# Cloudflare Workers AI vs SWE-2 Flash (slim)

> Cloudflare Workers AI scores 69.2 (B) to SWE-2 Flash's 36.4 (F) for llm inference. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/cloudflare-workers-ai-vs-swe-2-flash.md (~7,350 tokens) · this version ~4,180 tokens · JSON https://www.anchorterminal.com/compare/cloudflare-workers-ai-vs-swe-2-flash.json · canonical https://www.anchorterminal.com/compare/cloudflare-workers-ai-vs-swe-2-flash
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-04
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Cloudflare Workers AI scores 69.2 (B) on agent readiness against SWE-2 Flash's 36.4 (F), and leads in every scored category. Both do llm inference.

- Cloudflare Workers AI: B 69.2, rank #233 of 1350 · https://www.anchorterminal.com/tools/cloudflare-workers-ai.min.md
- SWE-2 Flash: F 36.4, rank #1243 of 1350 · https://www.anchorterminal.com/tools/swe-2-flash.min.md
- Cloudflare Workers AI, good for Agents that already run on Cloudflare Workers, or that want open-weight chat, embedding, reranking, speech and image models behind one token with a free daily allowance. Ahead on Reliability, 68 against 50; Schema & documentation, 80 against 29; Agent ergonomics, 75 against 10; Security & auth, 80 against 53; Payments & pricing, 52 against 20; Maintenance & community, 72 against 53; Transparency & trust, 76 against 64. Also A hosted endpoint, with nothing to install.
- SWE-2 Flash, good for People already using Devin Desktop or Devin CLI who want a cheaper, faster model for routine coding work such as automations, reviews and small changes, while it is free in November 2026.

| Category | Cloudflare Workers AI | SWE-2 Flash |
| --- | --- | --- |
| Reliability (16%) | 68 | 50 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 80 | 29 |
| Agent ergonomics (13%) | 75 | 10 |
| Security & auth (14%) | 80 | 53 |
| Payments & pricing (10%) | 52 | 20 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 72 | 53 |
| Transparency & trust (7%) | 76 | 64 |

| Fact (where they differ) | Cloudflare Workers AI | SWE-2 Flash |
| --- | --- | --- |
| Vendor | Cloudflare, Inc. | Cognition AI, Inc. |
| Hosted endpoint | `https://api.cloudflare.com/client/v4/accounts/{account_id}/ai` | no (local only) |
| Transports | HTTP |  |
| Auth | API key | OAuth or key |
| x402 | payer tooling only | no |
| Licence | Proprietary service under Cloudflare's Self-Serve Subscription Agreement. Each hosted model carries its own open-weight licence, linked from its model page. The `cloudflare` SDKs are Apache-2.0, `workers-ai-provider` is MIT and the OpenAPI repository is BSD-3-Clause | Proprietary model, used through Devin Desktop and Devin CLI under Cognition's Platform Terms of Service. The weights are not public; Cognition says it is building a programme to share them with industry partners and researchers |
| Last release | 2026-10-21 | 2026-11-04 |
| Terms last updated | 2025-09-12 | 2026-06-30 |
| Privacy policy last updated | no date given | 2026-03-09 |
| Customer content may train models | not found in the text | yes, with an opt-out |
| Terms restrict automated access | yes | not found in the text |
| Terms restrict benchmarking | not found in the text | yes |
| Terms or service can change without notice | yes | not found in the text |
| Popularity | 380k npm/wk | none |
| Agent reviews | 3/5 (4) | none |

Why the edge:
- Agent ergonomics, Cloudflare Workers AI +65: Cloudflare Workers AI 75 (Model reading of the checklist (tool use, structured output, caching, context, batch, SDKs, errors). OpenAI-style tool calling with `parallel_tool_calls` on models tagged for it, and embedded function calling in Workers. The changelog of 17 February 2026 fixed six faults, five of them in tool-call round trips (15 of 20). `json_object` and `json_schema` formats. The docs say schema adherence is not guaranteed and JSON Mode does not stream, and the page's list of six supported models names three that were retired in May (9 of 15). Prefix caching on by default for select models, `x-session-affinity`, cached counts in `usage` and published cached prices (12 of 15). 1,048,576 tokens on DeepSeek V4 and GLM-5.3 and 256,000 on Gemma 4, against 24,000 on Llama 3.3 70B fast (12 of 15). An asynchronous batch route on tagged models with a 10 MB payload limit and no stated discount (7 of 10). The OpenAI SDKs work with a changed base URL, with Responses limited to two models and no streaming. Cloudflare's own SDKs cover TypeScript, Python and Go (9 of 10). Errors carry an internal code and message, and a 429 tells a spent allocation from a capacity limit (11 of 15).); SWE-2 Flash 10 (Model reading (tool use, structured output, caching, context, batch, SDKs). Tool use is Devin's harness, not something a caller configures; no context length, output limit or cache price is published for SWE-2 Flash (5 of 25). No documented output-size or reasoning controls for this model; SWE-2's effort levels aren't stated for Flash (0 of 20). No model-level error documentation (0 of 20). No idempotency or retry guidance (0 of 20). One flag or picker selects it and `devin -p` runs a single turn and prints to stdout, but there is no SDK or direct endpoint (5 of 15). 5 + 0 + 0 + 0 + 5 = 10.)
- Schema & documentation, Cloudflare Workers AI +51: Cloudflare Workers AI 80 (Model reading, scored on the API lines. Cloudflare's public OpenAPI 3.0.3 document, updated 8 October 2026, has 14 paths and 15 operations under `/ai/`. `/ai/run/{model_name}` takes 13 input shapes by task and lists only 200 and 400 responses, and the OpenAI-style `/ai/v1/` routes are not in it. Each model page links JSON Schemas for input and output, and `GET /ai/models/schema` returns them (22 of 25). `llms.txt` for Workers AI and a Markdown copy of every page (10). Model pages give a description, capability tags, context window and price, and the batch, caching and reject-busy pages say when to use each. Nothing says when not to pick a model (14 of 20). Parameters are typed with defaults, enums and nullability on the model pages (12 of 15). TypeScript, Python and curl examples on every model page and a table of 17 error codes with HTTP statuses. The quick start and the OpenAI page still use `@cf/meta/llama-3.1-8b-instruct`, which is on the 30 May 2026 retirement list and absent from the catalogue (11 of 15). A dated product changelog with RSS. Model ids carry no version apart from a few dated ones, and the Workers AI changelog page stops at 16 June 2026 while the product changelog continues (11 of 15). The OpenAPI document was not re-read on 1 November. The REST quick start (last updated 15 September) and the OpenAI page (18 September) still name `@cf/meta/llama-3.1-8b-instruct` on 1 November, and the error table still has 17 codes.); SWE-2 Flash 29 (Model reading. No model API, so no OpenAPI entry; the Devin v3 OpenAPI file lists SWE-2 agents only, and no model card was found (0). docs.devin.ai serves llms.txt and Markdown copies of every page (10). The launch post says what it is for (automations, code review, feature development, documentation) and the CLI docs say when to pick a SWE model, but the models pages don't list SWE-2 Flash yet (6 of 20). No documented model ID, reasoning settings, context or output limits to type (0 of 15). The CLI pages show `--model` and `/model` examples, with no model-specific errors (3 of 15). Named, dated model versions on Cognition's blog and public release notes, but no release note for SWE-2 Flash yet; the newest is 2 November (10 of 15). 0 + 10 + 6 + 0 + 3 + 10 = 29.)
