Cloudflare OS FAQ: Questions and Answers

Cloudflare OS is an Apache 2.0 open-source enterprise AI agent platform released by Cloudflare in August 2026. It connects institutional knowledge and business systems securely so employees can use AI agents and workplace applications in a browser.

It is pronounced “Cloudflare O-S”. It is a product from Cloudflare, the company known for CDN and security services.

The software itself is Apache 2.0 open-source software with a $0 licence fee. Operating it may incur Workers Paid charges, starting at $5 per month, together with Access, AI inference and other usage-based costs. Pricing for the managed edition had not been announced as of August 2026.

Yes. Cloudflare OS is designed to be deployed to your own Cloudflare account, where it can use your Access policies, AI Gateway configuration, data and integrations.

Yes. MCP Server Portal can organise and publish existing internal MCP servers as an organisational catalogue for agents. Individual business systems may require a custom Gatekeeper implementation.

Yes. Alongside implementation support, we provide Cloudflare OS training for administrators and employees, including user training and governance-operations training. You may also contact us about training alone.

The basic flow is to use the official cloudflare-os-starter, deploy it to your Cloudflare account, then configure Access authentication and AI Gateway. Our implementation service can also cover the build, initial configuration and hands-on support.

Yes. Zero Trust Free costs $0 for up to 50 users, and Workers Paid starts at $5 per month, so a small team can begin modestly. We recommend a staged introduction that starts with a limited pilot covering one or two workflows.

A basic build can be completed quickly, but useful adoption also requires workflow selection, a pilot, identity and AI controls, and Gatekeeper connections. A limited pilot typically takes several weeks, while departmental rollout is more likely to take several months.

Cloudflare OS is not a finished SaaS product. It is an open-source platform deployed to your own account and tailored to your requirements. Its internal-system integrations and access controls can be designed at source-code level.

The design starts with zero permissions, while Gatekeeper brokers allow, deny, approval and logging decisions for individual operations. Risk is not zero, so we recommend beginning with limited, read-oriented use and opening access gradually.

No. It is an Early Access product released in August 2026, and the official guidance calls for pinning releases and reviewing changes. A pilot limited by workflow, users and read access is a more practical starting point.