Releasesby GlyphAgents, Workers - Agents SDK reduces MCP schema conversion, adds exposure controls for MCP in Think and Code Mode SDK adds direct host APIs
This release reduces repeated MCP schema conversion and adds an opt-out for Think's automatic MCP tool exposure. It also lets non-AI-SDK hosts invoke the durable Code Mode runtime directly. Control direct MCP tool exposure in Think Agents SDK MCP clients now reuse converted input and output schemas while a live connection keeps the same tool catalog.
Also shipped Jul 22, 2026Cloudflare in July 2026 →
External OAuth and configurable scopes for MCP servers (General availability)
Two new hierarchical parameters let you bind MCP servers to your organization’s existing identity provider (IdP) and control which OAuth scopes MCP clients discover. This enables MCP clients such as Claude, Cursor, and ChatGPT to authenticate against your corporate IdP instead of Snowflake OAuth.
Variant and Variant shredding are now generally available
Variant is now generally available . Variant is a flexible data type for semi-structured data that delivers structured-like query performance through Variant shredding, which is also generally available.
Transactions are now generally available
Transactions that write to Unity Catalog managed Delta tables are now generally available. Group multiple SQL statements across one or more tables into a single atomic transaction using BEGIN ATOMIC ... END; or BEGIN TRANSACTION; ... COMMIT; syntax. All changes succeed together or roll back together, ensuring data consistency across your operations.
Email notifications for expiring service principal tokens are now generally available
Databricks now automatically sends an email notification when a service principal token is set to expire within seven days. Because service principals don't have their own mailboxes, Databricks sends these notifications to workspace admins.
Role-based access control (RBAC) is in Public Preview
Role-based access control (RBAC) is now in Public Preview. RBAC lets users assume a role in Databricks using only that role's permissions for the duration of the session instead of their own accumulated permissions. This enables exclusive access.
Governance Hub is in Beta
Governance Hub is in Beta . Governance Hub is a centralized, account-level UI in the account console for monitoring governance across your Databricks account. It provides a unified view of data health and coverage, AI usage and spend, and cost drivers, with prioritized insights and recommendations. All views respect existing permissions.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Agents SDK packages support AI SDK v6 and v7
The agents , @cloudflare/ai-chat , @cloudflare/codemode , and @cloudflare/think packages now support AI SDK v6 and v7. Existing applications can remain on v6 when updating these packages. Applications can also adopt v7 without changing the Cloudflare Agents APIs they use. The supported peer ranges are ai@^6 || ^7 and @ai-sdk/react@^3 || ^4 .
Cloudflare One Client for Windows (version 2026.6.880.0)
A new GA release for the Windows Cloudflare One Client is now available on the stable releases downloads page . This hotfix resolves a regression that caused a large increase in DNS-over-TCP queries to fallback and internal DNS servers.
Cloudflare One Client for macOS (version 2026.6.880.0)
A new GA release for the macOS Cloudflare One Client is now available on the stable releases downloads page . This hotfix resolves a regression that caused a large increase in DNS-over-TCP queries to fallback and internal DNS servers.
Cloudflare One Client for Linux (version 2026.6.880.0)
A new GA release for the Linux Cloudflare One Client is now available on the stable releases downloads page . This hotfix resolves a regression that caused a large increase in DNS-over-TCP queries to fallback and internal DNS servers.
Cloudflare Fundamentals - Account Role API deprecated
The Account Roles API is deprecated and is being replaced by the Permission Groups API . An end of life date has not yet been established. What you need to do Review the Permission Groups API documentation; the response schema differs from the legacy Roles response.
Sandbox SDK - Run Devin on Cloudflare using Devin Outposts
Devin Outposts ↗ lets you run Devin agents on Cloudflare. Each Devin session runs in its own isolated sandbox backed by Cloudflare Containers , so agents can execute code and use development tooling in an isolated environment.
SSL/TLS - Faster and more secure TLS handshakes to your origins, automatically
Cloudflare now takes the guesswork out of TLS 1.3 key agreement with your origins. Automatic key exchange predicts the preferred algorithm and sends its key share in the first ClientHello , helping avoid a HelloRetryRequest and one extra network round trip. Automatic key exchange is on for all existing zones and on by default for new zones.
WAF Release - 2026-07-21
This release introduces new rules for vulnerabilities in Adobe ColdFusion, Next.js, WordPress alongside updates to existing rules thereby providing enhanced generic protections against Server-Side Request Forgery (SSRF), Local File Inclusion (LFI), and Cross-Site Scripting (XSS).