Run Moltbot on Cloudflare: Moltworker replaces the Mac mini with secure edge infrastructure

Cloudflare’s Moltworker lets you run the self-hosted AI agent Moltbot on Cloudflare instead of buying local hardware. It stitches together a Worker, Sandbox containers, AI Gateway, Browser Rendering, R2 storage, and Zero Trust Access to deliver secure, persistent, and observable agent operations. The project is open source and a proof of concept, showcasing Cloudflare’s end-to-end toolkit for building and running AI agents at the edge.

Key Points

Moltworker runs Moltbot on Cloudflare via a Worker (router/admin UI) plus a Sandbox container, with R2 for persistence.
Workers’ improved native Node.js compatibility and broad NPM support reduce friction and enable more logic to run at the edge.
AI Gateway centralizes AI provider access with logs, analytics, model switching, fallbacks, BYOK, or Unified Billing—no Moltbot code changes needed.
Browser automation is handled by Cloudflare Browser Rendering through a thin CDP proxy and an injected skill for seamless Chromium control.
Zero Trust Access secures the APIs/UI with policy-based auth and JWT validation, yielding strong observability of usage.

Sentiment

The community is predominantly skeptical and cautious toward Moltworker. While there is genuine appreciation for Cloudflare's platform improvements and developer experience, the overall reaction to the specific product is negative. Commenters raise serious concerns about security, privacy, and agent reliability, and many question whether the underlying Moltbot project warrants the attention it has received. The discussion leans toward disagreement with the article's premise that cloud hosting is an upgrade over local self-hosting.

In Agreement

Cloudflare Workers' dramatically improved Node.js compatibility makes deployment much smoother than past attempts, with standard build tooling working out of the box
Cloud hosting with Cloudflare Zero Trust is likely more secure than the many insecure self-hosted Moltbot deployments currently exposed on the internet
A hybrid architecture with a smart cloud brain connecting to a local executor via secure tunnels represents the ideal future for personal AI agents
Cloudflare's platform offers a good middle ground between Heroku and AWS with generous free tiers, making the $5/month option easier than home Kubernetes administration

Opposed

Cloudflare can always read everything passing through Moltworker and its storage, fundamentally compromising the privacy that made local self-hosting attractive
Prompt injection from websites, emails, and other untrusted inputs remains an unsolved existential threat to any agent with real-world access
Cloud hosting eliminates access to local integrations like home automation, printers, and local filesystems that were the primary use case for many Moltbot users
Agents are non-deterministic systems that fail silently and unpredictably, requiring enterprise-grade observability infrastructure that most users will not build
Moltbot itself is an overhyped convenience wrapper for connecting LLMs to chat platforms, attracting grifters and non-technical hype rather than genuine engineering interest
Calling a cloud-hosted service 'self-hosted' is an oxymoron that contradicts the data sovereignty movement's core values