Alchemy adds opt-in Cloudflare Access protection for its state store, with CI service tokens
samgoodwin89 · x · 2026-09-24
sam-goodwin, author of the open-source alchemy-run project, opened a draft PR (#1814) putting the Cloudflare state store behind Cloudflare Access, addressing a security concern raised by the community.
- Protection lives at the store level: one fixed policy covers every stack and stage in the account
- Policy allows Cloudflare account members plus service tokens for CI
- New commands: alchemy state protect (opt-in, once per account), state login, state token create/list/revoke, state unprotect
- Generates CLOUDFLAREACCESSCLIENTID/SECRET credentials for GitHub Actions etc.
- Access resources live in a dedicated CloudflareStateAccess stack stored in the state store itself
Shipping as opt-in; the author is reviewing with the team before finalizing.
More from coding & agent
- A Hermes Agent prompt that audits Claude's memory files every session — alexcovo_eth · 2026-09-24
- Open-Source MCP Server Connects Claude/Cursor to ComfyUI with 50+ Tools — Less_Actuary_9441 · 2026-09-24
- Using Notion as a data hub makes switching AI services painless — ivanhzhao · 2026-09-24
- Hot take: a 22-year-old fluent in coding agents beats a lazy senior dev — but watch out for 'slop grenades' — jobergum · 2026-09-24
- Blender MCP hits 29k stars as Opus 5.5 builds cities on medium effort — sidahuj · 2026-09-24
- AI Agent Swarm Reverse-Engineers 2001 GBA Game Snood Byte-for-Byte in Two Weeks — Aizkmusic · 2026-09-24