Releasesby IbisAgents - Cloudflare API MCP server now supports step-up authorization
Update5 days agoUnverifiedAdded Oct 20, 2026
The Cloudflare API MCP server now supports step-up authorization ↗︎ . Grant only the required scopes when you connect, then authorize more on demand as your agent performs a task. When a tool call needs a scope you have not granted, the server returns an insufficient_scope challenge ↗︎ naming it, and your MCP client asks you to approve it.
Topics: AI agents, MCP, Developer tools
More Cloudflare developer platform releases
Every Cloudflare developer platform releaseBots - Precursor adds Monitor mode
We released Monitor mode at customers' request so they can test Precursor and the Precursor Interstitial without updating bot score. In Security > Settings , the Precursor Status dropdown now offers Off , Monitor , and Arm . Selecting Arm means Precursor detections can affect bot score and Challenge clearance.
Cloud Workload Security is now available in Beta
Cloud Workload Security (CWS) is now available in Beta. Apply policy controls to cloud API requests before they reach your cloud provider. Define policies with request filters and Rego checks. For example, block requests that would make an R2 bucket public. Use workloads and policy sets to target your cloud environments.
Workers AI - Introducing Clairic: an extraction model for typed values, now on Workers AI
@cf/cloudflare/clairic is now available on Workers AI as a preview. Clairic is the first extraction model : a System One model that answers with values instead of text. We intend to release the model with open weights soon. Decision models such as Clef choose among options you define up front.
Workers AI - DeepSeek V4.1 Flash 1017 now available on Workers AI
@cf/deepseek-ai/deepseek-v4.1-flash-1017 is now available on Workers AI. DeepSeek V4.1 Flash is a multimodal Mixture-of-Experts model with 552B backbone parameters. It activates 8B parameters per token during prefill and 16B during decode, which keeps input-heavy agentic workloads fast and low-cost.
Cloudflare One Client for Windows (version 2026.8.2115.0)
A new GA release for the Windows Cloudflare One Client is now available on the stable releases downloads page . This hotfix addresses an issue building trusted certificate chains.
Cloudflare One Client for macOS (version 2026.8.2115.0)
A new GA release for the macOS Cloudflare One Client is now available on the stable releases downloads page . This hotfix addresses an issue building trusted certificate chains.
Cloudflare One Client for Linux (version 2026.8.2115.0)
A new GA release for the Linux Cloudflare One Client is now available on the stable releases downloads page . This hotfix addresses an issue building trusted certificate chains.
Agents, Workers - Think agents now use a @cloudflare/computer workspace
Think and Agent Skills now use the workspace from @cloudflare/computer ↗︎ as well as the filesystem tools. A JavaScript execution environment can be configured by adding the JavaScriptWorkerBackend . @cloudflare/shell is deprecated, and so is Think's createExecuteTool . These will no longer be developed nor supported from today onwards.
Also shipped on Oct 19, 2026
Cloudflare in October 2026Training Upcoming Serverless Training deprecation: DeepSeek V4 Flash (0731) On November 2, 2026 , DeepSeek V4...
Training Upcoming Serverless Training deprecation: DeepSeek V4 Flash (0731) On November 2, 2026 , DeepSeek V4 Flash (0731) will be removed from the shared Serverless Training pool. This change applies only to Serverless Training. If you train DeepSeek V4 Flash (0731) on Serverless Training, migrate to DeepSeek V4.1 Flash 1017 before November 2, 2026.
Copilot model policy API for enterprise, orgs, and teams
You can now use the REST API to retrieve and update Copilot model policies for enterprises, enterprise teams, enterprise apps, and organizations. What’s new GET and PATCH endpoints are now generally available for model policies at four levels: Enterprise: /enterprises/{enterprise}/copilot/model-policies Enterprise teams...
GitHub Copilot models deprecated on October 19, 2026
As of today, October 19, 2026, we have deprecated the following models across most GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions). These deprecations were announced on September 18, 2026 .
Postgres wait events, now in Query Insights
Query Insights for ClickHouse Managed Postgres now includes wait event breakdowns, blocked-session charts, and lock-wait charts. These metrics are also available in Prometheus.
Send OpenTelemetry traces to Agent Observability, no SDK required
You can now send OpenTelemetry traces straight to Agent Observability, without the SDK. If your agents already emit OpenTelemetry generative AI spans, from your framework, an instrumentation library, or spans you write yourself, keep your existing route through Grafana Alloy or an OpenTelemetry Collector and opt in your AI spans with a single attribute.
Cortex Tools for Cortex AI Gateway (Preview)
We are pleased to announce the preview of Cortex Tools, a part of Cortex AI Gateway that connects the AI clients your organization uses to the business tools your work already lives in, using the Model Context Protocol (MCP). Supported clients include CoCo Desktop, CoCo CLI, Claude, and Cursor.