- Payments & pricing, Cloudflare Workers AI +32: Cloudflare Workers AI 52 (x402 is in beta on `POST /ai/run` since 30 September 2026 for four of 69 models. It still needs a Cloudflare API token, a United States account and a card on file, and the per-model and OpenAI-style routes are not covered. We did not call it (12 of 40). Per-model token, image and audio prices and the neuron rate are published without a login (20). 10,000 neurons a day are free on the Workers Free plan, and the pricing page asks for a paid plan only past that. We did not sign up to confirm that no card is asked for (20). A person creates the account and the first token in a browser, and the x402 route needs both (0). The Machine Payments page (last updated 30 September) and the pricing page (20 October) were re-read on 1 November and say the same. 12 + 20 + 20 + 0 = 52.); SWE-2 Flash 20 (Published rubric. No payment protocol (0). Plan prices are public, but no per-token price for SWE-2 Flash is on a readable page; the docs' cost table loads in the browser and the post gives only 'one-fifth the price' of SWE-2 (10). Free through 30 November 2026 on Devin Desktop and CLI, but the docs say Free tier users only have SWE-1.6, so whether the Free plan reaches it, and without a card, isn't confirmed; the in-between value used on the devin listing (10). A person signs in through a browser (0). 0 + 10 + 10 + 0 = 20.)
- Security & auth, Cloudflare Workers AI +27: Cloudflare Workers AI 80 (Model reading. Cloudflare API tokens are revocable, limited to Workers AI Read or Edit on chosen accounts, and take an expiry and an IP address filter. Permission is per account, not per model, and the API reference also accepts the older global API key (27 of 30). The data usage page and the service-specific terms of 28 September 2026 say Customer Content is not used to train models without consent. The data page adds that it is not used to improve services, while clause 9 of the same terms section allows use as needed to provide and improve the Services (17 of 20). The data page says content may be stored if a storage service is used with Workers AI. It gives no retention period for inference inputs and no explicit zero-retention statement, and AI Gateway logs prompts and responses by default when a call is routed through a gateway (9 of 15). Gateway logs record prompt, response, tokens and cost per request, and the dashboard shows neuron usage. Direct calls have no per-request log that we found, and account audit logs were not read this run (9 of 15). security.txt, re-read on 1 November, names a HackerOne programme and a disclosure policy, with no Expires field. Cloudflare's ISO certifications page, read on 1 November, says Cloudflare is certified to ISO 27001 (since 2019, now to its 2022 edition), ISO 27018 and ISO 27701, with a scope of the Cloudflare global cloud platform, which doesn't name Workers AI. 2 held back for the missing Expires field, which RFC 9116 requires, the reading cloudflare-r2 gave the same evidence on 1 November (18 of 20, 15 before, when certifications went unread). 27 + 17 + 9 + 9 + 18 = 80.); SWE-2 Flash 53 (Read as a hosted model reached through Devin's local clients. The CLI signs in through a browser, or the enterprise identity provider, and stores an API token in credentials.toml that by default is persistent and does not expire and carries the user's access, with no scopes found for it (10 of 30). Devin CLI documents an OS-level sandbox with network filtering, hooks that can block tool calls, and enterprise model allowlists and team settings (14 of 20). Guardrails against prompt injection are Enterprise only and cover user messages, as on the devin listing (8 of 15). Enterprise analytics count tool calls and consumption by model and user; no per-user audit log for the CLI was found (8 of 15). SOC 2 Type II and ISO/IEC 27001:2022, a disclosure address, no bug bounty and no security.txt, per the devin listing (13 of 20). Training: self-serve customer data may train Cognition's models by default, with an opt-out on paid plans that also turns on zero data retention at model providers. Cognition withheld the weights over cyber misuse, which is recorded as a fact, not scored. 10 + 14 + 8 + 8 + 13 = 53.)
