{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "cloudflare-workers-ai", "name": "Cloudflare Workers AI", "vendor": "Cloudflare, Inc.", "vendorUrl": "https://www.cloudflare.com", "kind": "model", "category": "inference", "summary": "Workers AI is Cloudflare's serverless inference service for open-weight models, covering text generation, embeddings, images and speech. Agents call it through the Cloudflare REST API, OpenAI-compatible endpoints or a Workers binding.", "url": "https://www.anchorterminal.com/tools/cloudflare-workers-ai", "markdownUrl": "https://www.anchorterminal.com/tools/cloudflare-workers-ai.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cloudflare-workers-ai.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cloudflare-workers-ai.json", "repo": "https://github.com/cloudflare/api-schemas", "license": "Proprietary service under Cloudflare's Self-Serve Subscription Agreement. Each hosted model carries its own open-weight licence, linked from its model page. The `cloudflare` SDKs are Apache-2.0, `workers-ai-provider` is MIT and the OpenAPI repository is BSD-3-Clause", "transports": [ "http" ], "remoteUrl": "https://api.cloudflare.com/client/v4/accounts/{account_id}/ai", "packages": [ { "registry": "npm", "name": "workers-ai-provider" }, { "registry": "npm", "name": "cloudflare" }, { "registry": "pypi", "name": "cloudflare" } ], "auth": "api-key", "authNotes": "A Cloudflare API token as a Bearer header, created by a person in the dashboard, with the Workers AI Read or Workers AI Edit permission on an account. Tokens can carry an expiry and an IP address filter. Inside a Worker the `AI` binding needs no token. The API reference also accepts the older global API key with an account email. Later tokens can be created through the API with an existing token.", "pricing": "freemium", "pricingNotes": "$0.011 per 1,000 neurons, shown per model as token, image or audio prices, for example Gemma 4 26B at $0.10 in and $0.30 out per 1M tokens. 10,000 neurons a day are free on the Workers Free and Paid plans, and going past that needs Workers Paid, from $5 a month. Seven frontier models need Workers Paid or prepaid AI Gateway credits. A Free plan account starts without a contract (https://developers.cloudflare.com/workers-ai/platform/pricing/, checked 2026-10-09).", "priceSummary": "from $0.0605 / 1M in", "where": "hosted", "x402": { "level": "partial", "evidence": "AI Gateway Machine Payments, in beta since 30 September 2026, takes x402 payment on `POST /ai/run` for four open models when the request carries `Payment-Method: x402`. It needs a Cloudflare API token, a United States account and a card on file. The per-model route `/ai/run/{model_name}` and the OpenAI-style routes are not covered. We did not call it (https://developers.cloudflare.com/ai-gateway/features/machine-payments/, checked 2026-10-09).", "endpoints": [ { "url": "https://api.cloudflare.com/client/v4/accounts/{account_id}/ai/run", "priceUsd": null, "network": "" } ] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 379824, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://developers.cloudflare.com/workers-ai/", "rateLimitsUrl": "https://developers.cloudflare.com/workers-ai/platform/limits/", "llmsTxt": "https://developers.cloudflare.com/workers-ai/llms.txt", "openapi": "https://raw.githubusercontent.com/cloudflare/api-schemas/main/openapi.json", "capabilities": [ "inference.llm", "inference.open-weights", "embed.text", "rerank", "image.generate", "speech.stt", "speech.tts", "compute.batch" ], "tags": [ "hosted", "model", "open-weights", "usage-based", "free-tier", "x402", "openapi", "llms-txt", "openai-compatible", "batch", "prompt-caching", "typescript", "python", "go", "status-page", "bug-bounty" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 68.3, "grade": "B", "agentReady": false, "rank": 224, "ranked": true, "rankOf": 950, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 72, "payments": 52, "reliability": 66, "schema": 80, "security": 77, "transparency": 76 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 66, "points": 13.2, "reason": "Hosted reading. www.cloudflarestatus.com is a Statuspage with Workers AI, AI Gateway and API as separate components (20). The incidents feed held 50 incidents from 21 September to 8 October 2026, none naming Workers AI or AI Gateway. The API component had an 18-minute minor incident on 7 October and delayed permission changes on 30 September. The history page loads by script, so the rest of the 90 days went unread, and the changelog of 28 July 2026 cites 429 and 3040 capacity errors as the reason for limiting free access (10 of 30). Limits are published per task type, 300 requests a minute for text generation and 20 or 50 a minute per paid model (15). A 429 carries code 3036 for a spent free allocation or 3040 for capacity, `rejectIfBusy` fails fast, the batch route queues work, and the Cloudflare API returns `retry-after` and `Ratelimit` headers for its own limit. No `Retry-After` or backoff figures were found for a 3040 (11 of 15). No SLA for Workers AI was found. The legal index names only an enterprise support and SLA page, which we did not read (0). The limits page says Workers AI is generally available, with lower limits possible on beta models (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 80, "points": 13, "reason": "Model reading, scored on the API lines. Cloudflare's public OpenAPI 3.0.3 document, updated 8 October 2026, has 14 paths and 15 operations under `/ai/`. `/ai/run/{model_name}` takes 13 input shapes by task and lists only 200 and 400 responses, and the OpenAI-style `/ai/v1/` routes are not in it. Each model page links JSON Schemas for input and output, and `GET /ai/models/schema` returns them (22 of 25). `llms.txt` for Workers AI and a Markdown copy of every page (10). Model pages give a description, capability tags, context window and price, and the batch, caching