$ cat /var/log/thoughts/tag/cloudflare

Cloudflare

Posts tagged with Cloudflare.

Filters1

17 posts

MCP elicitation no longer holds a stream

MCP elicitation returns input_required so the Worker request ends. Claude Code shows the form, retries the call, and the isolate is not held while you type.

Build AlongMCPCloudflareClaude CodeServerlessDeveloper ToolsAI Coding1 min read · Aug 28, 2026

Cloudflare domain extensions hide the renewal trap

Cloudflare domain extensions hide the keep price in the catalog. Search a name, read the renew column, then skip the cheap first-year flyer before you buy.

Strong OpinionsCloudflareDomainsDNSDeveloper ToolsWeb Dev1 min read · Aug 25, 2026

Cloudflare domain name server is not 1.1.1.1

The Cloudflare domain name server is the assigned hostname pair, not 1.1.1.1. Copy both names at the registrar, then prove the zone is Active with dig NS.

Build AlongCloudflareDNSDomainsDevOpsDeveloper Tools1 min read · Aug 25, 2026

Cloudflare Virtual Wallets are the subaccount for APIs

Cloudflare Virtual Wallets are the API-key subaccount. Claim the handle this week, pick three spending caps, and never hand the Account Wallet to an agent.

Deep DivesCloudflareSecurityDeveloper ToolsAI CodingArchitectureTrend Commentary1 min read · Aug 25, 2026

x402 left Coinbase and got a standards body

x402 Foundation left Coinbase for the Linux Foundation. Wire the three V2 headers, then point production at a facilitator that actually settles mainnet.

Deep DivesCloudflareArchitectureDeveloper ToolsAPI DesignTrend CommentaryAI Coding1 min read · Aug 25, 2026

MCP went stateless and the session just moved

Stateless MCP deleted the protocol session. Continuity now rides in requestState on retry. Delete sticky routing, keep the store for carts and tokens.

Deep DivesMCPCloudflareArchitectureDeveloper ToolsAI CodingSecurity1 min read · Aug 23, 2026

Agents request every OAuth scope they might need

MCP oauth scopes arrive as a catalog because the next call is unknown. Check the issued token, hide tools you did not get, and keep the agent running.

Strong OpinionsMCPCloudflareSecurityDeveloper ToolsOAuthAI Coding1 min read · Aug 22, 2026

Bot Preference Sync admits robots.txt never enforced

Bot Preference Sync writes your Search, Agent, and Training policy into robots.txt. A mismatch is an argument to keep crawling. The WAF is still the lock.

Strong OpinionsCloudflareSecurityWeb DevDevOpsTrend Commentary1 min read · Aug 22, 2026

MCP is now traffic a firewall can name

MCP traffic detection now matches protocol headers, not mcp in the hostname. Treat the next remote MCP install as a named network event, not a config tweak.

Deep DivesMCPCloudflareSecurityDeveloper ToolsArchitectureNetworkingAI Coding1 min read · Aug 22, 2026