Skip to content
Cloudflare Docs

Authentication

Using an Authenticated Gateway in AI Gateway adds security by requiring a valid authorization token for each request. This feature is especially useful when storing logs, as it prevents unauthorized access and protects against invalid requests that can inflate log storage usage and make it harder to find the data you need. With Authenticated Gateway enabled, only requests with the correct token are processed.

Setting up Authenticated Gateway using the Dashboard

  1. Go to the Settings for the specific gateway you want to enable authentication for.
  2. Select Create authentication token to generate a custom token with the required Run permissions. Be sure to securely save this token, as it will not be displayed again.
  3. Include the cf-aig-authorization header with your API token in each request for this gateway.
  4. Return to the settings page and toggle on Authenticated Gateway.

Example requests with OpenAI

Terminal window
curl https://gateway.ai.cloudflare.com/v1/{account_id}/{gateway_id}/openai/chat/completions \
  --header 'cf-aig-authorization: Bearer {CF_AIG_TOKEN}' \
  --header 'Authorization: Bearer OPENAI_TOKEN' \
  --header 'Content-Type: application/json' \
  --data '{"model": "gpt-3.5-turbo", "messages": [{"role": "user", "content": "What is Cloudflare?"}]}'

Using the OpenAI SDK:

import OpenAI from "openai";


const openai = new OpenAI({
  apiKey: process.env.OPENAI_API_KEY,
  baseURL: "https://gateway.ai.cloudflare.com/v1/account-id/gateway/openai",
  defaultHeaders: {
    "cf-aig-token": `Bearer {token}`,
  },
});

Example requests with the Vercel AI SDK

import { createOpenAI } from "@ai-sdk/openai";


const openai = createOpenAI({
  baseURL: "https://gateway.ai.cloudflare.com/v1/account-id/gateway/openai",
  headers: {
    "cf-aig-token": `Bearer {token}`,
  },
});

Expected behavior

The following table outlines gateway behavior based on the authentication settings and header status:

Authentication SettingHeader InfoGateway StateResponse
OnHeader presentAuthenticated gatewayRequest succeeds
OnNo headerErrorRequest fails due to missing authorization
OffHeader presentUnauthenticated gatewayRequest succeeds
OffNo headerUnauthenticated gatewayRequest succeeds
Cloudflare DashboardDiscordCommunityLearning CenterSupport Portal
Cookie Settings