--- author: "Umesh Malik" canonical: "https://umesh-malik.com/blog/tag/cloudflare" description: "Explore articles tagged with Cloudflare by Umesh Malik — AI Engineer, LLM & GenAI Developer. Learn Cloudflare best practices, practical tips, and in-depth guides." title: "Umesh Malik's Blog - Cloudflare Articles | Cloudflare Tutorials" tokens: 1664 generator: "scripts/generate-page-markdown.mjs" --- [← Back to Blog](https://umesh-malik.com/blog) # Cloudflare 12 articles [![Diagram showing robots.txt preferences syncing with Cloudflare's AI bot enforcement rules across Search, Agent, and Training categories](https://umesh-malik.com/blog/sync-robots-txt-ai-bot-blocks-cover.png) AI Security • Aug 24, 2026 ### How to Block AI Training Without Losing Search Visibility Block AI training without losing search by setting one toggle. Bot Preference Sync writes robots.txt from your dashboard — no static file to maintain. 8 min read Read more →](https://umesh-malik.com/blog/sync-robots-txt-ai-bot-blocks) [![OAuth consent screen with optional scope checkboxes that let users narrow agent permissions](https://umesh-malik.com/blog/optional-oauth-scopes-mcp-servers-cover.png) Web Engineering • Aug 23, 2026 ### Configure Optional OAuth Scopes for MCP Servers and Agents Configure optional OAuth scopes so users can narrow agent permissions at consent. The API call, the UX, and handling partial grants. 6 min read Read more →](https://umesh-malik.com/blog/optional-oauth-scopes-mcp-servers) [![Cover graphic showing the four-step baseline method — 5-minute buckets, 3-week median, independent-cause match, verdict — next to the eclipse's 15-30% traffic-drop metrics](https://umesh-malik.com/blog/traffic-anomaly-or-outage-baseline-method-cover.png) Web Engineering • Aug 19, 2026 ### Traffic Anomaly or Outage? What a 30% Drop Actually Means A 15-30% traffic anomaly or outage? Cloudflare's eclipse analysis shows the fix: five-minute buckets against a three-week matched baseline. 7 min read Read more →](https://umesh-malik.com/blog/traffic-anomaly-or-outage-baseline-method) [![Cloudflare's edge injecting the beacon.min.js analytics script into an HTML response before it reaches the browser](https://umesh-malik.com/blog/remove-cloudflare-beacon-min-js-cover.png) Web Engineering • Aug 17, 2026 ### Remove Cloudflare beacon.min.js: you must opt in to opt out Remove Cloudflare beacon.min.js for good: the disable toggle hides behind adding your site to Web Analytics first, and no-transform is the stronger lever. 9 min read Read more →](https://umesh-malik.com/blog/remove-cloudflare-beacon-min-js) [![Cloudflare Access enforcing an identity policy in front of a Worker before its code executes](https://umesh-malik.com/blog/cloudflare-access-for-workers-cover.png) AI Security • Aug 15, 2026 ### Configure Cloudflare Access for Workers: auth before your code runs Cloudflare Access for Workers checks requests before your code runs — no JWT validation. The three scopes, the local-dev config, and what it still misses. 8 min read Read more →](https://umesh-malik.com/blog/cloudflare-access-for-workers) [![Diagram of a Workers AI request routed through AI Gateway, showing the payload log, token count and cost attribution captured at the gateway hop](https://umesh-malik.com/blog/ai-gateway-for-workers-ai-cover.png) AI Engineering • Aug 7, 2026 ### Set up AI Gateway for Workers AI: one argument, every call logged AI Gateway for Workers AI is now one argument on env.AI.run. What it logs instantly, why caching stays off until you ask, and the 60-second TTL floor. 10 min read Read more →](https://umesh-malik.com/blog/ai-gateway-for-workers-ai) [![The four agentic web layers — readable, discoverable, callable, payable — mapped to concrete URLs on a static site](https://umesh-malik.com/blog/make-your-site-agent-readable-cover.png) Web Engineering • Aug 7, 2026 ### How to Make Your Site Agent-Readable: 4 Layers, One Worker Make your site agent-readable in four layers — readable, discoverable, callable, payable. Three are build-time files; only /mcp needs a Worker. 10 min read Read more →](https://umesh-malik.com/blog/make-your-site-agent-readable) [![Diagram of a CI pipeline expressed as a Cloudflare Workflow: one cached install step fanning out to four parallel checks and joining into a deploy step](https://umesh-malik.com/blog/run-cicd-cloudflare-workflows-cover.png) AI Coding Agents & DX • Aug 6, 2026 ### Run CI/CD on Cloudflare Workflows: deploy in 18 lines, 33 free runs Run CI/CD on Cloudflare Workflows and a GitHub Actions YAML becomes 18 lines of TypeScript. Which meter bills first, and what private beta still blocks. 10 min read Read more →](https://umesh-malik.com/blog/run-cicd-cloudflare-workflows) [![MCP write controls diagram: a tool call passing through a policy layer that allows, labels, or blocks it before the handler runs](https://umesh-malik.com/blog/mcp-write-controls-cloudflare-writeguard-cover.png) AI Security • Aug 5, 2026 ### MCP Write Controls: Lessons from Cloudflare WriteGuard MCP write controls decide what your agents can break. Cloudflare's WriteGuard shows the pattern: per-tool risk tiers, agent attribution, central audit. 13 min read Read more →](https://umesh-malik.com/blog/mcp-write-controls-cloudflare-writeguard) [![Cover card titled The Gate, subtitled Thousands of tickets. One agent., with three statistics: 4 risk tiers, Cloudflare's MCP portal growing 13 to 27 servers, and tool annotations marked untrusted per the MCP spec](https://umesh-malik.com/blog/secure-mcp-write-tools-writeguard-cover.png) AI Security • Aug 5, 2026 ### How to Secure MCP Write Tools: Cloudflare's WriteGuard Lesson How to secure MCP write tools: the spec puts confirmation on the client — the one layer you don't control. Cloudflare's WriteGuard moves the gate server-side. 11 min read Read more →](https://umesh-malik.com/blog/secure-mcp-write-tools-writeguard) [![Diagram of an AI agent paying an API over the x402 HTTP 402 protocol using a Cloudflare Virtual Wallet](https://umesh-malik.com/blog/cloudflare-wallets-x402-agent-payments-cover.png) AI Engineering • Aug 4, 2026 ### Cloudflare Wallets and x402: How AI Agents Pay for APIs Cloudflare Wallets and x402 explained: how AI agents get a spending identity, how HTTP 402 payments work, and what breaks when your agent holds a budget. 10 min read Read more →](https://umesh-malik.com/blog/cloudflare-wallets-x402-agent-payments) [![A lightning bolt splitting between Next.js and Vite logos, symbolizing Cloudflare's revolutionary Vinext framework that's 4.4x faster](https://umesh-malik.com/blog/cloudflare-vinext-cover.png) Web Engineering • Feb 25, 2026 ### Cloudflare viNext: The $1,100 Next.js-on-Vite Rebuild Cloudflare viNext rebuilt Next.js on Vite for $1,100 in 7 days: 4.4x faster builds, 57% smaller bundles, already powering CIO.gov in production. 27 min read Read more →](https://umesh-malik.com/blog/cloudflare-vinext-next-js-vite-revolution)