Find integrations by workflow, deployment and AI requirements. Each entry explains what it does and what still needs testing.
Current, planned and conditional integrations53 integrations
Check each integration’s status and limits.Serves the shared Golf UI, native APIs, Git brokerage and trusted service entrypoints at custom domains. UI files are embedded in the control Worker.
Full native forge parity, fleet scale and SaaS onboarding remain open.
Stores canonical Git objects/refs and independent agent forks; supports clone/push, source/history/diffs and first-slice standard PR merge.
Merge requires same repository and base ancestor of head; no tree merge, squash, protected merge or native repository deletion.
Stores identities, grants, collaboration, operation journals, evidence intake, environments, email outbox and encrypted execution values; separate D1 databases back Worker previews.
Recovery, broader authorization matrices and complete repository parity remain open.
SQLite workspace authority serializes writes/revocations, admits bounded concurrent reads and coordinates tasks; read shards scale immutable-source reads; alarms run maintenance when Cron stops arriving.
Bounded single-installation qualification, not global scale or provider availability.
Runs exact-source approved CI and OpenCode proposals in DO-managed Linux containers with outbound interception and verified destruction.
One approved Actions path or Python module; Internet denied; arbitrary upstream workflows and hostile-repo isolation not qualified.
Uses @cloudflare/sandbox Files and SandboxFileError to access container files alongside raw ctx.container execution.
Golf uses raw ctx.container execution. It does not instantiate getSandbox or a Sandbox class.
registry.cloudflare.com holds pinned runner images and digest-verified per-job OCI artifacts; trusted Worker brokers short-lived account registry credentials.
Golf brokers provider authority and preserves repository/job approval. Broader image scanning, trust and retention policy remain separate acceptance.
Private immutable reports, context/results, read indexes, static previews, screenshots, per-preview app files, release assets and discussion attachments.
Release and attachment slice locally verified; release max 25 assets x 256 KiB, discussion max 100 files x 256 KiB; no attachment replacement/deletion.
Buffers evidence IDs into Workflows with durable D1 outbox, bounded retries and reauthorization.
Email/webhook transport currently uses D1 outboxes and maintenance, not Queues.
Optional separate queue retains failed evidence deliveries and exposes failure retention.
Provisioning implemented on Alchemy; real dead-lettered delivery not exercised on retained installation.
Coordinates authorization, exact-source tests, agent proposals, report publication, previews and cleanup through durable steps.
Bounded concurrency/retention/steps; Workflows coordinate effects but do not grant authority or approve merges.
Dispatches isolated PR Worker applications behind the preview gateway, with separate private D1/R2, child hostnames and an outbound-denial Worker.
Only approved prebundled module/schema; arbitrary builds/bindings, app cookies/WebSockets, production promotion and multi-tenant scale remain open.
OTP login and approved-email policies gate control/preview domains; service tokens protect machine access; Golf rechecks D1 repository grants and short-lived single-use preview grants.
Access admission does not itself grant repository permission; native account lifecycle and broader identity onboarding remain open.
Provides branded control/preview URLs and per-application child hostnames; Email onboarding provisions DKIM/SPF/return-path DNS.
Selected approved zone/hostnames only; customer vanity-domain lifecycle is separate planned Cloudflare for SaaS work.
Keeps management/registry/analytics credentials, app signing key, webhook encryption key and execution-value AES-GCM key in trusted bindings.
Secret rotation procedure and approved external-egress broker remain open; job log masking only detects exact secret text.
Runs optional metadata review advice on @cf/cloudflare/clef and coding proposals on @cf/zai-org/glm-5.3-flash through trusted brokers.
Advice is metadata-only; proposals change one approved file and are tested in an independent Artifacts fork; per-use-case model selection remains planned.
Private authenticated inference gateway disables prompt/response logs and cache, caps 60 requests/minute and configures 500 cents/day.
Rate/spend-limit enforcement not exercised; admin gateway usage UI remains planned; AI remains opt-in.
Optional one-dispatch static-preview PNG capture retained privately with digest checks and current-reader authorization.
Enabled in the retained demo, with no completed retained captures at this review. Historical hosted proof covers script-free static HTML only; full interactive QA remains open.
Optional sampled evidence-completion counts, report bytes, duration and observed tokens with hashed workspace index and no source/prompts.
Source, build and binding checks passed. Hosted ingestion and SQL readback are unverified. Metrics do not govern billing or quotas.
Operations collector reads requests/errors/subrequests from GraphQL with a separate Account Analytics Read credential.
Collection currently fails inside the Worker. The equivalent token/query succeeds externally.
Optional sampled logs help diagnose the native deployment alongside local D1 journals.
Provider observability is enabled on the retained demo; logpush is disabled. Wider tracing/export and retention remain separate acceptance.
Configured five-minute maintenance for CI intake retry, preview purge, evidence/index reconciliation, webhook/email retries and probes.
Retained account receives no scheduled events; workspace DO alarm supplies maintenance fallback and cause is unresolved.
Optional per-network/location approximate throttling protects credential-less public source and clone reads.
