{"schema_version":"newruntime-agent-readable-v0.2","type":"post","stable_id":"post:cloudflare-pvcli-privacy-debugger","slug":"cloudflare-pvcli-privacy-debugger","title":"Cloudflare pvcli Makes Privacy Protocols Debuggable Like Infrastructure","description":"Cloudflare open-sourced pvcli, a curl-like debugger for OHTTP-style privacy flows where no one party is supposed to see the whole request path.","retrieval_nugget":"Cloudflare open-sourced pvcli, a curl-like debugger for OHTTP-style privacy flows where no one party is supposed to see the whole request path. Cloudflare's pvcli release is a small tool with a useful product lesson: privacy infrastructure needs debuggable interfaces or it stays reserved for teams with deep protocol specialists. The problem is structural.","status":"published","published_at":"2026-07-27","updated_at":"2026-07-27","record_date":"2026-07-27","date_kind":"published_at","topics":["privacy","security","developer-tools","agent-ready-software"],"source_urls":["https://blog.cloudflare.com/open-sourcing-our-privacy-proxy-cli/?utm_campaign=cf_blog&utm_content=20260727&utm_medium=organic_social&utm_source=twitter","https://github.com/cloudflareresearch/pvcli","https://x.com/Cloudflare/status/2081727564356182171"],"visuals":[{"id":"cloudflare-pvcli-privacy-debugger","kind":"editorial-diagram","role":"hero","src":"https://newruntime.com/images/posts/cloudflare-pvcli-privacy-debugger.webp","alt":"Hand-drawn OHTTP privacy flow with client, relay, gateway, origin, and pvcli debugging the path without crossing the privacy boundary.","caption":"pvcli turns a split privacy protocol into infrastructure that can be tested without collapsing the boundary.","credit":"New Runtime synthesis from Cloudflare pvcli release and repository","source_url":"https://blog.cloudflare.com/open-sourcing-our-privacy-proxy-cli/?utm_campaign=cf_blog&utm_content=20260727&utm_medium=organic_social&utm_source=twitter","generated_with":"newruntime-style-locked-svg-v1","width":1600,"height":900,"legend":[{"label":"Boundary","description":"OHTTP keeps identity and destination knowledge separated across parties."},{"label":"pvcli","description":"A command-line debugger can exercise the full relay, gateway, and origin path."},{"label":"Privacy","description":"The tool is useful because debugging does not require destroying the privacy property."}]}],"routes":{"html":"https://newruntime.com/posts/cloudflare-pvcli-privacy-debugger/","markdown":"https://newruntime.com/posts/cloudflare-pvcli-privacy-debugger.md","json":"https://newruntime.com/posts/cloudflare-pvcli-privacy-debugger.json"},"source_format":"markdown","next_reads":[{"type":"topic","path":"/topics/developer-tools/","reason":"Explore the developer tools topic hub.","url":"https://newruntime.com/topics/developer-tools/","title":"Developer Tools - New Runtime","media_type":"text/html"},{"type":"topic","path":"/topics/security/","reason":"Explore the security topic hub.","url":"https://newruntime.com/topics/security/","title":"Security - New Runtime","media_type":"text/html"},{"type":"related_material","path":"/posts/simon-stateless-mcp-practitioner-reset/","reason":"Shares developer tools and security.","url":"https://newruntime.com/posts/simon-stateless-mcp-practitioner-reset/","title":"Stateless MCP Makes Small, Auditable Agent Tools Practical Again","media_type":"text/html"},{"type":"related_material","path":"/posts/vercel-sandbox-multi-user-agents/","reason":"Shares developer tools and security.","url":"https://newruntime.com/posts/vercel-sandbox-multi-user-agents/","title":"Vercel Sandbox Adds Unix Boundaries for Multi-Agent Work","media_type":"text/html"},{"type":"related_material","path":"/posts/codex-security-cli-scan-workbench/","reason":"Shares developer tools and security.","url":"https://newruntime.com/posts/codex-security-cli-scan-workbench/","title":"Codex Security CLI Turns Security Review Into a Scannable Workbench","media_type":"text/html"}]}