Cloudflare shipped a public beta of a new durable_object scheduling policy for Containers, aimed at agent workspaces created on demand: code now picks each sandbox's image and compute size at start time, and filesystem snapshots via snapshotContainer() let sessions resume or fork from one checkpoint. ComputeSDK's independent benchmark put median time-to-interactive at 648ms, down from 4.049 seconds, and a burst test started 100,000 containers in about 5.4 seconds. A new cloudflare/debian-trixie image (Debian Trixie Slim plus Node.js 24 LTS) lets agents start without building their own. Cloudflare says rollouts are now just code, with canary, pin, migrate and rollback per sandbox. The legacy Container and Sandbox classes stay supported through December 31, 2026.
Cloudflare put two agent-commerce products into beta. Monetization Gateway (closed beta, US sellers first) lets domain owners charge AI agents per request, query or token for APIs, MCP tools, data feeds and websites: an unauthenticated request gets an HTTP 402 with payment instructions inline, authorized and settled in USDC on Base through Coinbase's x402 facilitator. Pay Per Use (beta) pays publishers when AI products actually use their content — buyers define what counts as a paid use and self-report each use via a JSON API, and Cloudflare verifies, bills and pays out monthly. Pay Per Use charges for downstream use, unlike 2025's crawl-based Pay Per Crawl, and publishers can combine both models.
Cloudflare's AI Gateway launched Auto Router in public beta: set the model to cloudflare/auto and a multi-head classifier on Workers AI GPUs scores each request across 14 task categories plus complexity, ambiguity, stakes and context dependence, then routes to the model with the best expected quality minus an adaptive cost penalty. It is free during the beta. In Cloudflare's internal benchmark of 97 tasks, cloudflare/auto succeeded on 86.6% of them at $2.10 total, versus 96.6% at $5.91 for Claude Opus 5.5 and 84.2% at $2.64 for GPT-6 Sol — the company notes these are its own results, not independent conclusions.