Cloudflare's WriteGuard adds policy tiers and audits to MCP agent tools
Cloudflare is bringing WriteGuard, the policy layer it built after a too-broad agent prompt auto-closed thousands of tickets, to MCP server portals in a private beta. Each tool call is classified as read-only, reversible write, or destructive, and anything past read-only must pass policy before it runs. The lesson: agent safety needs hard capability boundaries, not just better prompts.