thanks for reporting! we've fixed this bug

KKathy thanks for reporting! we've fixed this bug

�

Hello,

Now, Vertex AI accept location_id with "global" instead of specific regions like the us-central1... I can call with endpoint aiplatform.googleapis.com

But I can't call "global" via AI Gateway, it throws 404

D

dave•6/6/25, 5:08 PM

Could we have support for the new

https://*.openai.azure.com/openai/v1/*

https://*.openai.azure.com/openai/v1/*

https://*.openai.azure.com/openai/v1/*

https://*.openai.azure.com/openai/v1/* Azure OpenAI endpoint? I can't seem to get it working with AI Gateway; I'm guessing something is being mutated on the AI Gateway side incorrectly?

https://learn.microsoft.com/en-us/azure/ai-services/openai/reference-preview-latest

D

DrWayne•6/6/25, 5:18 PM

FYI, I was using the non-streaming websockets interface yesterday and the docs just say "Alternatively, we also support authentication via the sec-websocket-protocol header if you are using a browser WebSocket." without telling how. Fortunately, I found a snippet in a blog post about DO and websockets.

cf-aig-authorization.${AI_GATEWAY_TOKEN}

cf-aig-authorization.${AI_GATEWAY_TOKEN}

cf-aig-authorization.${AI_GATEWAY_TOKEN}

cf-aig-authorization.${AI_GATEWAY_TOKEN}

It would be nice if that was explicitly in the docs since it is non-obvious how to form that sec-websocket-protocol header to encapsulate the cf-aig-authorization header we'dve used in Node.js instead of the browser...

B

Bryan Chen•6/8/25, 9:34 AM

AI Gateway Universal Endpoint stops working for me. It seems like the auth header failed to be passed and always getting auth error from providers

�😈 Donkey 💫Hello, Now, Vertex AI accept location_id with "global" instead of specific regi...

O

Oblomki•6/10/25, 6:04 PM

Same problem. AI Gateway seems to replace 'global' with a region, leading to a 404 error.

O

Oli•6/13/25, 12:36 PM

Question for yall who are more experienced with ai gateway,

Were calling anthropic,openai,azure,grok,groq,deepseek:s sse streaming endpoints serverside, so essentially, its only called after any rate-limiting, auth, etc.

But ive been looking at the ai gateway to see if there would be any benefit to calling the providers trough ai gateway,
Would there be any benefit to calling those api:s trough ai gateway? if the calls are user-independant, and with rate-limiting essentially disabled?

How does the caching work?
Is it just simple like if the exact same prompt is sent twice it will be a cache hit? or does it work with variations of the same prompt etc?

Also, does it handle retries etc?

--
Question 2:
We serve all models from all providers over ws to client.
Is it possible with ai gateway, to instead of serverside > ai-gateway > aiprovider. Somehow do:
client > aiprovider > our-backend ?
Using a custom api?

D

dave•6/13/25, 8:02 PM

Would be nice if we could get token pricing for a bunch of the new models from Anthropic and OpenAI

M

Marino•6/14/25, 2:49 PM

Does the universal endpoint support tools?

Sspongebhav I didn’t fully understand your question. By tools do you mean MCPs? or if we can...

M

Marino•6/14/25, 5:36 PM

I mean tools as in function calling, I couldn't find anything in the docs.

MMarino Does the universal endpoint support tools?

U

U.Senthil Kumar | Contributor•6/15/25, 7:13 AM

Yes, the Universal Endpoint supports tools by allowing multi-provider payloads with specific configurations per message. It also handles retries and fallback logic, making tool use more flexible across providers.

UU.Senthil Kumar | Contributor Yes, the Universal Endpoint supports tools by allowing multi-provider payloads w...

M

Marino•6/15/25, 2:59 PM

Thank you.

B

Bryan Chen•6/17/25, 8:03 AM

I disabled gateway auth and that got it working

B

Bryan Chen•6/17/25, 8:03 AM

zero responses from CF

N

newqueue•6/17/25, 9:00 AM

# seems google-ai-studio streaming api not work, anybody know how to fix it?
curl "https://gateway.ai.cloudflare.com/v1/7{account_id}/{gateway_id}/google-ai-studio/v1beta/models/gemini-2.5-flash-preview-05-20:streamGenerateContent?alt=sse" \
           --header 'content-type: application/json' \
           --header 'x-goog-api-key: '(pass GEMINI_API_KEY) \
           --data '{
            "contents": [
                {
                  "role":"user",
                  "parts": [
                    {"text":"What is Cloudflare?"}
                  ]
                }
              ]
            }'

# seems google-ai-studio streaming api not work, anybody know how to fix it?
curl "https://gateway.ai.cloudflare.com/v1/7{account_id}/{gateway_id}/google-ai-studio/v1beta/models/gemini-2.5-flash-preview-05-20:streamGenerateContent?alt=sse" \
           --header 'content-type: application/json' \
           --header 'x-goog-api-key: '(pass GEMINI_API_KEY) \
           --data '{
            "contents": [
                {
                  "role":"user",
                  "parts": [
                    {"text":"What is Cloudflare?"}
                  ]
                }
              ]
            }'

# seems google-ai-studio streaming api not work, anybody know how to fix it?
curl "https://gateway.ai.cloudflare.com/v1/7{account_id}/{gateway_id}/google-ai-studio/v1beta/models/gemini-2.5-flash-preview-05-20:streamGenerateContent?alt=sse" \
           --header 'content-type: application/json' \
           --header 'x-goog-api-key: '(pass GEMINI_API_KEY) \
           --data '{
            "contents": [
                {
                  "role":"user",
                  "parts": [
                    {"text":"What is Cloudflare?"}
                  ]
                }
              ]
            }'

# seems google-ai-studio streaming api not work, anybody know how to fix it?
curl "https://gateway.ai.cloudflare.com/v1/7{account_id}/{gateway_id}/google-ai-studio/v1beta/models/gemini-2.5-flash-preview-05-20:streamGenerateContent?alt=sse" \
           --header 'content-type: application/json' \
           --header 'x-goog-api-key: '(pass GEMINI_API_KEY) \
           --data '{
            "contents": [
                {
                  "role":"user",
                  "parts": [
                    {"text":"What is Cloudflare?"}
                  ]
                }
              ]
            }'

Mmotin I just posted in the community forums about a regression about the universal end...

