Skip to main content
Version: Alpha

Cloudflare service inventory

Reviewed October 14, 2026 against Alchemy, the shared binding contract, the product ledger and a dated read-only engineering deployment inspection (Worker version 44). This is retained implementation evidence, not a currently available public demo or a continuous health monitor. Browser simulations use sample data and provide no execution evidence.

Deployed and conditional services​

The reviewed engineering deployment included AI, Clef advice, proposal inference, email, domains/TLS, registry, Artifacts, R2 and D1. Bound, configured and successful are different states.

Workers​

Current slice. Serves the shared Golf UI, native APIs, Git brokerage and trusted service entrypoints at custom domains. UI files are embedded in the control Worker.

Boundary: Full native forge parity, fleet scale and SaaS onboarding remain open.

Provider documentation · Product source: cloudflare/forge/prepare.mjs:36.

Artifacts​

Current slice. Stores canonical Git objects/refs and independent agent forks; supports clone/push, source/history/diffs and first-slice standard PR merge.

Boundary: Merge requires same repository and base ancestor of head; no tree merge, squash, protected merge or native repository deletion.

Provider documentation · Product source: cloudflare/forge/src/pull-merge.mjs:112.

D1​

Current slice. Stores identities, grants, collaboration, operation journals, evidence intake, environments, email outbox and encrypted execution values; separate D1 databases back Worker previews.

Boundary: Recovery, broader authorization matrices and complete repository parity remain open.

Provider documentation · Product source: cloudflare/forge/prepare.mjs:46.

Durable Objects​

Current slice. SQLite workspace authority serializes writes/revocations, admits bounded concurrent reads and coordinates tasks; read shards scale immutable-source reads; alarms run maintenance when Cron stops arriving.

Boundary: Bounded single-installation qualification, not global scale or provider availability.

Provider documentation · Product source: cloudflare/forge/src/worker.mjs:70.

Containers​

Current slice. Runs exact-source approved CI and OpenCode proposals in DO-managed Linux containers with outbound interception and verified destruction.

Boundary: One approved Actions path or Python module; Internet denied; arbitrary upstream workflows and hostile-repo isolation not qualified.

Provider documentation · Product source: cloudflare/forge/src/test-worker.mjs:26.

Sandbox SDK files​

Current slice. Uses @cloudflare/sandbox Files and SandboxFileError to access container files alongside raw ctx.container execution.

Boundary: This is Containers with Sandbox SDK file helpers, not a separate getSandbox or Sandbox-class runtime.

Provider documentation · Product source: cloudflare/agents/src/worker.mjs:2.

Managed image registry​

Current slice. registry.cloudflare.com holds pinned runner images and digest-verified per-job OCI artifacts; trusted Worker brokers short-lived account registry credentials.

Boundary: Golf brokers provider authority and preserves repository/job approval. Broader image scanning, trust and retention policy remain separate acceptance.

Provider documentation · Product source: cloudflare/forge/src/managed-registry.mjs:4.

R2​

Current slice. Private immutable reports, context/results, read indexes, static previews, screenshots, per-preview app files, release assets and discussion attachments.

Boundary: Release and attachment slice locally verified; release max 25 assets x 256 KiB, discussion max 100 files x 256 KiB; no attachment replacement/deletion.

Provider documentation · Product source: cloudflare/forge/src/releases.mjs:12.

Queues​

Current slice. Buffers evidence IDs into Workflows with durable D1 outbox, bounded retries and reauthorization.

Boundary: Email/webhook transport currently uses D1 outboxes and maintenance, not Queues.

Provider documentation · Product source: cloudflare/forge/prepare.mjs:64.

Queues dead-letter queue​

Conditional. Optional separate queue retains failed evidence deliveries and exposes failure retention.

Boundary: Provisioning implemented on Alchemy; real dead-lettered delivery not exercised on retained installation.

Provider documentation · Product source: deploy/alchemy/alchemy.run.ts:29.

Workflows​

Current slice. Coordinates authorization, exact-source tests, agent proposals, report publication, previews and cleanup through durable steps.

Boundary: Bounded concurrency/retention/steps; Workflows coordinate effects but do not grant authority or approve merges.

Provider documentation · Product source: cloudflare/forge/prepare.mjs:65.

Workers for Platforms​

Current slice. Dispatches isolated PR Worker applications behind the preview gateway, with separate private D1/R2, child hostnames and an outbound-denial Worker.

