Cloudflare OS open-sources AI workspace for no-code

Cloudflare just open-sourced Cloudflare OS — an open-source no-code AI workspace that lets non-engineers build apps, docs, and workflows by chatting with an AI agent. Announced on August 5, 2026, this browser-based platform grounds every interaction in company context and skills that organizations curate, then runs the resulting code in isolated, governed sandboxes. For anyone tracking the cloudflare os open source no-code AI workspace trend, this is the first major infrastructure company to ship governed vibe coding as an open platform.

How This Was Verified

This report is based on the official announcement, the vendor’s product page, and community discussion — we did not deploy or run Cloudflare OS hands-on. Sources include Cloudflare’s official blog post (blog.cloudflare.com/cloudflare-os/), the product site at os.cloudflare.app, the GitHub repository, and the Hacker News discussion that reached 465 points and 230 comments within hours. Coverage from Ars Technica confirmed the announcement independently. We verified the open-source status, the three-part architecture (agent workspace, security and governance framework, and app platform), the zero-access security model, the use of Dynamic Workers, and the August 5, 2026 release date. Internal usage metrics (such as employee count or ROI), partner availability timelines, and roadmap features like Slack integration or a managed dashboard product were not independently confirmed. Last verified: August 2026.

What is Cloudflare OS?

Cloudflare OS is an open-source AI workspace platform that lets every person in an organization chat with an AI agent to build docs, slides, apps, and workflows. It was used internally at Cloudflare since May 2026 by thousands of employees — many outside engineering — before being open-sourced on August 5, 2026 via Cloudflare’s official announcement. The platform combines an agent workspace, a security framework, and a personal app platform into one system that any organization can deploy into their own Cloudflare account.

How does Cloudflare OS help no-code builders?

The agent workspace is a browser-based chat interface grounded in company context and skills that teams curate over time. Non-engineers can ask the AI agent to create documents, slides, spreadsheets, data apps, and deterministic workflows — all without writing code. The agent writes and runs code in an isolated runtime, so even when it generates logic, it stays contained and governed. When one person on the team figures out a better way to do something, everyone else in the organization benefits from that shared knowledge, as described on the Cloudflare OS product site.

How does Cloudflare OS handle security and governance?

Every agent and app starts with zero access to data or external services, and “Gatekeepers” — service-specific Workers — mediate all access. These Gatekeepers hold credentials, enforce policy, record what was read, and require approval before sensitive actions. For example, a Gatekeeper can give an agent access to a single GitHub repository while allowing it to read issues but not source code, mask particular fields, and require approval before merging a pull request. Observation tracking ensures that resources an agent sees stay attached to its work, so sharing an app cannot leak underlying data, according to the official announcement.

Server code runs in Dynamic Workers with global outbound networking disabled, and client code runs in a sandboxed browser frame. Neither can reach the internet except through capabilities the organization explicitly provides. This is a meaningful departure from tools that hand agents raw API keys with broad, long-lived access.

How does the app platform work?

Each “file” in Cloudflare OS is a full-stack app with client code, server code, an API, and its own SQLite database. Apps are built by the AI agent and run as Dynamic Workers instantiated as Durable Object Facets — features Cloudflare built specifically for this project. The facet gives each app its own isolated SQLite database, separate from the runtime managing it.

Users can share apps directly for real-time collaboration, or share “blueprints” — template copies that others can modify and redeploy. An app instantiated from a blueprint contains the original app’s code but starts with independent state, no conversation history, no credentials, and no connected resources, as explained on the product site. The client and server communicate using Cap’n Web, Cloudflare’s open-source object-capability RPC system — and crucially, the agent can call the same server methods as the client, so any tool you build can also be used by agents when you are not around.

How does Cloudflare OS compare to other AI app builders?

Unlike Lovable or Bolt-style generators that produce front-end prototypes, Cloudflare OS builds full-stack apps with governance, audit, and security baked into the platform from the start. It is open-source, deploys into your own Cloudflare account so you own the infrastructure, and uses a zero-access model with Gatekeepers mediating every external request. Organizations can route inference through AI Gateway to use any model, set budgets, apply rate limits, and attribute every request to the person or team that made it. This makes it a stronger fit for teams that need compliance alongside fast iteration, as noted in the GitHub repository. For a broader comparison of AI-assisted builders, see our vibe coding tools compared guide.

Can existing MCP servers connect to Cloudflare OS?

Yes. MCP Server Portals bring existing Model Context Protocol servers under Cloudflare OS’s governance policy. An MCP server can hold a credential and expose a defined set of tools instead of handing keys directly to the agent. But Cloudflare OS goes further than tool-level access control — it tracks which underlying resources an agent has observed, so authorization accounts for where data can flow next. A read of sensitive data can prevent the agent from writing to certain sources, inviting collaborators, or making outbound requests.

What does it cost to run Cloudflare OS?

Because Cloudflare OS is open-source and deploys into your own account, the pricing model is pay-as-you-go rather than a per-seat SaaS subscription. You pay for the underlying Cloudflare Workers and Durable Objects your apps consume, which means a small internal tool with a handful of users can run for pennies a month while a company-wide deployment with heavy traffic scales linearly. The official announcement notes that a managed dashboard product is planned, which would add a billing layer on top of the open-source core, but the self-hosted path has no license fee. For no-code teams this flips the usual trade-off: instead of paying per builder seat, you pay for actual compute usage, and you keep the option of migrating the whole workspace to a different Cloudflare account or running it on your own infrastructure if you ever leave the platform.

Deployment and operational considerations

Deploying Cloudflare OS is more involved than signing up for a hosted builder, and teams should plan for that. The repository ships with a deployment flow that provisions the agent workspace, the security framework, and the app platform into a Cloudflare account, and the GitHub repository documents the required resources: Workers, Durable Objects, and the AI Gateway integration for model routing. Because every app runs as a Dynamic Worker with its own SQLite database, storage grows with app count rather than with seat count. Teams that want to run their own LLM providers can route inference through AI Gateway to set budgets and rate limits, which is important for controlling cost when hundreds of employees start generating apps. Organizations with existing compliance requirements will need to configure Gatekeepers before rolling the platform out broadly, since the zero-access model means nothing works until the first Gatekeeper is provisioned.

What is missing compared to hosted builders?

Cloudflare OS is young, and the honest comparison is that it trades polish for control. Hosted builders like Lovable, Bolt, and Bubble ship batteries-included templates, marketplace integrations, and customer support; Cloudflare OS currently requires you to build your own app templates and lean on the open-source community for components. There is no managed dashboard yet, no Slack integration, and the roadmap items are still pending, as noted in the official announcement. The other side of that trade is what makes it attractive to serious teams: you own the infrastructure, the security model is designed for governance from day one, and you are not locked into a proprietary runtime. For internal tools, client deliverables, and regulated workflows, that combination is often worth the setup cost. For a solo founder who wants to ship a customer-facing app this weekend, a hosted builder is still the faster path — our vibe coding tools compared guide covers when each makes sense.

Bottom line

Cloudflare OS is the first major infrastructure company to ship governed vibe coding as an open platform, and for no-code builders inside larger organizations it changes the calculus: you can now get AI-generated full-stack apps with the same security posture as your production infrastructure, rather than bolting governance on after the fact. The zero-access model, Gatekeeper-mediated integrations, and blueprint sharing make it a credible option for teams that need compliance alongside speed. It is not a drop-in replacement for hosted no-code tools — the deployment effort and missing managed features are real — but it is the clearest signal yet that the no-code space is shifting toward open, infrastructure-owned platforms. If you are evaluating it, the Hacker News discussion and the GitHub repository are the best places to see how early adopters are actually using it in production.

FAQ

Is Cloudflare OS free to use?

Cloudflare OS is fully open-source and available in the Cloudflare OS GitHub repository. You can deploy it into your own Cloudflare account, though you will consume Workers and Durable Object resources, which may incur usage-based charges depending on your plan. A managed product in the Cloudflare dashboard is planned but not yet available, per the official announcement.

Can non-developers really build apps without coding?

Yes — the agent workspace lets non-engineers chat with an AI agent to generate docs, slides, spreadsheets, and full-stack apps. The agent writes and runs code in an isolated Dynamic Workers runtime, so the user never needs to touch the code directly. This was used internally at Cloudflare by thousands of non-engineering employees before being open-sourced, according to the announcement.

What models can Cloudflare OS use?

Cloudflare OS integrates with AI Gateway, which routes requests to any model and controls costs with per-person and per-team attribution. Organizations can plug in their preferred LLM providers while keeping usage governed and auditable, as described on the product site. This means expensive frontier models can be reserved for hard work while cheaper models handle routine tasks like email summarization.

Who owns the apps built with Cloudflare OS?

Because apps deploy into your own Cloudflare account and the platform is open-source, you own the code, the data, and the infrastructure — there is no proprietary lock-in. Blueprints shared between users contain the app code but no credentials or conversation history, so collaborators can modify and redeploy copies without inheriting access to the original’s connected resources, per the official announcement. For organizations with data residency requirements, that ownership model makes Cloudflare OS one of the few AI builders where compliance is a default rather than an add-on.

For more context on how the no-code space is shifting, see our analysis on whether no-code is dead in the vibe coding era or explore more options in our no-code tools directory and comparison hub.

NiteAgent — AI agent development, frameworks, and production patterns
ToolBrain — tool reviews, LLM comparisons, and AI workflow guides
Hermes Tutorials — Hermes Agent setup, configuration, and advanced workflows

Cross-links automatically generated from NoCode Insider.