Cloudflare's new AI workspace gives agents context about your company for the first time

Cloudflare has rolled out CloudflareOS, an open-source platform designed to give employees a unified, secure workspace where AI agents can work with internal company systems and data. Unlike off-the-shelf AI tools that must start from scratch with each session, this platform bridges a critical gap: teaching agents about how a specific organization actually operates.

The problem: AI tools work in a vacuum#

Enterprise AI tools excel at general knowledge but struggle with organizational context. Employees end up repeatedly explaining the same internal processes, approval workflows, and system architectures to agents that have no memory of their company's unique way of working.

This creates friction in two directions. First, workers must constantly provide background information that the AI should already know. Second, and more troubling, many companies resort to giving agents broad API keys just to get things done — a dangerous security practice. According to Rita Koslov, VP for developers & AI at Cloudflare, employees are now "asking for API keys for their own tools, agents, etc. This creates a new class of security problems that Cloudflare OS helps to solve."

A better approach: Capability-based access#

Rather than handing out unrestricted API keys, CloudflareOS uses capability-based access control. This grants agents permission to access only specific resources they need, and the platform logs exactly what each agent observes and uses. Koslov explains: "API keys give agents broad access to systems; a capability-access-based approach lets us grant one specific resource, then record exactly what the agent observed, and verify that anyone who sees its work is also allowed to access the source."

The platform powers agents to:

• Create documents, slides, spreadsheets, and workflows tailored to individual workers
• Build entirely new full-stack applications with their own isolated databases
• Remain connected to live data sources while maintaining strict access controls
• Share outputs only with people who have underlying permission to see the source data

Under the hood, CloudflareOS uses Dynamic Workers (lightweight isolated runtimes) and Durable Objects Facets (isolated SQLite storage) to run thousands of dynamically generated apps safely. Outbound networking is disabled by default, and Gatekeepers — specialized Workers that sit between the platform and external services — act as intelligent interpreters, understanding what each service's API can do and controlling which operations are allowed.