Introducing cf: the agentic CLI for the entire Cloudflare API
Cloudflare's new `cf` CLI mirrors the entire Cloudflare API with programmatic TypeScript config; the Forge SDK generator behind it is open-sourced.
AI Daily Recap
28 articles · 5 categories
The finishable daily brief
What happened in AI — Sep 28, 2026
Monday, Sep 28, 2026
28 articles · 5 categories
read top to bottom · then stop
In 30 seconds
- Cloudflare launches `cf`, a CLI covering its whole API, and open-sources the Forge SDK generator.
- Gemini Managed Agents inject credentials via an egress proxy, keeping secrets out of the sandbox.
- Kitesurf agent browser adds WebMCP support.
- Claude Sonnet 5.5 is now on Amazon Bedrock.
- Databricks adds full-text and vector search to Lakebase Postgres.
Agent infrastructure dominated: Cloudflare shipped an agent-first CLI and a WebMCP browser, while Gemini Managed Agents moved secret handling out of the sandbox.
Claude Sonnet 5.5 landed on AWS, and DeepSeek disclosed details of its V4.1 agent training.
Agent Tooling Gets Agent-Facing Interfaces 4 items
Vendors are shipping surfaces built for agents to call directly: a full-API CLI, a WebMCP-capable browser, and managed synthetic monitoring.
The road to the agentic browser: A Kitesurf update
Kitesurf, Cloudflare's Workers-based agent browser, adds WebMCP support and terminal rendering, with 730,000+ Web Platform subtests passing.
Implementing synthetic monitoring using Amazon Nova Act
AWS shows an architecture for user-journey synthetic monitoring driven by Nova Act agents on Bedrock AgentCore.
Presentation: From Consumers to Builders: Turning 200 of our Team into Agent Creators in 2 Weeks
Forter's talk covers moving 200 staff to building agents in 2 weeks using custom MCP servers and mixed no-code/code platforms.
Agent Security: Secrets and Visibility 2 items
Two releases target the same gap: keeping credentials and network activity outside the agent's own trust boundary.
Credentials API for Gemini Managed Agents
Gemini Managed Agents store secrets once by ID; an egress proxy injects them on the wire so they never enter the agent sandbox.
Flowlight – open-source network visibility for AI agents on macOS
Flowlight is an open-source macOS tool that shows what network traffic AI agents generate.
Evals and QA Without Hand-Written Tests 2 items
New open-source projects push testing beyond hand-written suites: a deterministic QA CLI and a domain benchmark for agents.
Show HN: Assay – a QA CLI that finds bugs with no LLM and no tests written
Assay is a QA CLI that finds bugs with no LLM and no written tests or baseline.
Show HN: FAB – A benchmark for AI agents doing financial due diligence
FAB benchmarks agents on financial due-diligence work, built by ex-EY practitioners.
Data Infrastructure for Agent Workloads 2 items
Databases are adding search and integrity features aimed at agent-driven access patterns.
Lakebase Search: State-of-the-art full text and vector search for Postgres
Databricks' Lakebase Search adds full-text and vector search to Postgres, arguing OLTP systems weren't built for agent search demands.
AWS Introduces Foreign Key Constraints in Aurora DSQL
Aurora DSQL now enforces foreign keys, including CASCADE and SET NULL actions, so referential integrity lives in the database.
Models and Open-Weight Shifts 3 items
Claude Sonnet 5.5 reaches AWS while DeepSeek shows more of its agent-training stack.
Introducing Claude Sonnet 5.5 on AWS
Claude Sonnet 5.5 is available on Amazon Bedrock and Claude Platform on AWS, pitched at lower cost per task and faster coding work.
DeepSeek Unveils New Paper: First Public Reveal of V4.1 Agent Training "Headquarters" Led by Signatory Liang Wenfeng
DeepSeek's new paper gives the first public look at the agent-training setup behind V4.1.
DeepSeek Harness Desktop Preview: Electron Packages on Win and Mac
DeepSeek's Harness agent tool has a desktop preview, packaged in Electron for Windows and Mac.
You are caught up for this edition