and reject-busy pages say when to use each. Nothing says when not to pick a model (14 of 20). Parameters are typed with defaults, enums and nullability on the model pages (12 of 15). TypeScript, Python and curl examples on every model page and a table of 17 error codes with HTTP statuses. The quick start and the OpenAI page still use `@cf/meta/llama-3.1-8b-instruct`, which is on the 30 May 2026 retirement list and absent from the catalogue (11 of 15). A dated product changelog with RSS. Model ids carry no version apart from a few dated ones, and the Workers AI changelog page stops at 16 June 2026 while the product changelog continues (11 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 75, "points": 12.19, "reason": "Model reading of the checklist (tool use, structured output, caching, context, batch, SDKs, errors). OpenAI-style tool calling with `parallel_tool_calls` on models tagged for it, and embedded function calling in Workers. The changelog of 17 February 2026 fixed six faults, five of them in tool-call round trips (15 of 20). `json_object` and `json_schema` formats. The docs say schema adherence is not guaranteed and JSON Mode does not stream, and the page's list of six supported models names three that were retired in May (9 of 15). Prefix caching on by default for select models, `x-session-affinity`, cached counts in `usage` and published cached prices (12 of 15). 1,048,576 tokens on DeepSeek V4 and GLM-5.3 and 256,000 on Gemma 4, against 24,000 on Llama 3.3 70B fast (12 of 15). An asynchronous batch route on tagged models with a 10 MB payload limit and no stated discount (7 of 10). The OpenAI SDKs work with a changed base URL, with Responses limited to two models and no streaming. Cloudflare's own SDKs cover TypeScript, Python and Go (9 of 10). Errors carry an internal code and message, and a 429 tells a spent allocation from a capacity limit (11 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 77, "points": 13.48, "reason": "Model reading. Cloudflare API tokens are revocable, limited to Workers AI Read or Edit on chosen accounts, and take an expiry and an IP address filter. Permission is per account, not per model, and the API reference also accepts the older global API key (27 of 30). The data usage page and the service-specific terms of 28 September 2026 say Customer Content is not used to train models without consent. The data page adds that it is not used to improve services, while clause 9 of the same terms section allows use as needed to provide and improve the Services (17 of 20). The data page says content may be stored if a storage service is used with Workers AI. It gives no retention period for inference inputs and no explicit zero-retention statement, and AI Gateway logs prompts and responses by default when a call is routed through a gateway (9 of 15). Gateway logs record prompt, response, tokens and cost per request, and the dashboard shows neuron usage. Direct calls have no per-request log that we found, and account audit logs were not read this run (9 of 15). security.txt names a HackerOne programme and a disclosure policy, with no Expires field. Certifications were not checked, because we stopped reading www.cloudflare.com after its website terms (15 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 52, "points": 6.5, "reason": "x402 is in beta on `POST /ai/run` since 30 September 2026 for four of 69 models. It still needs a Cloudflare API token, a United States account and a card on file, and the per-model and OpenAI-style routes are not covered. We did not call it (12 of 40). Per-model token, image and audio prices and the neuron rate are published without a login (20). 10,000 neurons a day are free on the Workers Free plan, and the pricing page asks for a paid plan only past that. We did not sign up to confirm that no card is asked for (20). A person creates the account and the first token in a browser, and the x402 route needs both (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 72, "points": 6.3, "reason": "Model reading. The newest product changelog entry is 1 October 2026, and the pricing page changed the same day (30). No minimum notice for model changes was found. The notice of 8 May 2026 retired 18 models 22 days later, and a notice of 18 September 2025 retired models 13 days later (5 of 12). Eighteen models went on 30 May 2026, one aliased to a pricier successor (3 of 8). A product changelog with RSS and nine Workers AI entries between 10 July and 1 October 2026. The Workers AI changelog page is stale since 16 June, and community and support channels were not sampled (10 of 15). Replies on the SDK repositories were not examined (3 of 10). `cloudflare` for TypeScript 7.3.0 and Python 5.9.0 were tagged on 2 October 2026, Go is at v7.12.0, and `workers-ai-provider` 4.0.0 dates from 22 July 2026 (14 of 15). The OpenAPI repository was updated on 8 October 2026 (7 of 10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 76, "points": 6.65, "note": "editorial 56, provenance 95", "reason": "Closed service under the Self-Serve Subscription Agreement and service-specific terms with a Workers AI section. The hosted models are open-weight with licence links on their pages, and the SDKs are Apache-2.0 and MIT (18 of 30). The data usage page, the service-specific terms and the privacy policy of 4 November 2025 agree on ownership and no training. The privacy policy gives retention criteria, not periods, the two documents differ on use to improve services, and the DPA the terms link was not read (20 of 30). No deprecation policy was found. The changelog posts dated notices, and section 8 of the agreement lets Cloudflare modify or discontinue a service without notice (8 of 20). A sub-processor page exists and links a list for Cloudflare services, which we did not read. Model pages are tagged Cloudflare-hosted, and where a request runs is not stated beyond Cloudflare's network (10 of 20)." } ], "assessment": { "date": "2026-10-09", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Model reading of the checklist (tool use, structured output, caching, context, batch, SDKs, errors). OpenAI-style tool calling with `parallel_tool_calls` on models tagged for it, and embedded function calling in Workers. The changelog of 17 February 2026 fixed six faults, five of them in tool-call round trips (15 of 20). `json_object` and `json_schema` formats. The docs say schema adherence is not guaranteed and JSON Mode does not stream, and the page's list of six supported models names three that were retired in May (9 of 15). Prefix caching on by default for select models, `x-session-affinity`, cached counts in `usage` and published cached prices (12 of 15). 1,048,576 tokens on DeepSeek V4 and GLM-5.3 and 256,000 on Gemma 4, against 24,000 on Llama 3.3 70B fast (12 of 15). An asynchronous batch route on tagged models with a 10 MB payload limit and no stated discount (7 of 10). The OpenAI SDKs work with a changed base URL, with Responses limited to two models and no streaming. Cloudflare's own SDKs cover TypeScript, Python and Go (9 of 10). Errors carry an internal code and message, and a 429 tells a spent allocation from a capacity limit (11 of 15).", "maintenance": "Model reading. The newest product changelog entry is 1 October 2026, and the pricing page changed the same day (30). No minimum notice for model changes was found. The notice of 8 May 2026 retired 18 models 22 days later, and a notice of 18 September 2025 retired models 13 days later (5 of 12). Eighteen models went on 30 May 2026, one aliased to a pricier successor (3 of 8). A product changelog with RSS and nine Workers AI entries between 10 July and 1 October 2026. The Workers AI changelog page is stale since 16 June, and community and support channels were not sampled (10 of 15). Replies on the SDK repositories were not examined (3 of 10). `cloudflare` for TypeScript 7.3.0 and Python 5.9.0 were tagged on 2 October 2026, Go is at v7.12.0, and `workers-ai-provider` 4.0.0 dates from 22 July 2026 (14 of 15). The OpenAPI repository was updated on 8 October 2026 (7 of 10).", "payments": "x402 is in beta on `POST /ai/run` since 30 September 2026 for four of 69 models. It still needs a Cloudflare API token, a United States account and a card on file, and the per-model and OpenAI-style routes are not covered. We did not call it (12 of 40). Per-model token, image and audio prices and the neuron rate are published without a login (20). 10,000 neurons a day are free on the Workers Free plan, and the pricing page asks for a paid plan only past that. We did not sign up to confirm that no card is asked for (20). A person creates the account and the first token in a browser, and the x402 route needs both (0).", "reliability": "Hosted reading. www.cloudflarestatus.com is a Statuspage with Workers AI, AI Gateway and API as separate components (20). The incidents feed held 50 incidents from 21 September to 8 October 2026, none naming Workers AI or AI Gateway. The API component had an 18-minute minor incident on 7 October and delayed permission changes on 30 September. The history page loads by script, so the rest of the 90 days went unread, and the changelog of 28 July 2026 cites 429 and 3040 capacity errors as the reason for limiting free access (10 of 30). Limits are published per task type, 300 requests a minute for text generation and 20 or 50 a minute per paid model (15). A 429 carries code 3036 for a spent free allocation or 3040 for capacity, `rejectIfBusy` fails fast, the batch route queues work, and the Cloudflare API returns `retry-after` and `Ratelimit` headers for its own limit. No `Retry-After` or backoff figures were found for a 3040 (11 of 15). No SLA for Workers AI was found. The legal index names only an enterprise support and SLA page, which we did not read (0). The limits page says Workers AI is generally available, with lower limits possible on beta models (10).", "schema": "Model reading, scored on the API lines. Cloudflare's public OpenAPI 3.0.3 document, updated 8 October 2026, has 14 paths and 15 operations under `/ai/`. `/ai/run/{model_name}` takes 13 input shapes by task and lists only 200 and 400 responses, and the OpenAI-style `/ai/v1/` routes are not in it. Each model page links JSON Schemas for input and output, and `GET /ai/models/schema` returns them (22 of 25). `llms.txt` for Workers AI and a Markdown copy of every page (10). Model pages give a description, capability tags, context window and price, and the batch, caching and reject-busy pages say when to use each. Nothing says when not to pick a model (14 of 20). Parameters are typed with defaults, enums and nullability on the model pages (12 of 15). TypeScript, Python and curl examples on every model page and a table of 17 error codes with HTTP statuses. The quick start and the OpenAI page still use `@cf/meta/llama-3.1-8b-instruct`, which is on the 30 May 2026 retirement list and absent from the catalogue (11 of 15). A dated product changelog with RSS. Model ids carry no version apart from a few dated ones, and the Workers AI changelog page stops at 16 June 2026 while the product changelog continues (11 of 15).", "security": "Model reading. Cloudflare API tokens are revocable, limited to Workers AI Read or Edit on chosen accounts, and take an expiry and an IP address filter. Permission is per account, not per model, and the API reference also accepts the older global API key (27 of 30). The data usage page and the service-specific terms of 28 September 2026 say Customer Content is not used to train models without consent. The data page adds that it is not used to improve services, while clause 9 of the same terms section allows use as needed to provide and improve the Services (17 of 20). The data page says content may be stored if a storage service is used with Workers AI. It gives no retention