Cloudflare OS Has 10,900 Stars, Closed Contributions and Self-Hosting Docs Pending

Cloudflare OS, the agent workspace Cloudflare says its own staff use daily, now has 10,900 stars on GitHub, 81 open issues and a README that tells outsiders not to send pull requests. It is back on GitHub's trending list two months after Cloudflare announced it.

Cloudflare's press release, dated Aug. 4 to 5, quotes co-founder and chief executive Matthew Prince: "Cloudflare OS is how we run Cloudflare." It says thousands of Cloudflare employees use the platform daily. The open-source version is available now; a managed deployment through the Cloudflare dashboard is listed as forthcoming, with partner-led installs through integrators including Presidio and Happy Cog. The release gives no pricing.

What Gadgets and Gatekeepers are

The README defines two terms. A Gadget is a sandboxed app created per user: asking for a slide deck does not call a hosted service, it creates "a private instance of the slide deck software just for you." A Gatekeeper is a mediator between an agent or Gadget and an outside service, which the README compares to "supercharged MCP servers". Each one is its own Worker, enforces narrow access, logs actions and can hold writes for human approval.

The permission model starts from nothing: "Each agent, and each Gadget, by default has access to nothing." Users must introduce resources explicitly. The README says you can choose your model provider, including self-hosted models.

What the repository says about itself

Item	What the README or repo page shows
Status	Early access, version 2, a complete rewrite
Stars, forks	10,900 stars, 1,300 forks
Open issues	81
Commits on main	886
Outside contributions	Not sought; only "small, trivially-verified PRs"

The README's own assessment is that Cloudflare OS v2 "is very capable, but still has many rough edges." Local use is one command, pnpm run-local, which serves on port 8787 and keeps data in a .wrangler directory. Deployment to a Cloudflare account goes through an online flow. A third route, self-hosting on the open-source workerd runtime, is listed with its documentation still pending.

That pending item carries the weight. Technologies.org, in an Aug. 6 piece, argues the arrangement is "a consumption play dressed as a governance play": the workspace is free, but it runs on Workers, Durable Objects, AI Gateway and Access, which are metered. That is the outlet's reading, and it gives no figures.

The licence question

The repository page lists Apache-2.0. The README text, as fetched, contains no licence statement or version number, and the press release does not name a licence. Anyone building on it should read the LICENSE file in the repository rather than rely on the sidebar.

The same Technologies.org piece makes a second point that the README does not contradict: "Gatekeepers do not write themselves. Each one is bespoke software." Every connected system needs its own. That is a different bargain from a tool that reads X and Reddit through your own cookies, and from the memory-versus-documentation argument in this Hacker News post about agents.

The next milestone Cloudflare has given is the managed dashboard deployment, which the press release lists without a date.