Claude Code adjusts a live Cloudflare search challenge
Willison used Claude Code to narrow a Cloudflare challenge to multi-parameter searches. When the MCP interface could not edit the relevant rules, the agent switched to the API.
AddedWhen crawlers hammered datasette.io, Willison used Codex to build a configurable IP rate-limiting plugin. His release note includes the configuration used on the live site.
Editorial adaptation, not the source author’s exact prompt. Replace bracketed inputs and review tool permissions first.
Inspect sanitized request logs for [service]. Propose route-specific rate limits and exemptions, then implement them on a branch with checks for normal traffic, bursts and proxy IP handling. Produce configuration and rollback instructions. Stop before enabling limits in production.
Willison published the plugin and says the included configuration is running on datasette.io; no measured traffic reduction is given.
Reported by Simon WillisonWillison selected the production configuration. The note does not document a separate approval or review protocol.
A person approved each step before the agent continued.
Codex implemented the plugin from the operational goal; the short release account does not expose every intermediate decision.
Firsthand release note links code and production configuration. Intermediate testing and effectiveness are not documented here.
Credit: Simon Willison
Source published 14 May 2026
Source checked 14 Oct 2026
Codex · GPT-5.5 · Datasette
Operations · Checkpoints
Editorial completeness: 100/100. Measures documented fields, not agent performance or verified outcomes.