Open source · Apache 2.0 · on Cloudflare
Agents build your site. Nothing ships unseen.
Cloudhal is the agent-native site platform. Agents write pages and posts through MCP, a policy engine keeps them in bounds, and every change is a snapshot a person approves and can roll back. It runs in your own Cloudflare account.
Try the playgroundRead the docs
How a change goes live
- Agent connected over MCP, edits mode
- Drafting a pricing FAQ
- Snapshot taken, preview ready
- Waiting for your approval
- Published, rollback ready
Works with Claude, Cursor, Codex, VS Code or any other MCP client.
How it works
From a sentence to a published page
Describe it
Ask in plain words. The agent reads the site's design rules and its catalog first.
It drafts
Pages, posts, menus and media change through MCP tools, inside the key's scopes and mode.
You review
Every change is a snapshot with a diff and a preview on the real site, checked at phone and desktop widths.
It goes live
A person approves the publish. Rolling back is one step to the snapshot before.
Safe by design
Agents do the work. You keep control.
Letting an agent touch a live site is only sensible when every step is bounded, visible and reversible. Cloudhal is built around that.
Policy engine
Every MCP tool call passes a policy: modes from plan-only to auto, scopes per tool, budgets and taint rules for scheduled runs.
Human approvals
Changes the policy marks as sensitive wait for a person. Approvers see the diff and the preview before anything goes live.
Snapshots and rollback
Publishing is a snapshot of the whole site graph. Diff any two, preview any one, roll back to an earlier one in a single step.
Audit trail
Who changed what, through which tool, under which policy: every agent action is recorded next to the content it touched.
You decide how far an agent goes
Each agent key has a mode. The mode narrows what the key's scopes allow and decides where a person approves. Edits is the default; an agent can ask for more for a while, and you grant it, possibly for less.
The agent may
- Read pages, posts, menus and media
- Render previews and run page checks
Never, in this mode
- Change content
- Publish
- Roll back or delete
The agent may
- Read and preview
- Propose changes
Waits for a person
- Every content change
- Every publish
- Every rollback and delete
The agent may
- Read and preview
- Edit drafts of pages, posts, menus and media, each change snapshotted
Waits for a person
- Every publish
- Every rollback and delete
The agent may
- Read, preview and edit drafts
- Publish low-risk changes: articles added or edited, nothing removed, no pages or settings, at most 20 changes
Waits for a person
- Any other publish
- Every rollback and delete
Open, and written down
Apache 2.0. Counted on October 21, 2026, from this site's MCP server, the npm registry and the repository.
Three ways to start
Your own Studio, API and site for an hour, with no account and nothing to install. Everything is deleted when the session ends.
A site with a theme and a local store, on SQLite and the filesystem. No Cloudflare account needed.
npm create cloudhal@latest my-site
cd my-site && npm install
npx cloudhal dev
The site Worker, Studio, one D1 database and one R2 bucket in your own account. Or use the Deploy to Cloudflare button in the README.
npx cloudhal deploy
npx cloudhal domain set example.com
Cloudhal is open sourceThe agent-native site platform is public: Apache 2.0 code on GitHub, packages on npm, a playground at try.cloudhal.com and docs at cloudhal.dev.
cloudhal.com is built with CloudhalWhy our own marketing site runs on the platform it describes, and what that teaches us.
Introducing CloudhalAn agent-native site platform on Cloudflare, where every change is bounded, visible and reversible.
Your site, your account, your rules
Self-host Cloudhal for free on Cloudflare. This site is built with it.