

Audit Logs v2 now includes Resource History with side-by-side diffs. 'wrangler flagship' lets you manage Flagship apps and feature flags from the terminal. Cache Rules now honor bot management fields and ASN. Gateway gained a maximum DNS TTL setting at account and per-location levels. Wrangler 4.118.0 turned local-dev observability on by default. wrangler check startup reports bundle sizes and CPU activity during cold start. WebSocket Analytics Logpush dataset is available for Enterprise. DNS Firewall UX gained dashboard settings for attack mitigation and rate limiting. Markdown for Agents now preserves security and caching headers. Select models now require the Workers Paid plan. Cloudflare One Client hotfixed a DNS-over-TCP regression. Temporary Accounts API lets platforms deploy Workers before users sign in. Budget alerts are now on by default for Pay-as-you-go accounts. Distributor, MSSP, and Agency partners can manage Organization members directly. Stream added broadcast key rotation. Web Analytics dashboards now reliably load for accounts with up to 1,000 sites.

Breaking changes and deprecations. Account Roles API is deprecated; migrate to Permission Groups API. Tunnel route endpoints and the connections field retire October 5, 2026. Legacy KV namespace routes under /workers/namespaces/ retire October 15, 2026. New Durable Object namespaces must use SQLite storage. Service environments and the legacy_env config field are removed. Miniflare consolidated persistence options and renamed defaultPersistRoot and defaultProjectTmpPath.