CVEs
interesting. if they don't check then disabling dynamic code is useless if you can just deploy a worker from another worker. That said, an MCP server to deploy cloudflare stuff sounds neat
LIt doesn't have to be an MCP server doing the deploy of user provided code. It could be deterministicly done with a API from anywhere both inside and outside of Cloudflare. Allowing for user provided code is the main feature of Workers for Platforms.
Sahh I'm talking about AI agent generated code, thats why I mentioned MCP server
LMakes sense. I just didn't want you to think that it was a feature of Cloudflare's MCP support.