Cloudflare Serverless Registry
Cloudflare Serverless Registry is a container registry implementation that runs in Cloudflare Workers and uses R2 for storage.
What Cloudflare Serverless Registry is
Cloudflare Serverless Registry is a container registry implementation that runs in Cloudflare Workers and uses R2 for storage. It supports workflows for pushing and pulling container images, including Docker login, push and pull. Authentication options include username and password, as well as public-key JWT. If an image is not in the R2 bucket, the registry can retrieve it from another registry and copy it into R2 for later pulls; this fallback supports Basic and Bearer authentication. Deployment instructions configure a Cloudflare Worker and an R2 bucket using Wrangler. The README directs users to keep registry passwords and tokens in Wrangler secrets rather than in the Wrangler configuration file. Docker pushes are limited to images whose layers are at most 500MB. JWT tokens do not have per-account or per-repository scoping, so a verified token grants its capabilities across the whole registry. The project is free and licensed under Apache License 2.0. R2 includes monthly allowances of 10 GB-month of Standard storage, 1 million Class A requests and 10 million Class B requests at no charge; usage-based charges may apply beyond those allowances.
Good
- Supports Docker login, push and pull workflows.
- Can copy missing images from another registry.
- Offers username/password and public-key JWT authentication.
- Licensed under Apache License 2.0.
Watch out
- Docker image layers are limited to 500MB.
- Verified JWT capabilities apply across the whole registry.
- R2 usage may incur charges beyond its free allowance.
Who it suits
This project may suit developers who want a container registry implementation using Cloudflare Workers and R2, and are comfortable deploying it with Wrangler. Teams should consider its image-layer limit and registry-wide JWT scope.
Verdict
Cloudflare Serverless Registry supports container image storage and retrieval workflows on Workers and R2, including fallback pulls from another registry. Its layer-size limit, registry-wide JWT scope and possible R2 usage charges are key considerations.
Plans and prices
From Cloudflare Serverless Registry's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Cloudflare R2 usage-based charges | — | R2 Standard storage: $0.015 / GB-month · Class A Operations: $4.50 / million requests · Class B Operations: $0.36 / million requests · 10 GB-month, 1 million Class A requests, and 10 million Class B requests free each month · Monthly based on storage and operations; the registry itself has no separate price listed. |
The facts
Each one read from Cloudflare Serverless Registry's own pages, with the date it was checked.
What it does
- Authentication
- It supports username/password and public-key JWT authentication.checked 4 Oct 2026
- Credential handling
- The README directs users to store registry passwords and tokens as Wrangler secrets rather than in the Wrangler configuration file.checked 4 Oct 2026
- Dependency support
- The README says pnpm is the only supported package manager, though other package managers may work.checked 4 Oct 2026
- Deployment
- The deployment instructions configure a Cloudflare Worker and an R2 bucket using Wrangler.checked 4 Oct 2026
- Docker
- The README shows using Docker login, push, and pull with the registry.checked 4 Oct 2026
- Fallback authentication
- Pull fallback supports Basic and Bearer authentication.checked 4 Oct 2026
- JWT scope
- The README says JWT tokens have no per-account or per-repository scoping, and a verified token grants its capabilities across the whole registry.checked 4 Oct 2026
- License
- The repository is licensed under the Apache License 2.0.checked 4 Oct 2026
- Purpose
- The project provides a container registry implementation in Cloudflare Workers backed by R2.checked 4 Oct 2026
- Push and pull
- It supports container image pushing and pulling workflows.checked 4 Oct 2026
- Push size limit
- Docker pushes are limited to images whose layers are at most 500MB, with the README referring to Workers plan request body limits.checked 4 Oct 2026
- Registry fallback
- It can fetch images missing from its R2 bucket from another registry and copy them into R2 for later pulls.checked 4 Oct 2026
- Security reporting
- The repository security policy directs vulnerability reports to Cloudflare's disclosure program or [email protected].checked 4 Oct 2026
The company
- Founded
- 2009checked 28 Sep 2026
- Headquarters
- San Francisco, CAchecked 28 Sep 2026
Money
- Free R2 allowance
- Cloudflare R2 includes 10 GB-month of Standard storage, 1 million Class A requests, and 10 million Class B requests each month at no charge.checked 4 Oct 2026
Alternatives to Cloudflare Serverless Registry
- 1
JFrog Container Registry
Free planWebAPILinuxSelf-hosted7.6Free plan - 2
Inedo ProGet
Free planWebAPILinuxSelf-hosted7.4From $2,395 a year - 3
Alibaba Cloud Container Registry
Free planWebAPILinuxWindows7.1Free plan - 4
Oracle Cloud Infrastructure Container Registry
Free planWebAPILinux7.0Free plan - 5
Samsung Cloud Platform Container Registry
AndroidiOSWebAPI7.0 - 6
Chainguard Registry
Free planWebLinuxSelf-hosted6.8Free plan