WorkerD

Gadgets: Personal app vibe coding that is actually safe — Kenton Varda, Cloudflare

Aug 5, 2026 · 18:54

Kenton Varda, creator of Cloudflare Workers, argues personal AI codegen breaks traditional cloud infrastructure and needs a different platform: his side project Gadgets, an office suite of user-vibecoded apps on Workers. Feature requests die in Jira; the plugin-rewrite trap stalls; Gadgets answers with per-instance apps where the platform, not the app, handles sharing, and a null-origin iframe talks over Cap'n Web RPC to a dynamic worker sandbox, so XSS doesn't matter. He shows Claude adding strikethrough, centering, and an SVG box to a slide builder to fulfill a deck request. It all runs locally on workerd, the open-source Workers runtime, no containers, no database, only durable objects. He apologizes that Cloudflare's CTO stopped him from open-sourcing it today; a careful release comes soon.

MCP = Mega Context Problem - Matt Carey

Apr 25, 2026 · 22:42

Matt Carey from Cloudflare argues that the real bottleneck in connecting agents to APIs via MCP is the context window, not the protocol itself. Cloudflare’s OpenAPI spec is 2.3 million tokens; naive tool generation would consume 1.1 million, overwhelming any agent. To solve this, Carey advocates progressive discovery: CLIs (requiring shell access), tool search (loading only relevant tools), or codemode—letting agents write code against a typed SDK and execute it in Cloudflare’s isolated Workers sandbox. This sandbox provides safe, programmable guardrails (no secrets, limited network access), allowing agents to access all 2,600+ Cloudflare API endpoints from a single MCP server. Carey predicts that as agents become code generators, infrastructure primitives like WorkerD, Deno, and Pydantic will proliferate, and MCP servers will become a lightweight middleware flag (e.g., `MCP: true` in Next.js). The talk demonstrates read-only access to the entire Cloudflare API from an MCP client, showing codemode in action.