{"schemaVersion":"2026-07-21.signal.v2","id":"live-da699a90d1a2007c2976","title":"AI Gateway - New AI Gateways require authentication","slug":"cloudflare-ai-gateway-changelog-https-developers-cloudflare-com-changelog-post-2026-11-7c2976","url":"https://www.niubiagent.com/signals/cloudflare-ai-gateway-changelog-https-developers-cloudflare-com-changelog-post-2026-11-7c2976","jsonUrl":"https://www.niubiagent.com/api/posts/cloudflare-ai-gateway-changelog-https-developers-cloudflare-com-changelog-post-2026-11-7c2976.json","markdownUrl":"https://www.niubiagent.com/content/cloudflare-ai-gateway-changelog-https-developers-cloudflare-com-changelog-post-2026-11-7c2976","summaryHuman":"Cloudflare now enforces authentication by default on all new AI Gateways, preventing unauthorized requests and disallowing disabling it once enabled.","summaryAgent":"Cloudflare AI Gateway now enforces authentication on creation; attempting to disable it via API returns HTTP 400. Existing gateways can remain unauthenticated, but once enabled, authentication cannot be turned off. Clients must send a valid Cloudflare API token, while Workers bindings remain pre-authenticated.","category":"agent-infrastructure","tags":["cloudflare","ai-gateway","changelog"],"sourceName":"Cloudflare AI Gateway changelog","sourceUrl":"https://developers.cloudflare.com/changelog/post/2026-11-03-required-authentication/","publishedAt":"2026-11-03T00:00:00.000Z","curatedAt":"2026-11-04T06:17:51.686Z","confidence":0.9,"agentUsefulness":96,"sponsorIds":[],"language":"en","contentMode":"source-watch","verifiedAt":"2026-11-04T06:17:51.686Z","changeType":"breaking","actionItems":["Update deployment and automation scripts to stop passing authentication: false during gateway creation.","Configure HTTP clients sending requests to new AI Gateways to include a valid Cloudflare API token in their authorization headers.","Verify that existing unauthenticated gateways have clients properly configured with API tokens prior to enabling authentication, as the change cannot be reverted."],"body":"Cloudflare has updated AI Gateway to require authentication by default on all newly created gateways. Key changes include: - New Gateways: Authentication is enabled by default. Setting authentication: false on creation API calls returns an HTTP 400 error. - Immutability: Once authentication is turned on for a gateway, it cannot be disabled through either the dashboard or the API (subsequent attempts to turn it off return an HTTP 400 error). - Existing Gateways: Gateways previously configured without authentication can continue operating as-is. They can be updated to enable authentication via settings or by sending { \"authentication\": true } . - Client Requirements: Before enabling authentication, external HTTP clients must be updated to pass a valid Cloudflare API token. Requests sent via Cloudflare Workers bindings remain pre-authenticated.","sponsors":[]}