EmDash 1.0 Launches as Stable Open-Source CMS with Decentralized, Sandboxed Plugin System

EmDash 1.0 Launches as Stable Open-Source CMS with Decentralized, Sandboxed Plugin System Cloudflare and open-source contributors have released EmDash 1.0, a stable, MIT-licensed content management system built on Astro that integrates with AI agents and introduces isolated plugin execution alongside a decentralized registry. EmDash 1.0 provides production-ready content editing, localization, an API, a CLI, and a built-in Model Context Protocol (MCP) server for agents. The CMS was hardened by migrating the Cloudflare Blog, managing traffic spikes up to 5,000 requests per second with KV object caching, Hyperdrive, and Workers Cache. A decentralized plugin registry operates on AT Protocol, enabling signed releases and portable publisher identities without a central gatekeeper. Plugins run in isolated sandbox runtimes powered by Cloudflare Dynamic Workers or workerd, requiring administrator approval for specific capability-gated permissions. Production Stability and Architecture EmDash 1.0 transitions the Astro-based CMS from beta to a stable, free, and open-source release under the MIT license. Geared toward developers, editors, and autonomous agents, it provides administrative workflows, media tools, localization into 25 languages, and database migrations. The release was battle-tested by migrating the Cloudflare Blog to the platform, where it handled millions of weekly views and traffic surges up to 5,000 requests per second, driving additions like KV object caching and Hyperdrive database adapters. Decentralized Plugin Registry via AT Protocol Rather than relying on a centralized marketplace acting as both gatekeeper and publisher registry, EmDash utilizes the AT Protocol (atproto) for its plugin ecosystem. Authors publish with Atmosphere accounts, signing package records that are verified via signed Merkle Search Trees. EmDash provides open-source aggregator, moderation, and catalog tools, but allows external entities to index the same signed publications and operate independent catalogs without vendor lock-in. Sandboxed Runtime Security To prevent the security vulnerabilities common in traditional monolithic CMS architectures, EmDash isolates each plugin inside its own runtime. On Cloudflare, plugins run as Dynamic Workers, while on Node.js, they execute inside workerd processes. Plugins operate without automatic access to site data, file systems, or networks; instead, each capability must be explicitly declared by the plugin and approved by the site administrator. Platform Hosting and EmDash Build Alpha EmDash is built to support hosting providers through Workers for Platforms, allowing multi-tenant site deployments with agentic management via MCP. In tandem with the 1.0 release, Cloudflare open-sourced an alpha of EmDash Build, an AI site generator where agents assemble data models and pages within isolated Cloudflare Sandbox containers, tracking changes through Git commits before deployment to production.

开源CMS EmDash 1.0正式发布：基于Astro并引入去中心化插件注册表与沙箱架构 Cloudflare团队正式发布基于Astro的内容管理系统EmDash 1.0版本。该版本采用MIT开源协议，经过生产级验证，并推出基于AT Protocol的去中心化插件注册表与运行时沙箱安全体系。 EmDash 1.0采用MIT许可，基于Astro构建，原生支持开发者、编辑与MCP智能体工作流。 插件注册表基于AT Protocol与Atmosphere去中心化身份，发布者自主掌握包记录与发行权。 采用类似移动App的权限声明与沙箱隔离架构，插件运行在独立的Dynamic Worker或workerd进程中。 开源AI建站工具EmDash Build Alpha版同步推出，可直接由AI代理生成完整全栈站点。 生产级验证与核心功能演进 EmDash最初于4月推出，经过5个月与贡献者及实际用户的迭代，现已达到1.0稳定状态。Cloudflare官方博客作为首批落地案例迁移至EmDash，验证了其在高并发流量（支持峰值每秒5,000次请求）及DDoS下的稳定性，并催生出KV对象缓存、Hyperdrive数据库适配器等特性。平台提供API、CLI与内置MCP服务器，方便人类与AI Agent协同管理内容。 基于AT Protocol的去中心化插件注册表 传统CMS插件市场往往由中心化平台把控身份与分发权。EmDash将插件元数据与目录解耦，基于Bluesky同款的AT Protocol（atproto）构建注册表，开发者使用Atmosphere便携身份签名发布。仓库采用签名默克尔搜索树（Merkle Search Tree）提供包含证明，EmDash可直接验证包完整性与权限声明，无需信任中心服务器；默认目录仅做展示层审核，无法篡改或撤回开发者发行记录。 沙箱隔离与细粒度权限控制 针对WordPress插件常因共享进程而导致数据库、文件系统及全网访问权限泄露的问题，EmDash引入沙箱运行机制。在Cloudflare上通过Worker Loader作为Dynamic Worker运行，在Node.js环境下则作为独立的workerd进程隔离运行。插件默认仅能访问私有存储，若需接触媒体、内容或外部网络，必须在清单中声明并经管理员明确审批，不同能力完全解耦。 多租户托管集成与AI建站工具EmDash Build 配合Workers for Platforms，托管商能够免去服务器配置负担，将各客户站点以独立Worker分发。同时，团队开源了EmDash Build（Alpha），该工具利用Agents SDK与沙箱容器，允许用户通过自然语言让AI代理完成内容建模、页面生成与Git提交，随后一键发布至生产环境，后续修改可直接在页面中进行而无需反复消耗Prompt额度。

When we [introduced EmDash on April 1](https://blog.cloudflare.com/emdash-wordpress/) as the “spiritual successor to WordPress”, the buzz was hard to ignore. Walking around a WordPress conference that month, we couldn’t walk far without hearing murmurs about EmDash from fellow attendees. But alongside the excitement and curiosity has been a seed of doubt among some in the industry. Was this just an April Fools’ joke? It was not. Today, we are releasing EmDash 1.0: a stable, free, and open source CMS built on Astro, ready to power a production website, your agency’s vibe-coding platform, or your hosting company’s site-building experience. Developers build with Astro, editors manage content through the EmDash admin, and agents can work through the API, CLI, or built-in MCP server. EmDash 1.0 brings those pieces together with production-tested editorial, media, localization, migration, and deployment workflows. We are also launching a decentralized plugin registry that lets developers publish without handing ownership of their identity or releases to a central marketplace, while site owners can discover and install their plugins directly from inside EmDash. Since EmDash's first beta, developers have launched real websites with it. Even so, we kept hearing a reasonable response: “This looks interesting. Let me know when it is 1.0.” Before relying on EmDash for their sites, they wanted confidence that it was stable, secure, that upgrades would protect their content, and that we are fully committed to maintaining it. EmDash 1.0 is our answer to that. For the past five months, we have worked with contributors and production users on the parts of the CMS that every site depends upon: data safety, database migrations, editorial workflows, localization, plugin security, performance, and the reliability of the admin, API, MCP, and media experiences. Real deployments shaped much of that work, uncovering edge cases and identifying needs that only show up when a site is serving real traffic and being used by real teams of editors. As one example of this, [Avulux](https://avulux.com/) converted a custom microsite to EmDash after dealing with the maintenance burden of WordPress for too long. Since EmDash is an agent’s best friend, using the [EmDash Agent Skills](https://github.com/emdash-cms/emdash/tree/main/skills) helped that transition take less than a day to complete. “The site had to be fast to use and simple for our team to update,” says Greg Barbosa, Director of Innovation and Systems at Avulux. “WordPress had become the opposite of that. With EmDash, we now have a shared platform that developers can extend and marketers can edit content." In August, we [migrated the Cloudflare Blog to EmDash](https://blog.cloudflare.com/cloudflare-blog-uses-emdash/) as part of our “Customer Zero” approach. Working alongside our content engineering team provided actionable insights around localization, media management, the admin editor experience, and scaling. Comfortably handling the traffic load for the Cloudflare Blog meant being ready for millions of pageviews per week, spikes up to 5,000 requests per second (RPS) of legitimate traffic, or sporadic DDoS attacks. The optional [KV object caching](https://docs.emdashcms.com/deployment/object-cache/), [Hyperdrive database adapter](https://docs.emdashcms.com/deployment/database/#hyperdrive), and [Workers Cache compatibility](https://docs.emdashcms.com/deployment/cloudflare/#workers-cache) were all features spawned from our migration project that are widely available to all customers now. A CMS sits at the heart of an organization’s web presence. It is trusted with its most important data, and is often used by dozens of editors every day. They need to be able to know they can rely on it, without fear of vendor lock-in or changing business priorities. For that reason, EmDash is [completely free and open source](https://github.com/emdash-cms/emdash), using the flexible and permissive MIT license. EmDash 1.0 could not exist without its open-source development community. At the time of writing, more than 175 people have contributed to the project, across more than 1,800 commits. The rise of agentic coding tools has presented both challenges and opportunities to open-source projects, and we have deliberately built a project where the agents can help the human developers, rather than being overwhelmed by them. We are particularly grateful to the core group of the most dedicated contributors, who between them have shipped hundreds of improvements to all areas of the project. They include [@swissky](https://github.com/swissky), [@danielmlr](https://github.com/danielmlr), [@MA2153](https://github.com/MA2153), [@marcusbellamyshaw-cell](https://github.com/marcusbellamyshaw-cell), and dozens of others. Contributors have translated EmDash into 25 languages, from Arabic to Ukrainian. Particular recognition is due to Noah Pham, who joined Cloudflare as an intern and became EmDash’s second maintainer alongside Matt. Noah contributed more than 80 changes, taking ownership of major parts of the media library, content editor, and admin interface. We have said that [interns ship meaningful work at Cloudflare](https://blog.cloudflare.com/cloudflare-1111-intern-program/); Noah’s work is now at the heart of EmDash 1.0. There is plenty more to build, and contributing does not have to mean writing code. If you want to help with code, translations, documentation, testing, design, issue triage, answering questions, or just welcoming new users, [join over 800 others in the EmDash community on Discord](https://discord.gg/YY9vBaQRYt). A content management system thrives when the ecosystem around it is healthy and supported. We’ve been excited by the theme companies, plugin shops, agencies, and platforms who are creating new services and products using EmDash. “Empress's delightful multisite experience would not be possible without the foundations EmDash has laid: sites that are fast, safe to extend, and easy for people and agents to read and act on,” says Raj Makker, Empress’s founder. “EmDash unlocks powerful control over a website, and Empress builds on it to give you complete control over as many sites as you want. We're excited to be part of this journey.” With EmDash 1.0, developers can publish sandboxed plugins and site owners can discover, inspect, and install