AI Coding Live News

Cloudflare OS open-sourced: company agent workspace with Gatekeeper capability security (10k+ GitHub stars)

On 2026-10-01 Cloudflare open-sourced Cloudflare OS (github.com/cloudflare/cloudflare-os, Apache-2.0): a browser agent workspace with company context/skills, modifiable Gadgets, and a Gatekeeper capability-security layer (zero default access, observation-following policy, deferred simulated approvals). Deploy via starter or https://os.cloudflare.app/deploy; inference through AI Gateway.

Cloudflare OS open-sourced: company agent workspace with Gatekeeper capability security (10k+ GitHub stars)

Key Takeaways

  • Announced 2026-10-01; github.com/cloudflare/cloudflare-os Apache-2.0; >10k stars near launch (GitHub API)
  • Trio: context-grounded agent workspace + Gatekeepers + per-user Gadgets (Dynamic Worker Facets + SQLite)
  • Security: zero default access; credentials isolated; egress only via bindings; observation log follows sharing/egress
  • Gatekeepers can simulate side effects and defer bulk approval vs sync HITL or auto-approve
  • Try: pnpm run-local, os.cloudflare.app/deploy, cloudflare-os-starter; AI Gateway for models/budgets; early access
Read full story
Linked Models & Agents:

Vercel mcp-handler 2.2.0 adds experimental WebMCP for in-browser agents

@AverageAiBro notes Vercel mcp-handler 2.2.0 (github.com/vercel-labs/mcp-handler) ships experimental WebMCP: opt tools in under experimental_webMcp, load ?webmcp-script from your MCP endpoint, and in-browser agents reuse the same server tools proxied as the signed-in user—no second browser OAuth stack. Pin 2.2.0; the WebMCP path is still experimental.

Key Takeaways

  • One MCP endpoint plus ?webmcp-script lets in-browser agents call your existing tools.
  • Calls proxy as the signed-in user, so auth tools skip a second browser OAuth flow.
  • WebMCP is still experimental—pin mcp-handler 2.2.0 for now.
Read full story
Linked Models & Agents:

CopilotKit: useFrontendTool can opt into WebMCP so browser agents call frontend tools

Marwan Atef (@Marwan_3atef) reported a CopilotKit product change: every useFrontendTool can opt into WebMCP so browser agents such as ChatGPT Atlas discover and call frontend tools instead of only screenshotting the page. Same React API, plus readOnlyHint annotations. The official blog post Introducing WebMCP for CopilotKit is live.

Key Takeaways

  • useFrontendTool can opt into WebMCP so browser agents call frontend tools.
  • Same React API with readOnlyHint annotations.
  • Official blog: Introducing WebMCP for CopilotKit.
Read full story
Linked Models & Agents: