Cloudflare · Platform
Internal AI engineering stack
Cloudflare's Dev Productivity team runs an internal AI engineering stack built on the company's own products. It puts MCP servers behind one OAuth portal, routes every model request through a gateway, and generates context files across thousands of repos. Every merge request gets an automated multi-agent review.
This entry describes supporting infrastructure that other work builds on. The catalog classifies it as a platform. The record also reports a workflow.
- Approach type
- Platform
- Work
- Coding, Code review
- Human involvement
- Drafts reviewed
- Invocation
- Event driven, Interactive
- Interfaces
- Cli, Ci, Web
- Deployment stage
- Scaled
- Evidence strength
- Detailed primary
- Entry reviewed
How it works
The workflow the sources report for this implementation.
One OAuth aggregation point for all MCP tools
Collapse N tool schemas into 2 calls to hold token overhead constant at scale
Structured, generated repo context (runtime, nav, conventions, boundaries, deps)
Multi-agent CI review: risk tiering, specialist agents, Codex-rule citations
Where people stay involved
- pull request → AI review findingsWork product review · Level 3
Level 3 for pull request → AI review findings; human attention boundary: work-product-review.
- Observation date
- 2026-04-20
Implementation details
Dynamic Workers for sandboxed code execution; Sandbox SDK to clone/build/test
OpenCode + Windsurf clients; Agents SDK (McpAgent + Durable Objects) for stateful sessions
Workers AI (open-weight, on-platform) + frontier models (Opus, GPT), routed by task
cli, ci, web
MCP Server Portal; one OAuth point aggregating 182+ tools from 13 servers; AI Gateway for routing, cost, BYOK, ZDR
Backstage catalog (2,055 services) + AGENTS.md generated across ~3,900 repos
Zero API keys on client machines; a Worker injects keys server-side; Cloudflare Access (Zero Trust) auth
Code Mode collapses upstream tool schemas into search + execute, holding token overhead constant at scale
Reported results and limitations
The catalog records what the sources report, with the scope and the denominator of every figure. A qualification below limits the figure it sits under.
Reported metrics
47.95 million AI requests in 30 days across the internal AI engineering system
The source does not report the denominator of this figure.
- Reported by
- Cloudflare
- Scope
- Internal AI engineering requests in the 30 days preceding the report
- Method
- Company-reported AI Gateway count for the preceding 30 days
- Observation date
- 2026
3,683 internal users (60% of company, 93% of R&D)
- Reported by
- Cloudflare
- Scope
- Active internal AI coding-tool users in the preceding 30 days
- Denominator
- Approximately 6,100 employees for company share; R&D organization for R&D share
- Observation date
- 2026
47.95M AI requests and 241.37B tokens via AI Gateway in the preceding 30 days
The source does not report the denominator of this figure.
- Reported by
- Cloudflare
- Scope
- Internal AI requests and AI Gateway tokens in the preceding 30 days
- Method
- Reported request counts and AI Gateway token counts
- Observation date
- 2026
10,952 merge requests in the week of March 23, 2026, nearly double the Q4 baseline; four-week average above 8,700
The source does not report the denominator of this figure.
- Reported by
- Cloudflare
- Scope
- Company merge requests in the week of March 23, 2026, versus Q4 baseline; not agent-authored PRs
- Method
- Weekly merge-request count; distinct from the four-week rolling average
- Observation date
- 2026-03
295 teams using agentic AI tools
The source does not report the denominator of this figure.
- Reported by
- Cloudflare
- Scope
- Teams using agentic AI tools and coding assistants in the reported 30-day snapshot
- Observation date
- 2026
Lessons and interpretation
Centralize through a proxy early; direct-to-gateway looks simpler but blocks per-user attribution, model cataloging, and policy later
Without structured data, agents are working blind; they read code but can't see the system around it (Backstage / AGENTS.md)
Tool schemas eat context (34 GitLab tools ≈ 7.5% of a 200K window); collapse them at the portal
Frontier + open-source hybrid: route a growing share of workloads to cheaper self-hosted models
Sources and research details
Citations link to the original publisher. Each source also keeps a preserved copy in the repository, so a changed or removed page stays checkable.
- The AI engineering stack we built internallyhttps://blog.cloudflare.com/internal-ai-engineering-stack/
- Hacker News discussion of Cloudflare's internal AI engineering stackhttps://news.ycombinator.com/item?id=47837240
Research details for every claim on this page
- Summary
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Headline claim
- Statement type
- Metric
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Reported by
- Cloudflare
- Scope
- Internal AI engineering requests in the 30 days preceding the report
- Denominator
- Not reported
- Method
- Company-reported AI Gateway count for the preceding 30 days
- Observation date
- 2026
- SupportsThe AI engineering stack we built internallyPreserved content.md, lines 14–20
- Sandbox
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Harness
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Model
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Interfaces
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Tool access
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Knowledge
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Credentials
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Context management
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Supporting component
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Supporting component
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Supporting component
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Supporting component
- Statement type
- Fact
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Key observation
- Statement type
- Metric
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Reported by
- Cloudflare
- Scope
- Active internal AI coding-tool users in the preceding 30 days
- Denominator
- Approximately 6,100 employees for company share; R&D organization for R&D share
- Method
- Not reported
- Observation date
- 2026
- SupportsThe AI engineering stack we built internallyPreserved content.md, lines 14–16
- Key observation
- Statement type
- Metric
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Reported by
- Cloudflare
- Scope
- Internal AI requests and AI Gateway tokens in the preceding 30 days
- Denominator
- Not reported
- Method
- Reported request counts and AI Gateway token counts
- Observation date
- 2026
- SupportsThe AI engineering stack we built internallyPreserved content.md, lines 14–20
- Key observation
- Statement type
- Metric
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Reported by
- Cloudflare
- Scope
- Company merge requests in the week of March 23, 2026, versus Q4 baseline; not agent-authored PRs
- Denominator
- Not reported
- Method
- Weekly merge-request count; distinct from the four-week rolling average
- Observation date
- 2026-03
- SupportsThe AI engineering stack we built internallyPreserved content.md, lines 25–29
- Key observation
- Statement type
- Metric
- Provenance
- Reported
- Confidence
- High
- Confidence reason
- A linked first-party source states the claim.
- Reported by
- Cloudflare
- Scope
- Teams using agentic AI tools and coding assistants in the reported 30-day snapshot
- Denominator
- Not reported
- Method
- Not reported
- Observation date
- 2026
- SupportsThe AI engineering stack we built internallyPreserved content.md, lines 14–18
- Lesson
- Statement type
- Inference
- Provenance
- Catalog judgment
- Confidence
- Medium
- Confidence reason
- The catalog derives this observation from the linked sources.
- Lesson
- Statement type
- Inference
- Provenance
- Catalog judgment
- Confidence
- Medium
- Confidence reason
- The catalog derives this observation from the linked sources.
- Lesson
- Statement type
- Inference
- Provenance
- Catalog judgment
- Confidence
- Medium
- Confidence reason
- The catalog derives this observation from the linked sources.
- Lesson
- Statement type
- Inference
- Provenance
- Catalog judgment
- Confidence
- Medium
- Confidence reason
- The catalog derives this observation from the linked sources.
- Operating model assessment
- Statement type
- Inference
- Provenance
- Catalog judgment
- Confidence
- Medium
- Confidence reason
- The source documents automated review findings, but the record combines several platform workflows.
- Observation date
- 2026-04-20