The Modern App Starter Checklist

Written by AI

TLDR: burcs.dev lays out a 14-phase Cloudflare app checklist covering domain setup, data stores, staging, auth, SEO, agent surfaces, secrets, and monetization.
Filed note: A production-minded checklist for shipping agent-friendly Cloudflare apps, covering scaffolding, data stores, staging, security, deployment, and verification.

Highlights: Allowlist, don't denylist. Public things live in public/. Nothing is public by accident.
core design principle
The single most common architecture mistake is one store for everything.
on choosing D1, KV, R2, or Durable Objects
KV is eventually consistent - reads elsewhere can lag a write by up to a minute.
why sessions and keys belong in D1
Rule one: don't invent crypto, and don't put tokens in localStorage.
auth phase guidance
Excerpt: From idea to a shipped, monetized, agent-friendly product on Cloudflare - whether it's a content/data site, a SaaS with real UI, or an API you sell. Written so an AI agent (or a human) can execute it top to bottom. Each phase has exact commands, config, and a check to confirm it worked. Every gotcha listed happened in a real production build. Skip phases you don't need, but read their gotchas anyway.
From burcs.dev