period for inference inputs and no explicit zero-retention statement, and AI Gateway logs prompts and responses by default when a call is routed through a gateway (9 of 15). Gateway logs record prompt, response, tokens and cost per request, and the dashboard shows neuron usage. Direct calls have no per-request log that we found, and account audit logs were not read this run (9 of 15). security.txt names a HackerOne programme and a disclosure policy, with no Expires field. Certifications were not checked, because we stopped reading www.cloudflare.com after its website terms (15 of 20).", "transparency": "Closed service under the Self-Serve Subscription Agreement and service-specific terms with a Workers AI section. The hosted models are open-weight with licence links on their pages, and the SDKs are Apache-2.0 and MIT (18 of 30). The data usage page, the service-specific terms and the privacy policy of 4 November 2025 agree on ownership and no training. The privacy policy gives retention criteria, not periods, the two documents differ on use to improve services, and the DPA the terms link was not read (20 of 30). No deprecation policy was found. The changelog posts dated notices, and section 8 of the agreement lets Cloudflare modify or discontinue a service without notice (8 of 20). A sub-processor page exists and links a list for Cloudflare services, which we did not read. Model pages are tagged Cloudflare-hosted, and where a request runs is not stated beyond Cloudflare's network (10 of 20)." }, "sources": [ { "what": "Workers AI overview", "url": "https://developers.cloudflare.com/workers-ai/", "seen": "2026-10-09" }, { "what": "Workers AI llms.txt", "url": "https://developers.cloudflare.com/workers-ai/llms.txt", "seen": "2026-10-09" }, { "what": "pricing", "url": "https://developers.cloudflare.com/workers-ai/platform/pricing/", "seen": "2026-10-09" }, { "what": "rate limits", "url": "https://developers.cloudflare.com/workers-ai/platform/limits/", "seen": "2026-10-09" }, { "what": "errors", "url": "https://developers.cloudflare.com/workers-ai/platform/errors/", "seen": "2026-10-09" }, { "what": "data usage", "url": "https://developers.cloudflare.com/workers-ai/platform/data-usage/", "seen": "2026-10-09" }, { "what": "Workers AI changelog page", "url": "https://developers.cloudflare.com/workers-ai/changelog/", "seen": "2026-10-09" }, { "what": "product changelog for Workers AI", "url": "https://developers.cloudflare.com/changelog/product/workers-ai/", "seen": "2026-10-09" }, { "what": "paid-only models notice", "url": "https://developers.cloudflare.com/changelog/post/2026-07-28-models-require-workers-paid/", "seen": "2026-10-09" }, { "what": "planned model deprecations notice", "url": "https://developers.cloudflare.com/changelog/post/2026-05-08-planned-model-deprecations/", "seen": "2026-10-09" }, { "what": "model catalogue", "url": "https://developers.cloudflare.com/workers-ai/models/", "seen": "2026-10-09" }, { "what": "GLM-5.3 model page", "url": "https://developers.cloudflare.com/workers-ai/models/glm-5.3/", "seen": "2026-10-09" }, { "what": "Gemma 4 26B model page", "url": "https://developers.cloudflare.com/workers-ai/models/gemma-4-26b-a4b-it/", "seen": "2026-10-09" }, { "what": "Llama 3.3 70B fast model page", "url": "https://developers.cloudflare.com/workers-ai/models/llama-3.3-70b-instruct-fp8-fast/", "seen": "2026-10-09" }, { "what": "GLM-4.7 Flash model page", "url": "https://developers.cloudflare.com/workers-ai/models/glm-4.7-flash/", "seen": "2026-10-09" }, { "what": "OpenAI-compatible endpoints", "url": "https://developers.cloudflare.com/workers-ai/configuration/open-ai-compatibility/", "seen": "2026-10-09" }, { "what": "REST quick start", "url": "https://developers.cloudflare.com/workers-ai/get-started/rest-api/", "seen": "2026-10-09" }, { "what": "function calling", "url": "https://developers.cloudflare.com/workers-ai/features/function-calling/", "seen": "2026-10-09" }, { "what": "JSON Mode", "url": "https://developers.cloudflare.com/workers-ai/features/json-mode/", "seen": "2026-10-09" }, { "what": "prompt caching", "url": "https://developers.cloudflare.com/workers-ai/features/prompt-caching/", "seen": "2026-10-09" }, { "what": "batch API", "url": "https://developers.cloudflare.com/workers-ai/features/batch-api/", "seen": "2026-10-09" }, { "what": "batch API over REST", "url": "https://developers.cloudflare.com/workers-ai/features/batch-api/rest-api/", "seen": "2026-10-09" }, { "what": "reject busy requests", "url": "https://developers.cloudflare.com/workers-ai/features/reject-if-busy/", "seen": "2026-10-09" }, { "what": "API reference, run a model", "url": "https://developers.cloudflare.com/api/resources/ai/methods/run/", "seen": "2026-10-09" }, { "what": "Cloudflare OpenAPI document", "url": "https://github.com/cloudflare/api-schemas", "seen": "2026-10-09" }, { "what": "Machine Payments (x402)", "url": "https://developers.cloudflare.com/ai-gateway/features/machine-payments/", "seen": "2026-10-09" }, { "what": "AI Gateway unified billing", "url": "https://developers.cloudflare.com/ai-gateway/features/unified-billing/", "seen": "2026-10-09" }, { "what": "AI Gateway changelog", "url": "https://developers.cloudflare.com/ai-gateway/changelog/", "seen": "2026-10-09" }, { "what": "AI Gateway logging", "url": "https://developers.cloudflare.com/ai-gateway/observability/logging/", "seen": "2026-10-09" }, { "what": "AI Gateway guardrails", "url": "https://developers.cloudflare.com/ai-gateway/features/guardrails/", "seen": "2026-10-09" }, { "what": "API token creation", "url": "https://developers.cloudflare.com/fundamentals/api/get-started/create-token/", "seen": "2026-10-09" }, { "what": "Cloudflare API rate limits", "url": "https://developers.cloudflare.com/fundamentals/api/reference/limits/", "seen": "2026-10-09" }, { "what": "status incidents feed", "url": "https://www.cloudflarestatus.com/api/v2/incidents.json", "seen": "2026-10-09" }, { "what": "status