Cloudflare's new roles let you scope AI agent access to Cloudflare Workers per resource, not per account. Four roles, ten legacy ones replaced, 5 steps.
Automate SaaS security remediation and cut fixes from hours to under 5 minutes: the queue-policy-workflow pattern, plus when it still needs a human in the loop.
Here is how to migrate to a new CMS with zero downtime: a cookie-routed proxy Worker, staged 1%-100% rollout, and a 28,000 RPS DDoS absorbed mid-migration.
Cloudflare Access for Workers checks requests before your code runs — no JWT validation. The three scopes, the local-dev config, and what it still misses.
Deploy an MCP server on Cloudflare Workers: wrangler.toml, the run_worker_first model, routing /mcp, local testing, and going live on the free tier.
How to build an MCP server, step by step: JSON-RPC 2.0, the Streamable HTTP transport, typed tools, and agent discovery — from a real one I shipped.