# Cloudflare OS

> Apache-2.0 AI productivity OS reference design — local trial via pnpm run-local

**Category:** AI Agents  
**Pricing:** open-source  
**URL:** https://github.com/cloudflare/cloudflare-os  
**GitHub:** https://github.com/cloudflare/cloudflare-os  
**Added:** 2026-10-05

---

## The Hook

Cloudflare OS is the internal AI workspace Cloudflare staff use daily, opened up: agent chat, per-user sandboxed “gadget” apps built by agents, and Gatekeepers — capability-scoped connectors that simulate side-effecting actions so you approve them later in bulk instead of babysitting each prompt.

## What's Good

Apache-2.0 (cloudflare/cloudflare-os). Free path: install pnpm, `pnpm run-local`, open localhost:8787 — the whole stack runs on wrangler/workerd with data in `.wrangler`, no account. Worth reading as a reference design: Durable Object per workspace, Dynamic Worker Facets per gadget, Cap’n Web RPC, capability-based introductions instead of ambient MCP access, async human-in-the-loop. Written by the Workers runtime team. ★~10,787.

## The Catch

Early access: the README calls v2 an early-access rewrite with rough edges. Production deploy targets your Cloudflare account and leans on Dynamic Workers, which need Workers Paid ($5/mo minimum) — the free path is the local trial only. Self-host on your own servers via workerd is marked COMING SOON (low-level config only today). Cloudflare is not seeking outside contribution, so this is a fork-and-own codebase, not a community project. Vs cloudflare-mcp (MCP over the Cloudflare API) and open-design/OpenChatX: this is a full company AI workspace, not a connector or a single agent harness.

## Verdict

Apache-2.0 local trial and reference design for a capability-secured company AI workspace — run it with pnpm run-local; production means Workers Paid, and workerd self-host is not ready.