Announcing Claude Managed Agents on Cloudflare

Announcing Claude Managed Agents on Cloudflare Announcing Claude Managed Agents on Cloudflare 2026-05-19 Mike Nomitch

7 min read This post is also available in 简体中文 and 繁體中文 .

Cloudflare and Anthropic have collaborated to integrate Claude Managed Agents with Cloudflare Sandboxes. Our new integration gives you more control over your agent sandboxes, secures connections to private services, and improves observability. In the past year, Cloudflare’s Developer Platform has expanded to give more developers the tools they need to run agents at scale. This includes: Sandboxes for full stateful Linux microVMs at scale

Agents SDK , providing simple and customizable agent framework

Browser Run , which gives agents fully programmable and observable browsers

Dynamic Workers , allowing for dynamic sandboxed code execution at massive scale

Our goal is to make Cloudflare the simplest, most secure, and most programmable cloud for agents. Integrating with Claude Managed Agents is another step in this direction. You can run your agent loop on the Claude Platform, while using Cloudflare to execute code, secure connections, and run custom tool calls. To get going in just minutes, we’ve created a default deployment template that gives you the following: Enhanced security - Run all agent traffic through customizable proxies. This allows you to securely inject credentials, prevent data exfiltration, and better observe how your agents interact with the outside world.

Sandbox control and observability - Get detailed sandbox metrics and logs. SSH into running machines. Customize sandbox images.

Lightweight sandboxes - Writing and executing untrusted code can be done in a traditional microVM or a lightweight isolate . This lets you hit massive scale, boot sandboxes in milliseconds, and minimize infrastructure spend.

Private service connectivity - Connect agents to private internal services without ever exposing them to the Internet.

Browser Control and Observability - Get an audit trail of every agent’s browser sessions, including session recording and human-in-the-loop flows.

Email - Give each of your agents its own email address and ability to send emails.

Custom tools - Extend your agents with tools without needing additional infrastructure. Just write functions and deploy.

You get all of this out of the box when deploying the integration, and you can easily customize if you need more. Let’s take a brief look at Claude Managed Agents, see how to integrate a Cloudflare-based environment, then explore how to get the most out of Claude on Cloudflare.

An overview of Claude Managed Agents

Claude Managed Agents allow developers to easily define and run agents on the Anthropic platform. In these managed environments, Claude can read files, run commands, browse the web, and execute code. The harness supports built-in prompt caching, compaction, and various agent-first performance optimizations. Until now, using Claude Managed Agents has meant running the entire stack on Anthropic-provided infrastructure. While this is great for some developers, others may need more control over their infrastructure choice, whether this is for security, compliance, or performance reasons. Self-managed environments for Claude Agents provide just that. Anthropic describes this as “decoupling the brain from the hands.” The core agent loop runs in Anthropic (the “brain”), but the infrastructure for running and executing code (the “hands”) can be run anywhere, including Cloudflare.

The Cloudflare environment

Our new integration gives your agents a Cloudflare-based environment for running and executing code within minutes. Follow the onboarding guide to get started. Then fork the repo and customize your integration as you see fit. After setup, when a Claude Agent starts a session, it sends a message to your new Cloudflare-based control plane. The Workers -based control plane gives each agent session a sandboxed environment for executing code, developing applications, running CLI tools, and more. State is automatically persisted across session sleeps.

Sandboxes write files and execute code in response to the Claude-based Agent loop You can optionally configure sandbox instance sizes or customize the container image that runs within VM-based sandboxes. Each sandbox can be observed in the Cloudflare dashboard, sandbox logs can be queried or shipped to external providers like Datadog or Splunk, and the control plane ships with a built-in UI, making it easy to track the state of sandboxes or SSH into specific machines.

Get interactive shell sessions into your agent’s sandbox

Enabling agents at Internet scale

What if your agent backend booted in a few milliseconds, and you didn’t have to pay for the resources of a full VM when running the agent? The industry needs a lightweight primitive for sandboxing as we adopt agents at scale, and we’re building just that. But as models get better, we expect more and more workflows to be managed by agents. Each of your customers should be able to run many agents simultaneously; each of your employees should have tens of agents running at once. If we’re constantly running a full microVM per agent, we’ll be unnecessarily burning a ton of resources and money to enable this scale. That’s why we’re providing a faster and cheaper sandbox for your Claude Agents. This sandbox is based on the AgentsSDK . You can execute arbitrary code in Dynamic Workers using Codemode , and you still get a file system , but your agent is doing all of this within a V8 isolate instead of a microVM. If you need agents to act as a developer, building full applications and running Linux-based tools, you can still reach for a microVM-based sandbox. For this, we provide Cloudflare Containers , which Claude Managed Agents can also use. But if you want a faster, cheaper, and more scalable alternative you can use isolates instead of microVMs easily. Just select “isolate” for backend type when setting up an Agent.

Setting up an “isolate” backend gives you a lightweight V8 isolate sandbox instead of a microVM If you want to handle bursts of tens of thousands of concurrent agents or more, running with isolates will allow you to scale in a way that no VM-based solution allows.

Securing your agentic workloads

Agents are far more powerful when they connect to your organization’s context. This usually means accessing private services and data.

As we’ve written before , sandboxed workloads on Cloudflare can use an…