Slashing agent token costs by 98% with RFC 9457-compliant error responses
Mar 11, 2026Sam Marsh
Summary
Introduced RFC 9457-compliant structured error responses (Markdown and JSON) for AI agents encountering Cloudflare platform errors (1xxx-class). This replaces HTML error pages with machine-readable instructions, providing fields like `error_code`, `retryable`, `retry_after`, and `owner_action_required` to enable agents to make informed decisions about retrying, backing off, or escalating. This change dramatically reduces payload size and token usage (over 98% for 1015 errors) and is automatically applied across the network without customer configuration.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack