The Cloudflare One stack is here! Hand your Zero Trust setup and migration to an AI agent!

Hey everyone, it's Shii-chan! Today I've got good news for anyone who has ever dreaded a Zero Trust migration. Cloudflare just released the "Cloudflare One stack," a set of skills for AI agents, and it's pretty great — let me walk you through it!

Cloudflare Blog blog.cloudflare.com

What was announced?

Cloudflare's Blog announced the Cloudflare One stack. It's a library of agent skills that gives any AI agent the knowledge it needs to plan, deploy, and manage a Zero Trust environment.

It ships as two lightweight skill files — cloudflare-one and cloudflare-one-migration — published in the Cloudflare Skills repository on GitHub. They pack in expertise from Cloudflare's own people plus tens of thousands of hours of customer experience.

(The Blog is an announcement-and-explainer style post.)

The story so far

Migrating to a Zero Trust network is genuinely hard work. You have to inventory all your existing applications, decode the intent behind every security and routing policy, understand your traffic flows, and map legacy configurations onto a new system. Because so much of it is manual, mistakes creep in and everything takes time.

Until now, moving through a migration like this often meant scheduling migration calls with a vendor.

What changes

With the Cloudflare One stack, an AI agent can take a big chunk of that heavy lifting off your plate — and the best part is that no migration calls are required!

Here's what agents can do:

• Plan migrations: inventory existing VPN applications and map them to the right Cloudflare primitives
• Migrate configurations: transform Zscaler and Palo Alto Networks policies into Cloudflare equivalents
• Generate visualizations: create network diagrams that show the proposed changes
• Troubleshoot: recommend security rules based on live traffic and investigate anomalies
• Manage: watch over user experience with Digital Experience Monitoring (DEX)

And it's not only enterprise customers who benefit. Partners can deploy for their clients faster and more accurately, and the agents themselves get contextualized access to Cloudflare's APIs through a Model Context Protocol (MCP) server.

Dive Deep

To get the most out of these skills, Cloudflare recommends pairing them with the Cloudflare code mode MCP server.

With code mode, an agent gets a typed interface to the live Cloudflare API. That lets it query account configurations and run curated workflows instead of making ad-hoc API calls. Credentials are also kept separate from the model context, which is reassuring on the security side.

The stack also includes logic from Cloudflare's Descaler and Deskope programs. These have a track record of migrating enterprise customers away from competing vendors "in hours rather than months" — and now that know-how is available without booking a call.

Wrap-up

• Cloudflare released the Cloudflare One stack, a set of skills for AI agents
• It's two files, cloudflare-one and cloudflare-one-migration, in the Cloudflare Skills repository on GitHub
• Agents can help with planning, migrating, visualizing, troubleshooting, and managing Zero Trust
• It can translate Zscaler and Palo Alto Networks policies into Cloudflare equivalents
• Paired with the code mode MCP server, it gives typed, safer access to the Cloudflare API
• The migration know-how from Descaler and Deskope is now available without booking a call

If your team is rolling out Zero Trust or planning a move off another vendor, this looks like a seriously handy ally!