AI Gateway - New AI Gateways require authentication
Cloudflare now enforces authentication by default on all new AI Gateways, preventing unauthorized requests and disallowing disabling it once enabled.
原始内容为英文；当前页面提供中文导航与来源说明，具体事实请以原文为准。
为什么值得关注
Cloudflare has updated AI Gateway to require authentication by default on all newly created gateways. Key changes include: - New Gateways: Authentication is enabled by default. Setting authentication: false on creation API calls returns an HTTP 400 error. - Immutability: Once authentication is turned on for a gateway, it cannot be disabled through either the dashboard or the API (subsequent attempts to turn it off return an HTTP 400 error). - Existing Gateways: Gateways previously configured without authentication can continue operating as-is. They can be updated to enable authentication via settings or by sending { "authentication": true } . - Client Requirements: Before enabling authentication, external HTTP clients must be updated to pass a valid Cloudflare API token. Requests sent via Cloudflare Workers bindings remain pre-authenticated.
可执行摘要
Cloudflare AI Gateway now enforces authentication on creation; attempting to disable it via API returns HTTP 400. Existing gateways can remain unauthenticated, but once enabled, authentication cannot be turned off. Clients must send a valid Cloudflare API token, while Workers bindings remain pre-authenticated.
- Agent 实用度
- 96/100
- 可信度
- 90%
- 机器格式
- JSON + Markdown
开发者应核对什么
- Update deployment and automation scripts to stop passing authentication: false during gateway creation.
- Configure HTTP clients sending requests to new AI Gateways to include a valid Cloudflare API token in their authorization headers.
- Verify that existing unauthenticated gateways have clients properly configured with API tokens prior to enabling authentication, as the change cannot be reverted.