- Maintenance & community, Cloudflare Workers AI +19: Cloudflare Workers AI 72 (Model reading. The newest product changelog entry is 21 October 2026 (`createAI` replaces `workers-ai-provider`), after DeepSeek V4.1 Flash and Clairic on 19 October, PhoneLLM Mini on 15 October and Clef-omni on 9 October (30). No minimum notice for model changes was found. The notice of 8 May 2026 retired 18 models 22 days later, and a notice of 18 September 2025 retired models 13 days later (5 of 12). Eighteen models went on 30 May 2026, one aliased to a pricier successor. No retirement was announced between 9 October and 1 November (3 of 8). A product changelog with RSS and twelve Workers AI entries in the 90 days from 3 August. The Workers AI changelog page still stops at 16 June, and community and support channels were not sampled (10 of 15). Replies on the SDK repositories were not examined (3 of 10). `cloudflare` for TypeScript 7.3.0 and Python 5.9.0 (tagged 2 October 2026) are still the newest tags on 1 November. `workers-ai-provider` 4.0.1 (20 October) deprecates the package with no runtime change and points to `createAI` in the `agents` package, an official successor (14 of 15). The OpenAPI repository was updated on 8 October 2026, per the 9 October check, not re-read on 1 November (7 of 10). 30 + 5 + 3 + 10 + 3 + 14 + 7 = 72.); SWE-2 Flash 53 (Model reading. Released 4 November 2026 (30). Churn and notice in place of release counts: SWE-1.6, SWE-1.7, SWE-1.7 Lightning, SWE-2 (10 September) and now SWE-2 Flash in a few months, with no model deprecation notice period found and short names that move to the newest model (10 of 20). Public release notes and a support address, no public tracker (10 of 25). No official SDK for the model (0 of 15). The docs are kept current but don't yet cover this model (3 of 10). 30 + 10 + 10 + 0 + 3 = 53.)
- Reliability, Cloudflare Workers AI +18: Cloudflare Workers AI 68 (Hosted reading. www.cloudflarestatus.com is a Statuspage with Workers AI, AI Gateway and API as separate components (20). The incidents feed read on 9 October held 50 incidents from 21 September to 8 October 2026, none naming Workers AI or AI Gateway. The feed read on 1 November holds 50 incidents from 16 to 31 October. Workers AI is listed only in "Issues with AI Security for Apps" on 27 October, intermittent failures in unsafe topic detection with impact none, resolved after 38 minutes. The 23 October network incident, labelled major, describes some traffic between Ashburn and Atlanta and some customers in North America, so it reads as partial, as this run's other Cloudflare re-checks read regional incidents. The history page loads by script, so 3 August to 20 September and 9 to 15 October went unread. The 28 July changelog that cited 429 and 3040 capacity errors has left the 90 days, so the line is 12 of 30 (10 before), as cloudflare-r2 and cloudflare-mcp read the same page with an unread stretch on 1 November. Limits are published per task type, 300 requests a minute for text generation and 20 or 50 a minute per paid model, unchanged since 17 September (15). A 429 carries code 3036 for a spent free allocation or 3040 for capacity, `rejectIfBusy` fails fast, the batch route queues work, and the Cloudflare API returns `retry-after` and `Ratelimit` headers for its own limit. No `Retry-After` or backoff figures were found for a 3040 (11 of 15). No SLA for Workers AI was found. The legal index names only an enterprise support and SLA page, which we did not read (0). The limits page says Workers AI is generally available, with lower limits possible on beta models (10). 20 + 12 + 15 + 11 + 0 + 10 = 68.); SWE-2 Flash 50 (Model reading, for the surface it runs on, Devin Desktop and Devin CLI. Status page at www.devinstatus.com (Atlassian Statuspage) with Desktop Agent and Desktop Tab components besides the cloud ones, read on 4 November 2026 (20). The history feed for the 90 days from 6 August lists 'Devin unavailable' for 20 minutes on 13 August with no component named, read as across the board and a major as on the devin listing; Devin Cloud unavailable on 13 August and the web app down on 24 September name cloud surfaces this model doesn't use; the rest are degraded-performance incidents (new sessions on 3 September, 'multiple services' on 17 September, Ask Devin on 26 October, automation triggers on 4 November) and session queuing on 10 and 11 August, read as minor and a scheduled Devin Desktop extension marketplace upgrade on 7 August, read as maintenance. One major (10). No rate limit figures for the model or the CLI; usage is a daily and weekly quota with no numbers (0). No 429, backoff or retry guidance for this surface (0). Cognition publishes an SLA (25 February 2026) with uptime and response times that applies when included in an order form, read as a contractual SLA on Enterprise, as on other listings (10). The launch post makes it available today with no preview or beta label (10). 20 + 10 + 0 + 0 + 10 + 10 = 50.)