npx @buildinternet/releases get cloudflareRecently shipped Cloudflare Basin and AI Search as GA, plus Workers OAuth Provider v1 and a new Web Search API.
Basin GA turns Cloudflare into an end-to-end analytics platform. Basin (formerly the Data Platform) collects events from apps, devices, and other Cloudflare services, then queries them. Basin Pipelines (formerly Pipelines) ingests from Workers, HTTP endpoints, and Logpush, transforms with SQL, and writes Iceberg tables or R2 files. wrangler basin sql and wrangler basin catalog graduated to stable.
AI Search is GA, hybrid search on by default. New instances combine semantic vector retrieval with full-text matching. Workers AI embedding and reranking calls are now included in AI Search pricing rather than billed separately. Usage-based billing starts November 1, 2026.
Web Search API beta grounds agents in live results. Choose between Ceramic.ai, Exa, and Linkup; all support Zero Data Retention and honor Cloudflare's verified bot standards. Requests run through AI Gateway and bill at provider list price with no markup.
Workers OAuth Provider hit v1 with a split API. One Worker is the authorization server, your MCP server the resource server, validated over a Service Binding. It supports MCP 2026-07-28 authorization, including Client ID Metadata Documents.
Durable Objects now stay alive for pending I/O when no client is connected — the default at compatibility date 2026-10-01. Artifacts, a versioned Git-speaking file system, entered open beta, deploying repos to Workers through Workers Builds. Clef and Clef-flash, first Workers AI models trained in-house, return probabilities over typed answers instead of generated text.
Cache purging got costlier; Logpush opened to all plans. Purge now forces a Cache Reserve miss (Class A operation). Logpush is available on Free through Business self-service with usage-based pricing.
Networking and Access went GA. BGP over IPsec and GRE tunnels and Unified Routing are generally available for Cloudflare WAN and Magic Transit. MCP server portals are GA. Strict service token authentication returns 401/403 instead of redirecting, and only Service Auth policies authorize — default for Zero Trust orgs created on or after October 5, 2026.