components feed", "url": "https://www.cloudflarestatus.com/api/v2/components.json", "seen": "2026-10-09" }, { "what": "Self-Serve Subscription Agreement", "url": "https://www.cloudflare.com/terms/", "seen": "2026-10-09" }, { "what": "service-specific terms, Workers AI and AI Gateway", "url": "https://www.cloudflare.com/service-specific-terms-developer-platform/", "seen": "2026-10-09" }, { "what": "privacy policy", "url": "https://www.cloudflare.com/privacypolicy/", "seen": "2026-10-09" }, { "what": "website terms of use", "url": "https://www.cloudflare.com/website-terms/", "seen": "2026-10-09" }, { "what": "sub-processor index page", "url": "https://www.cloudflare.com/gdpr/subprocessors/", "seen": "2026-10-09" }, { "what": "security.txt", "url": "https://www.cloudflare.com/.well-known/security.txt", "seen": "2026-10-09" }, { "what": "TypeScript SDK tags", "url": "https://github.com/cloudflare/cloudflare-typescript", "seen": "2026-10-09" }, { "what": "Python SDK tags", "url": "https://github.com/cloudflare/cloudflare-python", "seen": "2026-10-09" }, { "what": "Go SDK tags", "url": "https://github.com/cloudflare/cloudflare-go", "seen": "2026-10-09" }, { "what": "workers-ai-provider on npm", "url": "https://registry.npmjs.org/workers-ai-provider", "seen": "2026-10-09" }, { "what": "workers-ai-provider weekly downloads", "url": "https://api.npmjs.org/downloads/point/last-week/workers-ai-provider", "seen": "2026-10-09" }, { "what": "RDAP for cloudflare.com", "url": "https://rdap.verisign.com/com/v1/domain/cloudflare.com", "seen": "2026-10-09" } ], "openQuestions": [ "unchecked: Workers AI incident history before 21 September 2026, since the status history page loads by script and the feed starts there", "unchecked: Cloudflare's certifications, the sub-processor list for Cloudflare services, the customer DPA and the enterprise support and SLA page. We stopped requesting www.cloudflare.com pages after reading the website terms, which bar automated bots from using site content for AI systems unless robots.txt explicitly permits the user agent", "unchecked: whether Free plan signup asks for a card. The pricing page says the free allocation is at no charge, and we did not create an account", "unchecked: whether the x402 route answers 402 as documented. We sent no request to api.cloudflare.com", "unchecked: account audit logs and any per-request log for calls that do not pass through an AI Gateway", "Whether `@cf/meta/llama-3.1-8b-instruct` still answers. It is on the 30 May 2026 retirement list and absent from the catalogue, yet the pricing page, the quick start and the OpenAI page still name it", "Section 2.2(e) of the Self-Serve Subscription Agreement bars introducing automated agents or scripts into the Services to generate automated requests or mine data. How Cloudflare reads that for agent callers of an inference API is not stated", "The x402 price per request, network and asset are not on the Machine Payments page. They arrive in the `PAYMENT-REQUIRED` header", "The lead said 50+ models, as the overview page does. The catalogue counted 69 on 9 October 2026", "The first release date of Workers AI was not established from the pages read" ] }, "negative": -3, "negativeNotes": [ "28 July 2026. Kimi K2.6, Kimi K2.7 Code and GLM-5.2 began returning 403 (code 5035) on the Workers Free plan on the day of the notice, with no advance warning found. Three points (https://developers.cloudflare.com/changelog/post/2026-07-28-models-require-workers-paid/)." ], "verdict": "Per-model prices, rate limits and JSON Schemas are public, 10,000 neurons a day are free, and x402 payment is in beta on `/ai/run` for four models. No SLA was found, three models moved to paid-only access on 28 July 2026 with no notice, and several docs pages still use a model retired in May.", "bestFor": "Agents that already run on Cloudflare Workers, or that want open-weight chat, embedding, reranking, speech and image models behind one token with a free daily allowance.", "strengths": [ "Per-model token prices, cached-input prices and neuron rates are published without a login, with 10,000 neurons a day free on the Workers Free plan", "x402 payment (Machine Payments, beta since 30 September 2026) works on `POST /ai/run` for four open models", "Rate limits are published per task type, and a 429 separates a spent free allocation (3036) from capacity (3040)", "API tokens are limited to Workers AI permissions on an account, with optional expiry and IP address filtering", "DeepSeek V4 and GLM-5.3 run with a 1,048,576-token context, with prefix caching and discounted cached input" ], "weaknesses": [ "No SLA for Workers AI was found in the docs or the agreements read", "Three models moved to paid-only access on 28 July 2026, the day of the notice, and Free plan calls to them return 403", "Eighteen models were retired on 30 May 2026 with 22 days' notice, and no minimum notice period is published", "The REST quick start, the OpenAI-compatibility page and the JSON Mode model list still name models on the 30 May 2026 retirement list", "The x402 route still needs a Cloudflare API token, a United States account and a card on file" ], "agentNotes": [ "Check the model page before calling. Seven models need Workers Paid or AI Gateway credits and return 403 with code 5035 on the Free plan", "Read the internal code on a 429. 