Signed-in, credentialed and runner requests are excluded. Limiter errors allow the request. This is not a security quota.
Consent-based own-Access-address repository subscriptions receive category-and-link notifications from D1 outbox with rechecks, bounded retries and daily attempt budget.
Retained installation provider acceptance verified; inbox receipt unobserved; bounces/complaints/replies/unsubscribe links remain open.
Encrypted repository subscriptions and stable signed deliveries to approved HTTPS receivers; retained Slack test accepted.
D1 outbox/maintenance provides bounded retries, not queue-based email/webhook transport. Receiver/event/retry matrix remains bounded.
cf supplies scoped provider discovery, setup/deploy and readback qualification; Alchemy optionally provisions equivalent reviewed native resources.
Alchemy beta and cf beta are deployment dependencies only; private state/journals require careful ownership and teardown inspection.
Authenticated reply-to-comment and email-to-issue/task intake.
No native inbound consumer; sending does not imply routing or replies.
Non-authoritative rebuildable configuration caches and isolated customer app namespaces.
No native KV binding; DO storage.kv is Durable Object storage, not Workers KV. KV Instant requires benchmark/cost/eligibility gates.
Optional app database/origin connectivity and evaluation of Cloudflare-billed PlanetScale databases.
Neither provisioning nor native backend switch implemented; native Golf remains D1/SQLite and portable Golf PostgreSQL.
In development: semantic code and issue search using Workers AI embeddings and Vectorize, filtered by the reader’s current access.
Not deployed in the reviewed demo. Current ACL/deletion propagation and real indexing/search acceptance required; AI Search is not implied.
Optional native Worker build/deploy ownership and qualified managed build tasks.
Current Golf CI uses its own evidence/Containers path; no connected Workers Builds or CI SDK implementation found.
Provider Artifacts/email events into durable Golf intake.
No current subscription binding/resource found; current confirmed Git push intake is Golf-owned.
Approved private-origin APIs/databases for bridge or customer applications.
No native runtime Tunnel/Docker/origin dependency; historical bridge qualification does not imply native use.
Customer vanity-domain and certificate lifecycle.
Current owned-zone custom domains do not implement customer SaaS hostname onboarding.
Protocol-appropriate abuse and app protection presets.
Native rate-limiting binding is implemented separately; no Golf WAF/Turnstile/API Shield consumers; never challenge Git/runner clients.
Replayable multi-consumer event streams and retained fleet/run/deployment analytics.
Conditional scale extension only after demonstrated volume/query need; no product consumer found.
Durable interactive agents and scoped generated tool execution for concrete app workflows.
Current agents use maintained OpenCode controller + raw Containers; no Agents SDK/Dynamic Workers runtime found.
Scoped retained agent application context.
No current integration; private-beta eligibility and authorization/provenance gates.
Optional agent/app external research with retained source provenance.
No current product consumer found.
Production error context into Golf incident and agent repair proposal.
No native connected consumer found.
Domain discovery and priced registration/transfer plan.
Existing domains are current default; purchases need explicit approval and no registrar product consumer found.
Scoped account diagnosis, documentation/binding discovery and provisioning suggestions under Golf policy.
cf CLI setup is current; Golf product MCP integration requires pinned/qualified transport/client/permission combinations.
Optional payment-verified API/MCP/export entitlement flows.
Follow-up discussion/exploration only; no working payments feature or entitlement/revocation contract.
Controlled feature rollout and canary/promotion policy.
Native guarded release/rollback exists but does not establish provider gradual deployments or Flagship integration.
Enterprise retained evidence/audit exports.
Governance/retention qualification not implemented by current immutable R2 receipts.
Default forge for fresh portable installations; supported APIs provide Git and collaboration.
Migration of retained installations remains blocked until identity/data fidelity and recovery checks pass.
Persistent Golf/Forgejo/PostgreSQL developer core with separately configured workers and agents.
Loopback baseline; remote TLS, recovery and production operation require explicit qualification.
Independent Golf and Forgejo databases/roles; encrypted sessions, credentials, policy, jobs and receipts.
Existing database roles do not rotate by changing environment values; preserve the keyring.
Core chart for Golf, Forgejo and optional PostgreSQL with exact images and existing Secrets.
Core packaging does not install all workers; production HA, storage fencing and recovery remain open.
Encrypted selected personal provider connections and bounded import slices.
Private full history/LFS/metadata/identity/policy/CI fidelity requires separate owned proofs.
Bounded workflow inspection, configured execution and pinned engine profiles with exact-source reports.
Unsupported semantics are refused; full event/engine/OS compatibility is not claimed.
Configured encrypted accounts and independently qualified bounded agent task/review workflows.
A saved account is not entitlement or successful execution; all harnesses/modes remain separate acceptance.
Generated CLI and scoped stdio MCP reuse current authorization; bounded portable ACP transport.
Each runtime has its supported service inventory; broad interactive ACP/harness execution remains open.
No integrations match these filters. Reset or broaden your selection.
Cloudflare integrations are optional for the portable product. The portable product may opt into individual adapters while retaining other providers or local services elsewhere. A configured integration must still pass its readiness checks before dependent work runs.