Future of Product #4 · Amsterdam

AI Agents:
Beyond the Demo.

Margot Schipper · Senior Account Executive · Cloudflare
The shift

We moved from training AI, to running it.
Now we let it act.

01
Training
02
Inference
03
Automation
ReasoningExecution
Anatomy of an agent
AI
+
Workflows
+
Tools
=
Agent
DEMO
PromptModelTool callResponseone pass, no memory, no retries
PRODUCTION
Multi-agent orchestrationManager delegates: analyst, checker, planner
Feedback loopUser satisfaction: retry until yes
User
Instructions
Interpretation
& Reasoning
Workflow
Generation
Workflow
Execution
Iterative
Improvement
Output /
Outcome
Context window

Context windows are finite.
Real tasks are not.

Actual Context Window 1M
Tool Definitions2.5M
System Prompt2K
Task
Conversation8K
Tool definitions alone exceed the entire window.
Tool calling

Post-mortem injection

Tool use is bolted on after the model is trained. It never actually learned these APIs, so it guesses.

Functional overlap

When tools expose similar schemas, the model blends them and invents parameters that do not exist.

11
placeholder image · swap later
But LLMs are very good at one thing: writing code.

Code needs a harness. The harness needs an environment.

ChatVoiceEmail SlackWebhook
GLOBAL NETWORK · authenticated entry
Model gateway: caching, fallback, rate & spend limits, analytics
AI Gateway
EXECUTION ENVIRONMENT · runs on V8 isolates, 0ms cold start
Agent harness
LLMreason & plan
Codedeterministic
Toolsnative calls
Observeloop
Workers · code execution
Durable identity + state
Durable Objects
Multi-step, resumable
Workflows
Agent runtime + SQLite
Agents SDK
Governed tool access
MCP (OAuth-scoped)
Edge model inference
Workers AI
Memory & recall
Vectorize
Authenticated requests Zero Trust DDoS & WAF WAF
The economics

The architecture that changes the economics.

Containers

Always running
Billing for idle
Cold start: seconds
OS, runtime, ops burden
10K agents = 10K instances

Isolates

0ms cold start
$0 when idle
No OS, no runtime
Nothing to manage
10K agents at 1% active = pay for 100
For enterprises

Security is not a bolt-on. It is the prerequisite.

Shadow MCP

Unmanaged servers become governed, OAuth-scoped endpoints.

Zero Trust

Every agent request authenticated. Revoke, it stops instantly.

AI Gateway

One layer for cost, caching, and compliance on every model call.

“I know what hyperscalers will look like in 10 years: exactly the same as they do now. I'm looking to Cloudflare to define what the next generation cloud looks like.
Mark Smith · Head of Infrastructure · Discord
Questions?
Come find me, I would love to chat.
Margot Schipper · Senior Account Executive · Cloudflare
01 / 09