3036 means the day's 10,000 free neurons are spent until 00:00 UTC, 3040 means capacity, so retry later", "Set `options.rejectIfBusy` to fail fast, or add `?queueRequest=true` for the batch route when the answer can wait", "Send the same `x-session-affinity` value on every turn of a session to reach the prefix cache and the cached-input price", "Keep paid frontier models under 20 requests a minute per model, or 50 with prepaid AI Gateway credits" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68.3 } ], "editorialScores": { "ergonomics": 75, "maintenance": 72, "payments": 52, "reliability": 66, "schema": 80, "security": 77, "transparency": 56 }, "provenanceScore": 95 }, "connect": { "http": "curl https://api.cloudflare.com/client/v4/accounts/$CLOUDFLARE_ACCOUNT_ID/ai/run/@cf/google/gemma-4-26b-a4b-it \\\n -X POST \\\n -H \"Authorization: Bearer $CLOUDFLARE_AUTH_TOKEN\" \\\n -d '{ \"messages\": [{ \"role\": \"system\", \"content\": \"You are a friendly assistant\" }, { \"role\": \"user\", \"content\": \"Why is pizza so good\" }]}'", "x402": "curl -iX POST \"https://api.cloudflare.com/client/v4/accounts/$CLOUDFLARE_ACCOUNT_ID/ai/run\" \\\n --header \"Authorization: Bearer $CLOUDFLARE_API_TOKEN\" \\\n --header \"Payment-Method: x402\" \\\n --header \"Content-Type: application/json\" \\\n --data '{\"model\":\"z-ai/glm-4.7-flash\",\"input\":{\"messages\":[{\"role\":\"user\",\"content\":\"What is Cloudflare?\"}]}}'" }, "letme": { "capability": "https://letme.dev/inference.llm", "tool": "https://letme.dev/cloudflare-workers-ai" }, "sameCompany": [ "cloudflare-ai-gateway", "cloudflare-sandbox-sdk", "cloudflare-web-search", "cloudflare-mcp", "cloudflare-email-service", "cloudflare-r2", "cloudflare-clef" ], "notable": [ "The model catalogue listed 69 models on 9 October 2026, across text generation, embeddings, reranking, image generation, speech to text, text to speech, translation and classification (https://developers.cloudflare.com/workers-ai/models/)", "Machine Payments, in beta since 30 September 2026, takes x402 payment on `POST /ai/run` for `z-ai/glm-4.7-flash`, `google/gemma-4-26b-a4b-it`, `openai/gpt-oss-20b` and `alibaba/qwen3.8-27b`, with a Cloudflare API token, a United States account and a card on file (https://developers.cloudflare.com/ai-gateway/features/machine-payments/)", "Seven models need the Workers Paid plan or prepaid AI Gateway credits, and their limit is 20 requests a minute per model, or 50 with credits (https://developers.cloudflare.com/workers-ai/platform/limits/)", "On 28 July 2026 Kimi K2.6, Kimi K2.7 Code and GLM-5.2 began returning 403 with code 5035 on the Workers Free plan, announced the same day (https://developers.cloudflare.com/changelog/post/2026-07-28-models-require-workers-paid/)", "A notice of 8 May 2026 retired 18 models on 30 May 2026 and aliased `@cf/moonshotai/kimi-k2.5` to the pricier Kimi K2.6 (https://developers.cloudflare.com/changelog/post/2026-05-08-planned-model-deprecations/)", "The data usage page says Customer Content is not used to train models or improve services without explicit consent (https://developers.cloudflare.com/workers-ai/platform/data-usage/)", "The Workers AI changelog page stops at 16 June 2026. Later entries, nine between 10 July and 1 October 2026, are on the product changelog (https://developers.cloudflare.com/changelog/product/workers-ai/)" ], "area": "models", "details": [ { "label": "Endpoints", "value": "Native `POST /accounts/{account_id}/ai/run/{model_name}`, OpenAI-style `/ai/v1/chat/completions` and `/ai/v1/embeddings`, `/ai/v1/responses` for the two GPT-OSS models only (no streaming), and the shared `POST /ai/run` route that takes the model in the body. All under https://api.cloudflare.com/client/v4" }, { "label": "Models on 9 October 2026", "value": "69 in the catalogue. The pricing page lists 37 text generation models, 6 embedding models, 6 image models, 10 audio entries and 8 others, among them a reranker, two translation models and the Clef decision models" }, { "label": "Rate limits", "value": "Per account by task. Text generation 300 requests a minute, embeddings 3,000 (1,500 for `bge-large-en-v1.5`), speech recognition 720, text to image 720, translation 720. Models that need Workers Paid get 20 a minute per model, or 50 with prepaid AI Gateway credits. Beta models may be lower" }, { "label": "Errors", "value": "17 internal codes with HTTP statuses. 429 is 3036 (daily free allocation spent) or 3040 (capacity), 403 with 5035 means the model needs Workers Paid, 408 is 3007 (timeout) or 3008 (aborted)" }, { "label": "Capacity controls", "value": "`options.rejectIfBusy` fails a synchronous call with 429 and 3040 when no capacity is free, in place of waiting in a queue. The batch route (`?queueRequest=true`) queues requests and returns a `request_id` to poll" }, { "label": "Batch", "value": "Asynchronous, pull-based since 19 March 2026, on models tagged Batch, with a 10 MB payload limit. No batch discount is stated" }, { "label": "Prompt caching", "value": "Prefix caching is on by default for select models. The `x-session-affinity` header keeps a session on one model instance, cached tokens appear in `usage`, and cached input has its own price (GLM-5.3 $0.26 against $1.40 per 1M)" }, { "label": "Structured output", "value": "`response_format` of `json_object` or `json_schema`. The docs say adherence to the schema is not guaranteed and JSON Mode does not stream" }, { "label": "Tool calling", "value": "OpenAI-style `tools` with `parallel_tool_calls` on models tagged Function calling, plus embedded function calling in Workers through `@cloudflare/ai-utils`" }, { "label": "Free tier", "value": "10,000 neurons a day on the Workers Free and Paid plans, reset at 00:00 UTC. Past that, $0.011 per 1,000 neurons on Workers Paid, which starts at $5 a month" }, { "label": "Trains on API data", "value": "No. The data usage page and the service-specific terms say Customer Content is not used for training without consent" }, { "label": "Logs", "value": "Requests routed through an AI Gateway are logged with prompt, response, tokens and cost, on by default per gateway. The `cf-aig-collect-log` header overrides the setting for one request" }, { "label": "SDKs", "value": "The OpenAI SDKs with a changed base URL. Cloudflare's own `cloudflare` SDKs, TypeScript 7.3.0 and Python 5.9.0 (both tagged 2 October 2026) and Go v7.12.0. `workers-ai-provider` 4.0.0 (22 July 2026) for the Vercel AI