This repository offers a customizable control plane for deploying Claude Managed Agents (CMA) on Cloudflare. It targets developers and power users seeking to run AI agents in secure, managed environments, providing flexible sandboxing, enhanced observability, and robust egress controls, ultimately enabling seamless integration with private services and custom tools.

How It Works

The project deploys a Workers-based control plane that orchestrates CMA sandboxes. It supports two backend types: full Linux VMs via Cloudflare Containers or highly scalable, lightweight Isolate sandboxes. The control plane manages the lifecycle of agent sessions, spinning up sandboxes on demand, syncing state, and shutting them down post-session. This architecture allows for granular policy application, including zero-trust credential injection and secure connectivity to private resources via Workers VPC and Mesh.

Quick Start & Requirements

Two primary deployment styles are supported: a one-click "Deploy to Cloudflare" button (git-based, Workers Builds) or a terminal-based npm run deploy flow. A Paid or Enterprise Cloudflare account is mandatory. The terminal flow requires Docker for building container images. The README details a comprehensive 9-step onboarding process, including crucial security configurations.

Highlighted Details

• Offers choice between full Linux VM (MicroVM) and lightweight Isolate sandboxes for agent execution.
• Enables advanced egress policies for secure credential injection and private service access over Workers VPC/Mesh.
• Features built-in tools for Email Sending, Browser Automation, and Image Generation, extensible via Cloudflare bindings.
• Provides an integrated UI and API for agent management and session monitoring, with state persistence options.

Maintenance & Community

The provided README does not detail specific contributors, sponsorships, or community channels (e.g., Discord, Slack).

Licensing & Compatibility

The project is licensed under the MIT License. No specific compatibility restrictions for commercial use or closed-source linking are mentioned beyond standard MIT terms.

Limitations & Caveats

This repository is explicitly designated as alpha software, indicating potential instability and bugs. Deployment requires a paid Cloudflare account, and securing the deployed control plane dashboard (e.g., via Cloudflare Access) is a necessary post-deployment step.