Boundary: Only approved prebundled module/schema; arbitrary builds/bindings, app cookies/WebSockets, production promotion and multi-tenant scale remain open.

Provider documentation · Product source: cloudflare/forge/prepare.mjs:149.

Access / Zero Trust​

Current slice. OTP login and approved-email policies gate control/preview domains; service tokens protect machine access; Golf rechecks D1 repository grants and short-lived single-use preview grants.

Boundary: Access admission does not itself grant repository permission; native account lifecycle and broader identity onboarding remain open.

Provider documentation · Product source: deploy/alchemy/alchemy.run.ts:45.

DNS, custom domains and TLS​

Current slice. Provides branded control/preview URLs and per-application child hostnames; Email onboarding provisions DKIM/SPF/return-path DNS.

Boundary: Selected approved zone/hostnames only; customer vanity-domain lifecycle is separate planned Cloudflare for SaaS work.

Provider documentation · Product source: deploy/alchemy/alchemy.run.ts:131.

Secrets Store​

Current slice. Keeps management/registry/analytics credentials, app signing key, webhook encryption key and execution-value AES-GCM key in trusted bindings.

Boundary: Secret rotation procedure and approved external-egress broker remain open; job log masking only detects exact secret text.

Provider documentation · Product source: deploy/alchemy/alchemy.run.ts:82.

Workers AI​

Current slice. Runs optional metadata review advice on @cf/cloudflare/clef and coding proposals on @cf/zai-org/glm-5.3-flash through trusted brokers.

Boundary: Advice is metadata-only; proposals change one approved file and are tested in an independent Artifacts fork; per-use-case model selection remains planned.

Provider documentation · Product source: docs/NATIVE_ADMIN_AND_AI_ROADMAP.md:83.

AI Gateway​

Current slice. Private authenticated inference gateway disables prompt/response logs and cache, caps 60 requests/minute and configures 500 cents/day.

Boundary: Rate/spend-limit enforcement not exercised; admin gateway usage UI remains planned; AI remains opt-in.

Provider documentation · Product source: deploy/alchemy/alchemy.run.ts:31.

Browser Run​

Conditional. Optional one-dispatch static-preview PNG capture retained privately with digest checks and current-reader authorization.

Boundary: Enabled in the reviewed engineering deployment, with no completed retained captures at this review. Historical hosted proof covers script-free static HTML only; full interactive QA remains open.

Provider documentation · Product source: cloudflare/forge/src/delivery.mjs:233.

Analytics Engine​

Conditional. Optional sampled evidence-completion counts, report bytes, duration and observed tokens with hashed workspace index and no source/prompts.

Boundary: Source/build/binding qualified; hosted ingestion and SQL readback unverified; not billing or quota authority.

Provider documentation · Product source: cloudflare/forge/prepare.mjs:119.

Workers Analytics API​

Conditional. Operations collector reads requests/errors/subrequests from GraphQL with a separate Account Analytics Read credential.

Boundary: Feed currently fails inside Worker although equivalent external token/query succeeds; configured is not collected.

Provider documentation · Product source: cloudflare/forge/src/operations-provider.mjs:22.

Workers Logs / managed observability​

Conditional. Optional bounded sampled logs support native operational diagnosis alongside local D1 journals.

Boundary: Provider observability is enabled on the reviewed engineering deployment; logpush is disabled. Wider tracing/export and retention remain separate acceptance.

Provider documentation · Product source: cloudflare/forge/src/operations-provider.mjs:14.

Cron Triggers​

Current slice. Configured five-minute maintenance for CI intake retry, preview purge, evidence/index reconciliation, webhook/email retries and probes.

Boundary: Retained account receives no scheduled events; workspace DO alarm supplies maintenance fallback and cause is unresolved.

Provider documentation · Product source: docs/IMPLEMENTATION_STATUS.md:159.

Workers rate limiting​

Conditional. Optional per-network/location approximate throttling protects credential-less public source and clone reads.

Boundary: Signed-in/credentialed/runner requests excluded; limiter errors fail open; not security quota authority.

Provider documentation · Product source: cloudflare/forge/src/rate-limit.mjs:13.

Email Service sending​

Current slice. Consent-based own-Access-address repository subscriptions receive category-and-link notifications from D1 outbox with rechecks, bounded retries and daily attempt budget.

