Agents In UseThese security AI agent use cases include accounts involving Claude, Codex. Each entry links its source and describes the task, reported outcome and human checkpoint.
Examples include “Claude Code adjusts a live Cloudflare search challenge” (Claude); “Codex builds a rate limiter for an over-crawled site” (Codex).
In “Claude Code adjusts a live Cloudflare search challenge”, Willison chose the rule behavior and created an expiring token with Zone WAF edit permission. In “Codex builds a rate limiter for an over-crawled site”, Willison selected the production configuration. The note does not document a separate approval or review protocol.
2 use cases
til.simonwillison.netWillison used Claude Code to narrow a Cloudflare challenge to multi-parameter searches. When the MCP interface could not edit the relevant rules, the agent switched to the API.
Added
Claudevia Claude Code
simonwillison.netWhen crawlers hammered datasette.io, Willison used Codex to build a configurable IP rate-limiting plugin. His release note includes the configuration used on the live site.
Added
CodexExamples include “Claude Code adjusts a live Cloudflare search challenge” (Claude); “Codex builds a rate limiter for an over-crawled site” (Codex). Open each entry for the steps and reported outcome.
In “Claude Code adjusts a live Cloudflare search challenge”, Willison chose the rule behavior and created an expiring token with Zone WAF edit permission. In “Codex builds a rate limiter for an over-crawled site”, Willison selected the production configuration. The note does not document a separate approval or review protocol.
The sourced entries in this category name Claude, Codex. Open each account to see the tools used and the author’s reported result.
These accounts document particular runs rather than establish safety for every task. The recorded human checkpoints are: In “Claude Code adjusts a live Cloudflare search challenge”, Willison chose the rule behavior and created an expiring token with Zone WAF edit permission. In “Codex builds a rate limiter for an over-crawled site”, Willison selected the production configuration. The note does not document a separate approval or review protocol. Review the linked source and permissions before trying an adapted prompt.