Releasesby GlyphCloudflare One, Access - Private MCP server support for MCP server portals
MCP server portals can now connect to MCP servers available only on your private network. The portal uses Cloudflare Gateway to reach private hostnames and IP addresses without exposing the MCP server to the public Internet. Connect the server network to Cloudflare with Cloudflare Tunnel , Cloudflare Mesh , or another Cloudflare One connector .
Also shipped Sep 22, 2026Cloudflare in September 2026 →
Shopify connector (Beta)
The Shopify connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector ingests e-commerce data such as products, orders, customers, inventory, fulfillments, and discounts from Shopify into Databricks. Authentication uses the Shopify OAuth client credentials grant.
Lakebase backup schedule API (Beta)
You can now manage Lakebase backup schedules programmatically. The snapshot schedule API lets you read and set a root branch's automated snapshot cadences (daily, weekly, or monthly) and how long each cadence's snapshots are retained. This API is in Beta and available to all Lakebase workspaces. See Create a backup schedule .
OpenAI GPT-6 Sol and GPT-6 Luna are now generally available on Amazon Bedrock
Today, AWS announces the general availability of GPT-6 Sol and GPT-6 Luna from OpenAI on Amazon Bedrock. Expanding the GPT-6 family alongside Astra, these two models give teams more ways to balance intelligence, speed, and cost across every workload. Sol is the daily model for recurring complex tasks and software development.
Claude Opus 5.5 launches with a 1M token context window and 128k output
Anthropic released Claude Opus 5.5 for long-running agentic coding and knowledge work, with a default 1M token context, 128k max output and always-on adaptive thinking. It costs $4 / $20 per MTok, below Claude Opus 5, and is on the Claude API, Bedrock, Google Cloud and Microsoft Foundry.
Fast mode research preview available for Claude Opus 5.5 on the Claude API
Fast mode, in research preview, can now be used with Claude Opus 5.5 on the Claude API.
Claude API beta lets tools be defined inside mid-conversation system messages
With the inline-tools-2026-09-15 beta header, a tool_addition block can carry a full tool definition, so agents can add tools, change schemas or upgrade server tools mid-conversation without invalidating the prompt cache. The same header covers adding and removing tools by reference.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Access - Automatically manage inactive Access service tokens
Cloudflare Access administrators can now automatically disable or delete inactive service tokens. Administrators can set an inactivity period from 30 to 365 days and choose what Access does when a token reaches that limit.
Rules - concat() now supports up to 32 arguments
The concat() function in Cloudflare Rules now accepts up to 32 arguments, increased from 16. This allows you to build richer dynamic values directly in Rules expressions and simplify configurations that combine request data. A common use case is adding a request header that sends context to your origin.
WAF Release - 2026-09-22
This release introduces new threat detections to enhance protection against Server-Side Request Forgery (SSRF) attempts using non-standard IP notations or jar loopback payloads, alongside new defenses against Server-Side Template Injection (SSTI) targeting Jinja environments.
WAF Release - Scheduled changes for 2026-09-29
Announcement Date Release Date Release Behavior Legacy Rule ID Rule ID Description Comments 2026-09-22 2026-09-29 Log N/A ...cb14ded8 Broken Access Control - Directory Traversal This is a new detection.
Workers Builds now supports Cursor Origin
Workers Builds now supports repositories hosted in Cursor Origin. Connect a Cursor Origin repository to automatically build and deploy production changes, preview non-production branches, and see build status in pull requests. Pushes to your production branch automatically build and deploy your Worker.
Workers - Test every pull request in an isolated environment with Worker Previews
You can now test every change you make in an isolated, production-like environment with Worker Previews ↗ . Each Preview runs under the same Worker with its own code, configuration, URL, and observability, isolated from production and every other Preview.
Durable Objects - Durable Object name search now supports 128 characters
Durable Object name searches in the Cloudflare dashboard now accept up to 128 characters, up from 20. Search results and recent invocation lists show up to 128 characters before being truncated with an ellipsis. This limit applies to the object filter on the Metrics tab and object search in Data Studio .
Gateway, Cloudflare One - Traffic Destination selector in Gateway policies
Gateway HTTP and Network policies now include a Traffic Destination selector that identifies how traffic exits Cloudflare. This allows administrators to write policies that target specific off-ramp methods - for example, applying different rules to traffic destined for the public Internet compared to traffic routed through Cloudflare Tunnel or Cloudflare...