Observability connector
Cloudflare Workers Observability connector for governed AI agent access
Connect Cloudflare Workers Observability with an account-scoped API token and account ID.
Direct answer
OneQuery supports Cloudflare Workers Observability for governed agent access.
Teams use the Cloudflare Workers Observability connector to give AI agents bounded source API calls for endpoint-specific context while OneQuery keeps credentials centralized, limits access to approved sources, and preserves audit logs for review.
Agent workflow
What this connector enables
Cloudflare Workers Observability becomes an approved OneQuery source instead of a secret copied into an agent prompt, shell session, or model tool. The agent receives a governed access path, and the source credentials stay behind OneQuery.
- Use bounded source API calls for endpoint-specific context for observability context.
- Keep Cloudflare Workers Observability credentials centralized and out of agent runtimes.
- Review agent access through OneQuery audit history instead of reconstructing direct service usage.
Setup checklist
Prepare the Cloudflare Workers Observability connection
Use cloudflare workers observability credentials and connect the source through the Dashboard and CLI. Keep credentials scoped to the data the agent is allowed to read.
- Enable Workers Logs in the target Worker's Wrangler configuration and redeploy so Cloudflare stores telemetry for the account.
- Create a Cloudflare API token with the Workers Observability permission required by the telemetry API.
- Copy the Cloudflare Account ID from the dashboard and pass it as `credentials.accountId`.
- Optionally include `scriptName` to document the default Worker service this source usually queries.
FAQ
Cloudflare Workers Observability connector questions
What is the OneQuery Cloudflare Workers Observability connector?
The OneQuery Cloudflare Workers Observability connector makes observability context from Cloudflare Workers Observability available to AI agents through bounded source API calls for endpoint-specific context. Connect Cloudflare Workers Observability with an account-scoped API token and account ID.
How do AI agents access Cloudflare Workers Observability through OneQuery?
Agents call OneQuery instead of receiving raw Cloudflare Workers Observability credentials. OneQuery keeps credentials centralized, applies source boundaries, and records access in audit logs while exposing bounded source API calls for endpoint-specific context.
How do I set up the Cloudflare Workers Observability connector?
Prepare cloudflare workers observability credentials and connect Cloudflare Workers Observability from the OneQuery dashboard or CLI. Start with this setup step: Enable Workers Logs in the target Worker's Wrangler configuration and redeploy so Cloudflare stores telemetry for the account.