Projects
Recent systems for giving agents useful capabilities without giving up control.
Current Projects
Heist
A prompt injection game: get a Workers AI model to leak a vault code while Clef scores your message.
Zoo
A shared world where each creature runs JavaScript that a model wrote from one sentence.
Speedrun
Three Workers AI models race to fix the same bug in containers. A referee reruns the tests.
Blackbox
Replay a Pi agent log as a timeline and see which step Clef scores as the fault.
Odds
Ask for odds, not prose. Clef decision models in Pi codemode through your own AI Gateway.
Predict
A small browser signal for the next useful step on a website.
Think Snippets
Cloudflare Project Think examples that deploy, check their claim against live state, and tear down.
Cache Layer
A policy-first cache for agents: verified local recipes first, escalation when they miss.
Tardigrade
An agent you can kill, and it comes back. Pi Durable on Cloudflare Durable Objects.
auto-thinking-pi
A local prompt-difficulty classifier that sets Pi reasoning effort for each prompt.
tsc-rs-worker
The TypeScript 7 type checker running inside a Cloudflare Worker, in memory.
Nightglass
A deterministic classifier that checks whether an agent's claims are supported by evidence.
Oven
Describe a 3D game and build a live scene on Cloudflare.
Terra
A multiplayer 3D terrain playground. Fly, fire weapons, and deform seeded worlds.
Mutant
Mutation testing for TypeScript. Find bugs your tests run but never catch.
Lookout
Private, view-only live screen streaming on Cloudflare.
Airlock
Test a candidate deployment, then promote only the version with verified proof.
Exhaust
Turn your review comments into an editable, evidence-linked checklist for future diffs.
jido-cartographer
Map public GitHub repositories with one Jido agent per source file on the BEAM.
webmcp-proof
Experiments that check browser-agent behavior through WebMCP.
Mulder
Add selected read-only API tools to a website with WebMCP.
agent-admit
The model proposes an action. An independent admitter decides whether it can proceed.
hold
Leave a waiting job for a runner to claim once.
trick
Two URLs. Write yours and read theirs.
cell
Invoke a named tenant and receive its result and evidence, not its source.
lease
Subscribe a Pantry recipe to a peer outbox for a bounded time.
tip
Commits and trees as the product: keep and inspect history.
Vidframes
Local video frame extraction, transcript-guided selection, and Workers AI analysis.
Visual Diff
A fail-closed visual comparison cascade for DOM structure, computed style, and pixels.
Agent Adversary
Fail-closed validation for adversarial agent-operation semantics.
Witness Pi
An independent verifier gives a verdict the coding agent does not author.
Hashline Pi
A hash-anchored patch editor extension for the Pi coding agent.
Molt
An agent writes a tool, a loop breaks it, and a separate verifier decides whether it passed.
Cloudbox
Durable Cloudflare computers for agents: run repos, steer live workspaces, verify results, and return receipts.
Pantry
Agents fetch exact saved code from a capability-scoped recipe store instead of re-deriving it.
Terraloop
A tool-call gate that requires a locked contract and driver loop before an agent can spawn children.
no-fs-agent
A restricted patch workflow that checks changes externally, returns receipts, and refuses stale applies.
Terrarium
A self-hardening AI containment loop. Contains agents, invites them to escape, reproduces verified boundary crossings, and patches itself.
my-ax
A personal AI agent operating environment you self-host on Cloudflare.
Kumo Compiler
One source, native everywhere. Author a component once in canonical React; compile to genuine native Vue, Svelte, and Solid.
loop
A personal chatbot that ships working Svelte artifacts and remembers what you tell it. Rolling memory backed by Cloudflare Vectorize.
Argus
A sourced web research agent that gathers evidence, follows weak spots, and returns a clear report with links.
Mote
A local-first Mac app shell for editable Svelte control panels, bounded native capabilities, and optional connected services.
echo
A logged-in tab as an MCP target. Gives an agent one revocable way to run code in a browser tab you've already signed into.
Tuiport
OpenTUI SSH apps on Cloudflare. Build real SSH apps, run the same container locally or on the edge, and connect from any terminal.
JotDB
Durable state without migrations. One Durable Object per user, tenant, room, or actor, with schema validation and no migration files.
Swarm
Run one AI task across a batch of inputs on Cloudflare Workers, Durable Objects, and Workers AI.
Share
Create temporary, resumable file shares on Cloudflare Workers, Durable Objects, R2, and Turnstile.
anvil
Animations agents can write. Lottie + three.js in one JSON dialect, on Cloudflare Workers.
Arcade
Neon hovercraft survival. A browser game built and deployed on Cloudflare.
vibe-cdn
Browser games on Cloudflare's edge.
Lab
Isolated execution and traces for AI agents. Run code in sandboxed Dynamic Workers, capture every step as a shareable trace. Built on Cloudflare Worker Loaders.
Deja
Persistent memory for agents. Agents learn from failures; Deja remembers.
capa
Third-party APIs as proof-carrying Cloudflare service bindings — starting with Stripe, GitLab, and Jira.
Filepath
Your own background agent environment. Workspaces, sandboxed filesystems, harness registry, and your own model keys. Built for one person, on infrastructure they own.
Cloudshell
Browser-based terminal and dev environment in the cloud. Instant access to a full shell from anywhere.
gateproof
E2E testing harness. Observe logs, run actions, assert results. Minimal surface area, maximum power.
inbox.dog
Gmail OAuth for AI agents. Read, write, search, and send — one integration gives your agent every Gmail scope it needs.
Anytool
Give your AI agent infinite tools with one API call
unsurf
Turn any website into a typed API. Agent visits sites, captures API calls, and generates OpenAPI specs, TypeScript clients, and execution paths.
t2t.now
Voice-to-text with MCP support. System-wide dictation and AI agent mode that connects to any MCP server. Cross-platform desktop app with local Whisper transcription.
FormDrift
Voice, photo, and document input for web forms. For users who hate typing.
chomp
OpenAI-compatible proxy for free LLM providers. Bring your keys. We route the rest.
Phonesites
Build a website in 5 minutes from any device since 2016.
ditto
Run multiple Cloudflare AI models simultaneously. Merge every output with consensus.
SignedSeal
Create, sign, and manage documents. Self-custody e-signatures.
Repo Audit
Repository quality analyzer powered by Cloudflare Workers AI. Evaluates GitHub repos with automated scoring and AI-powered qualitative analysis.
CF Tutorial
95 questions to prove you know Cloudflare. Interactive quiz with AI-powered evaluation.
remote
Barebones starter for authenticated apps with persistent state on the edge.
FormWing
AI outreach from contact forms.
svelte-hono
Svelte 5 SSR and hydration in a Hono Worker, without SvelteKit.
svelte-edge
Agent-generated Svelte 5 UI compiled on Cloudflare Workers into inline edge bundles.
effect-agents
Five agent patterns proven with Effect v4: parallelism, streaming cancellation, approvals, typed errors, and MCP exposure.
imprint
Immutable commit-bound repository context so an LLM can answer, compare, promote, and roll back against exact code versions.
orbit
Bounded public-source monitor that turns releases and posts into evidence-linked briefs.
UserDO
Per-user Durable Objects as data pods.
fleet-pattern
Hierarchical Durable Objects with ordered fan-out.
workflow-live
Real-time workflow monitoring on the edge.
cache-sync
Edge cache invalidation that actually scales.
flue-snippets
Real, runnable Flue agents on Cloudflare. Every snippet ships an E2E test that deploys, asserts, and tears down.