Give every teammate and agent the right level of access to your Workers
Source
blog.cloudflare.com
Date
Context
Cloudflare lets teams restrict a person or AI agentAn AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.Full definition →'s access to one Worker, an application running on its platform. Its authorization update separates the resources someone can access from the operations they can perform. An Editor credential scoped to one Worker can deploy changes there without permission to delete the Worker or administer other applications.
Traffic routing has a separate boundary. Adding or changing a route or custom domain requires both Worker editing access and the relevant zone permission. Once that connection exists, deployments that leave it unchanged can proceed without broader domain access. This allows deployment automation to receive permissions specific to its job.
Terms in this piece · Glossary
AI agent — An AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.
token — The chunk of text a model reads and writes in — roughly three-quarters of a word — and the unit AI usage is billed in.