them from the [EmDash plugin registry](https://plugins.emdashcms.com/). Traditional plugin registries usually combine three roles: they provide the publisher’s account, hold the authoritative package record, and operate the catalog where users discover it. That is convenient, but it also makes one company the gatekeeper for both identity and distribution. If an account is suspended, a listing is removed, the rules change, or the service shuts down, publishers cannot take the same identity and release history somewhere else. EmDash separates the plugin from the catalog. Publishers retain control of their packages and release history, while EmDash provides a convenient place for people to find and install them. Other services can index the same publications, build their own catalogs, and apply their own policies without requiring developers to start again. The EmDash catalog applies default content moderation to the names, descriptions, links, and images it displays. Moderation can hide harmful or inappropriate material from this catalog, but it does not rewrite a release, take ownership of the plugin, or erase the underlying publication. The registry is built on [AT Protocol](https://atproto.com/) (atproto), a decentralized network protocol that powers Bluesky and a growing ecosystem of applications. Plugin authors publish with an [Atmosphere](https://atmosphereaccount.com/) account, the portable identity also used across these applications. The package and release records are signed by the publisher and stored in the publisher's own account. EmDash hosts the default registry services so publishers and site owners can use them without running infrastructure themselves. We hope others will build new catalogs, moderation systems, publishing tools, and other services we have not imagined yet. To help this, we have released all of our services as open-source software, including [the aggregator](https://github.com/emdash-cms/emdash/tree/main/apps/aggregator) that powers the plugin registry, [the labeler service](https://github.com/emdash-cms/emdash/tree/main/apps/labeler) that uses Workers AI to moderate package descriptions, and an [Astro live content loader](https://github.com/emdash-cms/emdash/tree/main/packages/registry-loader) to make it easy to include plugin listings in any Astro site. We are excited to see what the community will build with them! There’s no centralized controller that can take over plugins or remove them on a whim. We believe the security of plugins and the registry should be baked into code, rather than trusting any central authority or code of conduct. Decentralized publishing does not mean accepting unverified code. Atproto repositories use signed Merkle Search Trees, so an inclusion proof connects the exact release record to a signed commit from the publisher’s account. EmDash can therefore verify the record independently instead of trusting the catalog’s copy. It then checks the plugin’s checksum, package name, version, requested access, and any required build provenance, and confirms that the downloaded bundle matches the signed record. The registry supports free plugins today, and we aim to add support for paid plugins in future, with the same decentralized model as now. We are watching the [Atproto Spaces Alpha](https://atproto.com/blog/atproto-spaces-alpha) with interest. Anybody should be able to run a secure, paid plugin marketplace. We want publishers to be able to make money from their software. For now, plugin authors can publish useful software without asking permission from EmDash — and site owners can understand exactly what that software is allowed to do before they run it. Plugins are the core of a CMS ecosystem. They save site developers from rebuilding the same integrations and workflows, while giving experts a way to share their best practices — and potentially build a software business. Agents make that reuse even more valuable. An agent can build a one-off integration, but it still has to understand the problem, generate and test the code, and maintain it afterward. A plugin captures that work. Another agent can install and configure a proven solution instead of starting again from scratch. That convenience creates a serious security concern: plugins are code you did not write, operating alongside valuable content and customer data. With WordPress, plugins run inside the same PHP process as the rest of the application, with direct access to its database, filesystem, and network. A contact-form plugin can technically read unpublished posts, modify another plugin, or send data anywhere. Site owners must trust that it will not — and that a future update will not change its behavior. Sandboxed EmDash plugins use a different model. Each plugin runs in an isolated runtime with access to its own private storage, but not to the site’s content, media, users, secrets, environment, filesystem, or network. It gains additional abilities only when they are declared by the plugin and approved by the site administrator. Installing a sandboxed plugin therefore feels more like installing a mobile app than a traditional CMS plugin. EmDash shows what the plugin wants to do before it runs, and the runtime limits it to those approved abilities. That lets plugins perform useful work without receiving