cloudflare▌

Execute web cache deception attacks by exploiting path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve sensitive authenticated content.

Look up a USCIS case by 13-character receipt number (e.g. MSC2190012345, EAC2290098765, IOE0123456789) on the modern egov.uscis.gov Next.js portal and return status heading, next-step paragraph, form type (I-130/I-485/N-400/I-765/...), service-center code, last-updated date, and the canonical caseId URL. Read-only.

Given a fighter reference (canonical Sherdog URL, name, or name + disambiguator), return profile metadata and full professional bout record as structured JSON. Optional amateur and per-bout-location flags. Read-only.

Search the Sixt car-rental site for available vehicles at a given branch on given dates and return offer details (class, sample model, seats/doors/transmission, mileage policy, per-day and total price). Read-only — never books.

Given a sneaker or streetwear product (name + optional size), return the StockX market snapshot: lowest ask, highest bid, last sale + date, recent sales volume, and a 30-day price-trend payload. Read-only — never bids or buys.

Search Mercari (US peer-to-peer marketplace) for listings matching a query, item-ID list, or seller URL — across the full filter surface (category, brand, condition, price, color, size, shipping, Mercari Authenticate, Smart Pricing, offerable, seller) — and return matching items as structured JSON with per-listing seller, shipping, photo, and status fields.

Extract a company's overall rating, sub-rating averages, recommend/outlook/CEO-approval percentages, and a filtered slice of employee reviews from Glassdoor — accepting a URL, EmployerId, or company name (+ optional location disambiguator) and supporting the full review-page filter rail (stars, job title, location, employment status, language, employment type, sort, keyword, limit). Read-only.

Given a US ZIP code (or City, ST text), return the cheapest gas stations nearby on GasBuddy — with station name, brand, address, fuel grade, current price per gallon, reporter, how recently it was reported, and an optional ZIP-centroid distance. Read-only.

Given a DoorDash restaurant URL or restaurant + city query, extract the full menu — every category, every item, with name, price, description, and popular/featured tags. Read-only — never adds to cart or checks out.

Durable, long-running workflows with automatic retries, state persistence, and event handling on Cloudflare Workers. \n \n Supports three core step types: step.do() for work execution with configurable retries, step.sleep() for delays, and step.waitForEvent() for external event handling with timeouts \n Automatically persists serializable state across steps and hibernation; prevents 12 documented errors including waitForEvent timeout bugs, I/O context violations, and non-idempotent operation pit