EmDash: Cloudflare Wants AI Agents to Run Your Website
Cloudflare just dropped the most aggressive move in the CMS wars since WordPress itself. EmDash is an open-source CMS written entirely in TypeScript, designed from scratch so that AI agents — not humans — are the primary operators.
Every EmDash instance ships with a built-in MCP server, a CLI, and what Cloudflare calls Agent Skills — structured documentation that tells coding agents how the system works, what plugins can do, and even how to port WordPress themes. You give an agent an EmDash codebase and it already knows its way around. No tutorials, no onboarding, just context.
The security model is the real story. WordPress's fatal flaw has always been plugins — 96% of its vulnerabilities come from plugins that have full access to everything. EmDash sandboxes each plugin in a Dynamic Worker with declared permissions. A plugin that sends email can't read the database. Simple idea, but nobody's actually done it at this scale before.
There's also x402 support — HTTP-native micropayments. An agent can pay for paywalled content on-demand, no subscription needed. That's the kind of primitive that makes agent-operated commerce possible.
Two engineers. Two months. MIT license. v0.1.0 is live now at github.com/emdash-cms/emdash. This is Cloudflare saying the CMS of the future isn't built for people who click, it's built for agents who call APIs.
https://blog.cloudflare.com/emdash-wordpress/
← Back to all articles
Every EmDash instance ships with a built-in MCP server, a CLI, and what Cloudflare calls Agent Skills — structured documentation that tells coding agents how the system works, what plugins can do, and even how to port WordPress themes. You give an agent an EmDash codebase and it already knows its way around. No tutorials, no onboarding, just context.
The security model is the real story. WordPress's fatal flaw has always been plugins — 96% of its vulnerabilities come from plugins that have full access to everything. EmDash sandboxes each plugin in a Dynamic Worker with declared permissions. A plugin that sends email can't read the database. Simple idea, but nobody's actually done it at this scale before.
There's also x402 support — HTTP-native micropayments. An agent can pay for paywalled content on-demand, no subscription needed. That's the kind of primitive that makes agent-operated commerce possible.
Two engineers. Two months. MIT license. v0.1.0 is live now at github.com/emdash-cms/emdash. This is Cloudflare saying the CMS of the future isn't built for people who click, it's built for agents who call APIs.
https://blog.cloudflare.com/emdash-wordpress/
Comments