unrelated access: | **A plugin could…** | **It might need to…** | **It still cannot…** | | Index published articles for search | Read content and contact the search service | Edit articles or contact other hosts | | Optimize uploaded images | Read and manage media | Read user content | | Send publishing notifications | Observe publishing and send email | Change the content being published | | Provide configurable webhooks | Read selected events and contact public destinations | Reach private networks or other plugins’ storage | The important part is that these abilities are independent. Giving a plugin access to media does not also expose users or unpublished content. Allowing it to contact one service does not open the rest of the network. These boundaries are enforced by the runtime, not left to the plugin author’s good intentions. This isolation is not limited to Cloudflare deployments. On Cloudflare, EmDash runs each plugin as a [Dynamic Worker](https://developers.cloudflare.com/dynamic-workers/) through the Worker Loader. On Node.js, EmDash starts [workerd](https://github.com/cloudflare/workerd) — the open-source Workers runtime — as a separate process and runs each plugin as an isolated service inside it. Plugins use the same manifests and capability-gated APIs on either platform. See the [plugin sandbox documentation](https://docs.emdashcms.com/deployment/plugin-sandbox/) for setup and runtime differences. EmDash can power an individual Astro site, but it is also designed for companies building website creation and hosting products. [Workers for Platforms](https://developers.cloudflare.com/cloudflare-for-platforms/workers-for-platforms/) lets those companies run each customer’s site as a Worker on Cloudflare’s global network. They do not need to provision a server for every site or build the surrounding networking and deployment infrastructure themselves. That leaves them free to focus on the experience their customers use to create and manage a website. EmDash provides the content layer for that experience. A platform can use the admin interface directly, build its own interface on the API and CLI, or put an agent in front of the built-in MCP server. A bakery owner could update opening hours by asking for the change in plain language; the platform’s agent would handle reading, updating, and saving the content. The sandboxed plugin model also gives platforms a safer way to offer extensions across many customer sites. Plugins receive only approved access to content, media, users, email, or external services, rather than running with unrestricted access to the whole application. Platforms can run their own plugin marketplaces with access to the full registry — or curate a selection of pre-approved plugins. We are always looking for additional hosting partners that want to join us in developing new agent-oriented CMS experiences. [Reach out to us](mailto:emdash@cloudflare.com) if you’d like to learn more about reinventing with EmDash. We are also releasing and open-sourcing an alpha of EmDash Build, an AI site builder that hosting providers, website builders, and platforms can run themselves and integrate with their own systems. Try the demo today at [build.emdashcms.com](http://build.emdashcms.com), or [explore the code](https://github.com/emdash-cms/emdash-build). If you’re building a site today, for yourself or for a client, you won’t start in an IDE. You’re more likely going to start with a chat box, and describe to an agent what you want. But once you have something, you could find that changing simple things requires you to go back to that prompt box, and either roll the dice on the result, or burn credits for a one-line change. EmDash Build creates an EmDash site instead, which brings the full stack: server-rendered Astro pages, a database, media storage, and an admin interface. The agent designs a content model from the brief, fills it in through EmDash's MCP server, and writes the pages that display it. After that, you or your customer can edit text right on the page, schedule posts, or let an agent do it for you. In EmDash Build, each project gets its own Cloudflare Sandbox container, where the agent, built on the Agents SDK, verifies its own work. Artifacts tracks every change as a git commit. When the site is published, the content moves into a production EmDash site, and deploys to the host's Workers for Platforms namespace. With the release of EmDash 1.0, now is a great time to migrate your company’s marketing site or have an agent spin up that side project you’ve been talking about. [Try out the EmDash playground site here.](https://try.emdashcms.com/) To create a new EmDash site locally, via the CLI, run: Or you can do the same via the Cloudflare dashboard below: If you’re ready to develop an EmDash plugin, [our documentation has a step-by-step guide](https://docs.emdashcms.com/plugins/creating-plugins/your-first-plugin/) for creating and publishing a plugin to the registry. We also welcome you to join our growing community of contributors on [Discord](https://discord.gg/YY9vBaQRYt). You don’t have to be an engineer to get involved — we welcome translators, issue triage managers, user experience designers, marketers, and all others who are excited about the future of content management systems.