Still 1 October, still Birthday Week. Cloudflare OS is an agent that works inside your company's GitHub and Google Workspace: open source today, a managed version behind a waitlist. Clef is a pair of small models that classify and return probabilities so the agent can decide cheaply. AI Search leaves beta and starts costing money on 1 November.
- Cloudflare OS: the agent explores the codebase, fixes a bug, opens a pull request, reads and writes email, exports to Excel, CSV, PDF, Markdown and HTML. No price given.
- Clef on Qwen 3.8-27B and Clef-flash on Qwen 3.5-9B, Apache 2.0, on Hugging Face and Workers AI. Per Cloudflare, Clef-flash decides in 38.8 ms median.
- AI Search: generally available today, billing from 1 November. Free every month: 5 million tokens, 10 GB, 1,000 queries of each kind.
An agent that fixes a bug and opens a pull request is a catalogue item by now. What is new at Cloudflare is where it sits: on your domain, behind your Access policies, with your AI Gateway in front. The house is theirs, the keys are yours.
The three pieces are one thought. The agent lives in OS, decides with Clef, remembers with AI Search. Cloudflare sells the room the model works in and meters the power at the door.
Clef is the most interesting part for a builder. Calling a large model for every "should I escalate" is slow and expensive. A small model that returns "spam: 0.97" does it in under 40 milliseconds, and you keep the threshold in code. The numbers are Cloudflare's, on their benchmarks. The weights are open. You try them on your own machine before you believe the percentages.
AI Search is the other lesson. Beta means free and temporary. From 1 November there is a tariff and a free band that is enough for a small site. For a bigger one: 5 million tokens go fast if you upload scanned PDFs with OCR. Check how much you ingest now, while there is no bill.
Cloudflare OS is open source today, and the managed version sits behind a waitlist. Run it in your own account and you hold the keys and you pay for the mistakes. That goes for any room you let an agent into next to your email. Read what it can send before you connect it.