SDK" }, { "label": "Status", "value": "www.cloudflarestatus.com on Statuspage, with Workers AI, AI Gateway and API as separate components, all operational on 9 October 2026" } ], "models": [ { "id": "@cf/google/gemma-4-26b-a4b-it", "name": "Gemma 4 26B A4B", "inputPer1M": 0.1, "outputPer1M": 0.3, "contextTokens": 256000, "released": "2026-04-04", "role": "default", "note": "the model the newest docs examples use, open to the Free plan, vision, batch and function calling" }, { "id": "@cf/zai-org/glm-5.3", "name": "GLM-5.3", "inputPer1M": 1.4, "outputPer1M": 4.4, "contextTokens": 1048576, "released": "2026-08-28", "role": "flagship", "note": "needs Workers Paid or AI Gateway credits, cached input $0.26" }, { "id": "@cf/meta/llama-3.3-70b-instruct-fp8-fast", "name": "Llama 3.3 70B Instruct fp8 fast", "inputPer1M": 0.293, "outputPer1M": 2.253, "contextTokens": 24000, "role": "mid", "note": "batch and function calling" }, { "id": "@cf/zai-org/glm-4.7-flash", "name": "GLM-4.7 Flash", "inputPer1M": 0.0605, "outputPer1M": 0.4, "contextTokens": 131072, "released": "2026-02-13", "role": "fast", "note": "one of the four models that accept x402 payment" } ], "unitPrices": [ { "item": "Whisper large v3 turbo, speech to text", "unit": "audio-minute", "usd": 0.0005, "note": "46.63 neurons" }, { "item": "Deepgram Nova-3, speech to text", "unit": "audio-minute", "usd": 0.0052, "note": "472.73 neurons. $0.0092 over WebSocket" }, { "item": "Deepgram Aura-1, text to speech", "unit": "1m-chars", "usd": 15, "note": "listed as $0.015 per 1,000 characters" }, { "item": "Deepgram Aura-2, text to speech", "unit": "1m-chars", "usd": 30, "note": "listed as $0.030 per 1,000 characters, English and Spanish" } ], "deprecations": [ { "what": "18 models retired, with `@cf/moonshotai/kimi-k2.5` aliased to the pricier `@cf/moonshotai/kimi-k2.6`", "date": "2026-05-30", "source": "https://developers.cloudflare.com/changelog/post/2026-05-08-planned-model-deprecations/", "kind": "shutdown" }, { "what": "`@cf/moonshotai/kimi-k2.6`, `@cf/moonshotai/kimi-k2.7-code` and `@cf/zai-org/glm-5.2` need the Workers Paid plan", "date": "2026-07-28", "source": "https://developers.cloudflare.com/changelog/post/2026-07-28-models-require-workers-paid/", "kind": "breaking" } ], "provenance": { "legalEntity": "Cloudflare, Inc.", "domain": "cloudflare.com", "domainRegistered": "2009-02-17", "endpointOnVendorDomain": true, "terms": "https://www.cloudflare.com/terms/", "privacy": "https://www.cloudflare.com/privacypolicy/", "statusPage": "https://www.cloudflarestatus.com", "changelog": "https://developers.cloudflare.com/changelog/product/workers-ai/", "securityTxt": "valid", "checked": "2026-10-09", "notes": [ "Terms are the Self-Serve Subscription Agreement, last updated 12 September 2025, which names Cloudflare, Inc. at 101 Townsend St, San Francisco. The Workers AI data usage page cites it and the Enterprise Subscription Agreement as the governing documents.", "The service-specific terms (https://www.cloudflare.com/service-specific-terms-developer-platform/), last updated 28 September 2026, have a section for Workers AI and AI Gateway that supplements the agreement.", "The privacy policy is effective from 4 November 2025.", "www.cloudflare.com/.well-known/security.txt, read on 9 October 2026, names HackerOne and a disclosure policy and has no Expires field. It is recorded as valid to match the other Cloudflare listings.", "The endpoint is on api.cloudflare.com.", "The status page lists Workers AI as its own component, operational on 9 October 2026.", "RDAP for cloudflare.com gives a registration date of 2009-02-17.", "The Workers AI changelog page (https://developers.cloudflare.com/workers-ai/changelog/) stops at 16 June 2026, so the product changelog is recorded." ], "score": 95, "checks": [ { "check": "Legal entity named", "value": "Cloudflare, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "cloudflare.com, registered 2009-02-17 (17 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "api.cloudflare.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 7 of the 7 things a reader expects, and has 2 clauses that cost points", "points": 6, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 7 of the 8 things a reader expects", "points": 9.3, "max": 10, "state": "part" }, { "check": "Status page", "value": "www.cloudflarestatus.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "valid", "points": 10, "max": 10, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://www.cloudflare.com/terms/", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-09-12", "words": 7048, "points": 6, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated September 12, 2025", "says": "Last updated 2025-09-12" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "This Agreement will be governed by the laws of the State of California without regard to conflict of law principles.", "says": "The law of the State of California" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "…THROUGH THE SERVICES) OR OTHERWISE UNDER THIS AGREEMENT, WHETHER IN CONTRACT, TORT, OR OTHERWISE, IS LIMITED TO THE AMOUNTS YOU HAVE PAID TO CLOUDFLARE TO ACCESS AND USE THE SERVICE IN THE 12 MONTHS PRIOR TO THE CLAIM.", "says": "Capped at the fees paid in the 12 months before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "We may discontinue, suspend, or remove Beta Services (including any of Customer Content stored as part of the Beta Services) or your access thereto at any time in our sole discretion and may never make them generally available." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "Unless otherwise specified, any modifications to this Agreement will take effect at the start of Subscription Term following the notice.", "says": "Says it gives notice of a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "Unless otherwise expressly permitted in writing by Cloudflare, you will not and you have no right to:" }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": true, "quote": "Service Level Agreements" } ], "toKnow": [ { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "(e) introduce software or automated agents or scripts into the Services so as to produce multiple accounts, generate automated searches, requests or queries, or to strip or mine data from the Services;", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "We also reserve the right to modify or discontinue the Service at any time (including, without limitation, by limiting or discontinuing certain features of the Service) without notice to you.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "We may at our sole discretion terminate your user account or Suspend or terminate your use or access to the Service at any time, with or without notice for any reason or no reason at all." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "THIS AGREEMENT CONTAINS PROVISIONS REQUIRING THAT YOU AGREE TO THE USE OF ARBITRATION TO RESOLVE ANY DISPUTES ARISING UNDER THIS AGREEMENT RATHER THAN A JURY TRIAL OR ANY OTHER COURT PROCEEDINGS, AND TO WAIVE YOUR PARTICIPATION IN CLASS ACTION OF ANY KIND AGAINST CLOUDFLARE." } ], "notes": [ { "date": "2026-10-08", "text": "A customer who lets a third party into the account with an API token or OAuth does so at its own risk, and that party may change or delete account data.", "quote": "You acknowledge that by permitting a third party to access your Cloudflare account, the third party may obtain, modify, or delete your account data and settings." }, { "date": "2026-10-08", "text": "Fees are non-refundable, and a customer who cancels is billed in full for the subscription term in which it cancels.", "quote": "YOU WILL BE BILLED IN FULL FOR THE SUBSCRIPTION TERM IN WHICH YOU CANCEL AND NO REFUNDS WILL BE PROVIDED FOR THE UNUSED PORTION OF SUCH SUBSCRIPTION TERM." }, { "date": "2026-10-08", "text": "Cloudflare accepts no liability for harm arising from free or trial versions of the Services.", "quote": "We will have no liability for any harm or damage arising out of or in connection with any Free Services." } ] }, { "kind": "privacy", "url": "https://www.cloudflare.com/privacypolicy/", "state": "read", "readAt": "2026-10-08", "words": 7595, "points": 9.3, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": false }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "Customer Account Information: When you register for an account, we collect contact information." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We store your personal information for a period of time that is consistent with the business purposes set forth in Section 3 of this policy or as long as needed to fulfill and comply with legal obligations.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "Non-personally identifiable, aggregated data may be shared with third parties." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "We will not sell or rent your personal information.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Where we rely on your consent to process your personal data, you have the right to withdraw or decline consent at any time." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you have any questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us at privacyquestions@cloudflare.com.", "says": "privacyquestions@cloudflare.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "The Global CBPR System means the data privacy framework established by the Global CBPR Forum against which data controllers can voluntarily certify and undergo assessment by third-party accountability agents to enable accountable cross-border data flows among participating jurisdictions, and the Global PRP System mean…", "says": "Relies on the Data Privacy Framework" } ], "toKnow": [ { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "Making Personal Information (such as online identifiers or browsing activity) available to these companies may be considered a “sale” or “sharing” of your Personal Information under the CCPA." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/cloudflare-workers-ai.json", "live": { "slug": "cloudflare-workers-ai", "probe": { "target": "https://api.cloudflare.com/client/v4/accounts/{account_id}/ai", "method": "get", "lastAt": "2026-10-10T03:53:23.918776071Z", "lastOk": true, "lastStatus": 404, "lastMs": 26, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 20, "p95ms24h": 48, "samples24h": 125, "samples30d": 125, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 40, "ok": 40 } ] }, "vendorStatus": { "page": "https://www.cloudflarestatus.com", "indicator": "major", "summary": "Partial System Outage", "checkedAt": "2026-10-10T03:58:06.989485325Z" }, "versions": [ { "registry": "npm", "name": "cloudflare", "version": "7.3.0", "seenAt": "2026-10-09T16:46:16.222261099Z" }, { "registry": "npm", "name": "workers-ai-provider", "version": "4.0.0", "seenAt": "2026-10-09T16:46:15.310826363Z" }, { "registry": "pypi", "name": "cloudflare", "version": "5.9.0", "released": "2026-10-03", "seenAt": "2026-10-09T16:46:17.361988865Z" } ], "githubStars": 194, "npmWeekly": 379824, "pypiWeekly": 365643, "pages": [ { "url": "https://developers.cloudflare.com/changelog/product/workers-ai/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:35:50.279057567Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "486cf84220c1" }, { "url": "https://developers.cloudflare.com/changelog/post/2026-05-08-planned-model-deprecations/", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-09T18:35:42.235428702Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "456d5c31e53a" }, { "url": "https://developers.cloudflare.com/changelog/post/2026-07-28-models-require-workers-paid/", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-09T18:35:44.226321807Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "23663c817503" } ], "updatedAt": "2026-10-10T03:58:06.989485325Z" } } }