Announcing Claude Managed Agents on Cloudflare (opens in new tab)

Cloudflare and Anthropic have integrated Claude Managed Agents with Cloudflare Sandboxes, separating Claude’s agent reasoning from the infrastructure that executes code. The integration adds customizable security controls, sandbox observability, private-service access, browser auditing, email, and custom tools. It supports both full microVMs for complex workloads and lightweight isolates for fast, large-scale execution.

Claude Managed Agents and the “Brain vs. Hands” Model

• Claude Managed Agents run on Anthropic’s platform and can:
  • Read and write files
  • Run commands and code
  • Browse the web
  • Use prompt caching, compaction, and agent-focused optimizations
• The integration decouples:
  • The brain: Claude’s agent loop on Anthropic’s infrastructure
  • The hands: Code execution, tools, sandboxes, and connected services on Cloudflare
• Self-managed execution gives organizations more control over security, compliance, infrastructure, and performance.

Cloudflare-Based Agent Environments

• A Workers-based control plane creates a sandbox for each Claude Agent session.
• Sandboxes support:
  • Code execution and file operations
  • Application development and CLI tools
  • Persistent state across session sleeps
• Developers can customize:
  • Sandbox instance sizes
  • Container images for VM-based sandboxes
• Cloudflare provides detailed metrics and logs, dashboard monitoring, external log shipping to services such as Datadog or Splunk, and SSH access to running sandboxes.
• A built-in UI helps track sandbox state and open interactive shell sessions.

Scaling with Isolates and MicroVMs

• Full microVMs are appropriate for agents that need Linux environments, developer tooling, or complete application stacks.
• Cloudflare also offers lightweight V8 isolate sandboxes using Agents SDK, Dynamic Workers, and Codemode.
• Isolates provide:
  • Millisecond-level startup
  • Lower infrastructure costs
  • File-system support and arbitrary code execution
  • Much higher concurrency than VM-based systems
• Developers can select an “isolate” backend when configuring an agent.
• Isolates are intended for workloads reaching tens of thousands of concurrent agents, while Cloudflare Containers provide microVM-based execution when stronger environment fidelity is required.

Security and Agent Connectivity

• The default deployment routes agent traffic through customizable outbound proxies.
• Proxies can help:
  • Inject credentials outside the sandbox
  • Prevent agents from accessing raw secrets
  • Reduce data exfiltration risk
  • Monitor interactions with external services
• Agents can connect to private internal services without exposing those services directly to the public Internet.
• The integration also includes browser session controls, recordings, audit trails, and human-in-the-loop workflows.

Built-In Agent Capabilities

The deployment template includes several capabilities without requiring additional infrastructure:

• Detailed sandbox metrics, logs, and SSH access
• Custom sandbox images and resource sizing
• Browser automation with observability
• Individual email addresses and outbound email for agents
• Custom tools implemented as functions and deployed directly
• Flexible execution through either isolates or microVM-backed sandboxes

Cloudflare’s recommendation is to use isolates for inexpensive, highly concurrent workloads and microVMs when agents require full Linux environments or complex development workflows. The integration is designed to let teams keep Claude’s reasoning on Anthropic while retaining control over execution, connectivity, security, and observability on Cloudflare.