Releasesby GlyphCloudflare Fundamentals - API tokens now detectable by secret scanning tools
Cloudflare API tokens now include identifiable patterns that enable secret scanning tools to automatically detect them when leaked in code repositories, configuration files, or other public locations. What changed API tokens generated by Cloudflare now follow a standardized format that secret scanning tools can recognize.
Also shipped Apr 10, 2026Cloudflare in April 2026 →
What's new in Sigma
AI apps Input table audit history (Beta) Input table audit history records versioned snapshots of input table row and schema changes over time. For each input table, Sigma automatically creates a warehouse-native view in your data platform that can help you understand the following: Row-level history: What changed in a specific row, who made the change, and...
New discount fields in the Storefront API's cart types
As of API version 2026-07, several changes have been introduced to the discount fields and amounts in the Storefront API . What's changed Deprecated Fields : The cart.discountAllocations field is deprecated. Use cart.lines[].discountAllocations(lineLevelOnly: false) and cart.deliveryGroups[].discountAllocations instead.
Web Experiment: Mobile Simulator
Description: The web experiment visual editor now supports simulating various device sizes directly within the overlay. Choose from popular device presets or specify a custom width/height, enabling users to preview edits to their site in all viewports. All existing visual editor features are supported in mobile mode.
Payload Optimization: msgpack and gzip /v1/chat/completions and /v1/completions now accept request bodies...
Payload Optimization: msgpack and gzip /v1/chat/completions and /v1/completions now accept request bodies encoded with msgpack (Content-Type: application/vnd.msgpack) and/or compressed with gzip (Content-Encoding: gzip). This can significantly reduce payload size and improve TTFT for requests with long prompts.
Neon Auth Plugins tab, Neon Skill for coding agents, Sentry and Neon MCP guide release - Apr 10, 2026
Plugins tab for Neon Auth Organization settings. The Neon Auth page now includes a Plugins tab. Organization plugin settings (limits, creator role, invitation e...
Railway Goes to the Land of Torii Gates and Cherry Blossoms
This week, the fully remote Railway team descended on Kyoto, Japan for our biannual retreat, a week dedicated to planning, in-person collaboration, and exploring one of the most beautiful cities in the world.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Browser Isolation - Canvas Remoting optimizes performance for productivity applications
Remote Browser Isolation now supports Canvas Remoting , improving performance for HTML5 Canvas applications by sending vector draw commands instead of rasterized bitmaps.
Browser Run - Browser Rendering adds Chrome DevTools Protocol (CDP) and MCP client support
Browser Rendering now exposes the Chrome DevTools Protocol (CDP) , the low-level protocol that powers browser automation. The growing ecosystem of CDP-based agent tools, along with existing CDP automation scripts, can now use Browser Rendering directly.
CASB - Send CASB posture finding instances with webhooks
You can now use CASB webhooks in Cloudflare One to send posture finding instances to external systems such as chat platforms, ticketing systems, SIEMs, SOAR tools, and custom automation services. This gives security teams a simple way to route CASB posture findings into the tools and workflows they already use for triage and response.
Workers - Relaxed simultaneous connection limiting for Workers
The simultaneous open connections limit has been relaxed. Previously, each Worker invocation was limited to six open connections at a time for the entire lifetime of each connection, including while reading the response body.
AI Search - Website Source CSS content selectors for precise content extraction in AI Search
AI Search now supports CSS content selectors for website data sources. You can now define which parts of a crawled page are extracted and indexed by specifying CSS selectors paired with URL glob patterns. Content selectors solve the problem of indexing only relevant content while ignoring navigation, sidebars, footers, and other boilerplate.
AI Search - New Workers AI models for text generation and embedding in AI Search
AI Search now supports four additional Workers AI models across text generation and embedding. Text generation Model Context window (tokens) @cf/zai-org/glm-4.7-flash 131,072 @cf/qwen/qwen3-30b-a3b-fp8 32,000 GLM-4.7-Flash is a lightweight model from Zhipu AI with a 131,072 token context window, suitable for long-document summarization and retrieval tasks.
Risk Score - User risk scoring for high risk browsing activity
Cloudflare One's User Risk Scoring now incorporates direct signals from Gateway DNS traffic patterns . This update allows security teams to automatically elevate a user's risk score when they visit high-risk or malicious domains, providing a more holistic view of internal threats.
Security Center - Real-time alerts and daily digests for Threat Events
You can now automate your threat monitoring by setting up custom alerts in your saved views. Instead of manually checking the dashboard for updates, you can subscribe to notifications that trigger whenever new data matches your specific filter sets, like new activity associated to a particular threat actor or spikes in activity within your industry.