Boundary: Retained installation provider acceptance verified; inbox receipt unobserved; bounces/complaints/replies/unsubscribe links remain open.

Provider documentation · Product source: docs/IMPLEMENTATION_STATUS.md:36.

Signed webhooks​

Current slice. Encrypted repository subscriptions and stable signed deliveries to approved HTTPS receivers; retained Slack test accepted.

Boundary: D1 outbox/maintenance provides bounded retries, not queue-based email/webhook transport. Receiver/event/retry matrix remains bounded.

Provider documentation · Product source: cloudflare/forge/src/webhooks.mjs.

Cloudflare CLI​

Current slice. cf supplies scoped provider discovery, setup/deploy and readback qualification; Alchemy optionally provisions equivalent reviewed native resources.

Boundary: Alchemy beta and cf beta are deployment dependencies only; private state/journals require careful ownership and teardown inspection.

Provider documentation · Product source: deploy/alchemy/README.md:1.

Future integrations​

These integrations have no current native deployment consumer.

  • Email Routing / inbound email: Authenticated reply-to-comment and email-to-issue/task intake. No native inbound consumer; sending does not imply routing or replies.
  • Workers KV / KV Instant: Non-authoritative rebuildable configuration caches and isolated customer app namespaces. No native KV binding; DO storage.kv is Durable Object storage, not Workers KV. KV Instant requires benchmark/cost/eligibility gates.
  • Hyperdrive / PlanetScale: Optional app database/origin connectivity and evaluation of Cloudflare-billed PlanetScale databases. Neither provisioning nor native backend switch implemented; native Golf remains D1/SQLite and portable Golf PostgreSQL.
  • Vectorize search (in development): Permission-filtered code/issue semantic search and repository/doc/evidence retrieval. Requires current ACL and deletion propagation; embeddings, documentation Q&A and semantic search not shipped.
  • Workers Builds / CI SDK: Optional native Worker build/deploy ownership and qualified managed build tasks. Current Golf CI uses its own evidence/Containers path; no connected Workers Builds or CI SDK implementation found.
  • Event Subscriptions: Provider Artifacts/email events into durable Golf intake. No current subscription binding/resource found; current confirmed Git push intake is Golf-owned.
  • Tunnel / Workers VPC: Approved private-origin APIs/databases for bridge or customer applications. No native runtime Tunnel/Docker/origin dependency; historical bridge qualification does not imply native use.
  • Cloudflare for SaaS: Customer vanity-domain and certificate lifecycle. Current owned-zone custom domains do not implement customer SaaS hostname onboarding.
  • WAF / Turnstile / API Shield: Protocol-appropriate abuse and app protection presets. Native rate-limiting binding is implemented separately; no Golf WAF/Turnstile/API Shield consumers; never challenge Git/runner clients.
  • K2 / Basin: Replayable multi-consumer event streams and retained fleet/run/deployment analytics. Conditional scale extension only after demonstrated volume/query need; no product consumer found.
  • Agents SDK / Dynamic Workers: Durable interactive agents and scoped generated tool execution for concrete app workflows. Current agents use maintained OpenCode controller + raw Containers; no Agents SDK/Dynamic Workers runtime found.
  • Agent Memory: Scoped retained agent application context. No current integration; private-beta eligibility and authorization/provenance gates.
  • Web Search: Optional agent/app external research with retained source provenance. No current product consumer found.
  • Workers Issues / Automations: Production error context into Golf incident and agent repair proposal. No native connected consumer found.
  • Registrar: Domain discovery and priced registration/transfer plan. Existing domains are current default; purchases need explicit approval and no registrar product consumer found.
  • Official Cloudflare MCP servers / skills: Scoped account diagnosis, documentation/binding discovery and provisioning suggestions under Golf policy. cf CLI setup is current; Golf product MCP integration requires pinned/qualified transport/client/permission combinations.
  • Monetization Gateway / x402 / Wallets: Optional payment-verified API/MCP/export entitlement flows. Follow-up discussion/exploration only; no working payments feature or entitlement/revocation contract.
  • Flagship / Gradual deployments: Controlled feature rollout and canary/promotion policy. Native guarded release/rollback exists but does not establish provider gradual deployments or Flagship integration.
  • R2 retention locks: Enterprise retained evidence/audit exports. Governance/retention qualification not implemented by current immutable R2 receipts.