Cloudflare, has expanded its artificial intelligence execution capabilities by announcing official support for running Cursor Cloud Agents on Cloudflare Sandboxes. The deployment framework offers software engineering and platform architecture teams an isolated, customer-controlled environment to run AI-driven coding agents.
Building on Cloudflare’s existing integrations with autonomous AI agent platforms-such as Devin Outposts and Claude Managed Agents-the collaboration addresses a shifting enterprise deployment paradigm. While developers prefer maintaining their established native tools, enterprise security organizations require granular governance over where agentic tasks execute, how code is accessed, and where sensitive system credentials reside. Cloudflare Sandboxes deliver an isolated, edge-adjacent execution layer that satisfies strict enterprise security mandates while remaining close to customer code repositories and internal networks.
Decoupling Orchestration from Environment Execution
Through Cursor Cloud Agents, software engineers can assign development tasks directly via the Cursor desktop client, cursor.com, or the Cursor mobile application. Utilizing Cursor Self-Hosted Machines, Cursor continues to manage the underlying agent loop-handling model inference, task planning, and execution orchestration. However, the actual code execution occurs on a worker machine designated and hosted by the customer.
Also Read: UST Launches UST Codon to Streamline AI-Driven Application Development Across Leading SaaS and ERP Platforms
In SpaceXAI’s operational framework, a worker refers to a customer-controlled environment or machine executing agent-driven actions; this is distinct from Cloudflare Workers, Cloudflare’s serverless compute platform. By leveraging Cloudflare Sandboxes, these self-hosted workers run inside secure container environments deployed within the customer’s dedicated Cloudflare account.
The integration preserves the familiar Cursor developer workflow. Developers initiate, monitor, and manage coding agents from their existing interfaces while Cursor streams progress back in real time. However, all execution steps-including terminal commands, file system modifications, and browser-automated actions-occur strictly within the customer’s isolated Cloudflare sandbox. This architecture provides essential compliance guarantees for organizations with strict data-residency policies regarding codebases, build caches, and API keys.
“Developers want powerful AI tools that fit naturally into their workflows, and enterprises need those tools to run in environments they control,” said Dane Knecht, Chief Technology Officer at Cloudflare. “Cloudflare Sandboxes gives teams the freedom to use the AI tools they prefer while giving organizations a secure, isolated place to run agent work. Bringing Cursor Cloud Agents to Cloudflare Sandboxes is another step toward making Cloudflare the execution layer for the next generation of agentic applications.”
“SpaceXAI’s goal is to make agents useful wherever developers work,” said Toni Adams, Sr Director of Partnerships at SpaceXAI. “Self-Hosted Machines let teams keep Cursor workflows across desktop, web, and mobile while routing work to infrastructure they operate. Cloudflare Sandboxes give those teams an enterprise-grade option for running agent workloads in a controlled environment.”
Zero-Inbound Connectivity Architecture
The integration utilizes an outbound-only connection model to safeguard customer network boundaries. A designated Cursor worker running the Cursor CLI establishes a long-lived, outbound HTTPS connection to Cursor’s control plane, receiving agent tool calls over that secure channel. Because the architecture requires zero inbound firewall openings or ingress connections into the customer’s network, security teams can rapidly deploy Cursor workers into their production infrastructure via standardized setup guides.