J

Jorel•6/23/25, 8:14 AM

I was working with this using the Cloudflare AI Gateway provider from Vercel's AI SDK, but could NOT get it to work.

Sounds like it's related, even tho i haven't inspected the actual resulting traffic. My workaround was to

Not use the built-in gateway provider, instead adding the gateway url manually

Sending the cloudflare AI Gateway authentication as

cf-aig-authorization

cf-aig-authorization

cf-aig-authorization

cf-aig-authorization header

createOpenAI({
baseURL: `https://gateway.ai.cloudflare.com/v1/${env.CLOUDFLARE_ACCOUNT_ID}/${customer.gatewayId}/openai`,
apiKey: env.OPENAI_API_KEY,
headers: {
 'cf-aig-authorization': env.CLOUDFLARE_API_KEY,
},
});

createOpenAI({
baseURL: `https://gateway.ai.cloudflare.com/v1/${env.CLOUDFLARE_ACCOUNT_ID}/${customer.gatewayId}/openai`,
apiKey: env.OPENAI_API_KEY,
headers: {
 'cf-aig-authorization': env.CLOUDFLARE_API_KEY,
},
});

createOpenAI({
baseURL: `https://gateway.ai.cloudflare.com/v1/${env.CLOUDFLARE_ACCOUNT_ID}/${customer.gatewayId}/openai`,
apiKey: env.OPENAI_API_KEY,
headers: {
 'cf-aig-authorization': env.CLOUDFLARE_API_KEY,
},
});

createOpenAI({
baseURL: `https://gateway.ai.cloudflare.com/v1/${env.CLOUDFLARE_ACCOUNT_ID}/${customer.gatewayId}/openai`,
apiKey: env.OPENAI_API_KEY,
headers: {
 'cf-aig-authorization': env.CLOUDFLARE_API_KEY,
},
});

A

AngusMa•6/23/25, 1:31 PM

I've heard that workers AI has OpenAI compatible endpoints, does it include

v1/models

v1/models

v1/models

v1/models endpoint or only contain

/v1/chat/completions

/v1/chat/completions

/v1/chat/completions

/v1/chat/completions and

/v1/embeddings

/v1/embeddings

/v1/embeddings

/v1/embeddings?

O

Oblomki•6/23/25, 5:38 PM

Does AI Gateway return any kind of info when using the Universal Endpoint to know which model was successfully used (if using multiple providers in the fallback request)?

OOblomki Does AI Gateway return any kind of info when using the Universal Endpoint to kno...

K

KathyOP•6/23/25, 10:30 PM

https://developers.cloudflare.com/ai-gateway/configuration/fallbacks/#response-headercf-aig-step

Cloudflare Docs

Fallbacks

Specify model or provider fallbacks with your Universal endpoint to handle request failures and ensure reliability.

D

dave•6/24/25, 4:35 PM

Anthropic Claude Sonnet 4 and Opus 4 pricing are still very wrong, they aren't taking into account cache related tokens at all.

T

Tait•6/24/25, 8:55 PM

I was trying to https://github.com/googleapis/js-genai with AI Gateway. Is that supported? My inital take after fighting with this for a while is that I should use the deprecated google library https://github.com/google-gemini/deprecated-generative-ai-js

Am I completely wrong? I hope so. I'm trying to use gemini to process short videos and I'd love to track my codst.

GitHub

GitHub - googleapis/js-genai: TypeScript/JavaScript SDK for Gemini ...

TypeScript/JavaScript SDK for Gemini and Vertex AI. - googleapis/js-genai

GitHub

GitHub - google-gemini/deprecated-generative-ai-js: This SDK is now...

This SDK is now deprecated, use the new unified Google GenAI SDK. - google-gemini/deprecated-generative-ai-js

P

piffie•6/25/25, 7:42 AM

Is there a better Frontend for the AI-gateway? where i can see maybe prompt versions or similar?

TTait I was trying to https://github.com/googleapis/js-genai with AI Gateway. Is that...

A

AngusMa•6/29/25, 3:22 AM

I think AI Gateway is based on REST API?

S

Shados•6/29/25, 5:17 AM

I'm using a gateway with a Worker AI binding (the "basic usage" in section 2 on https://developers.cloudflare.com/ai-gateway/integrations/worker-binding-methods/)

I don't get any error and my app works, but I don't see anything in the gateway's logs.

If I use the REST endpoint to my gateway to make the same request to the same model, then I see log entries. Is that a bug or am I doing something wrong?

If I use this.env.AI.gateway then gateway.run, then it works as I expected, but since the doc and the typescript type explicitely state the gateway feature should be supported directly, I found the behavior surprising.

S

Shados•6/29/25, 5:50 AM

Even then something seems off. Some features like input/output tokens and cost don't register when I go through the

gateway.run

gateway.run

gateway.run

gateway.run function inside workers.

So so far:

using a regular Worker AI binding with the gateway property: doesn't show up in logs at all
Getting the gateway by id from the binding and calling gateway.run: shows up in logs, no token/cost show up
Using REST api via curl: everything works as expected.

(it case it matters, im using the Worker AI models in this case)

Edit: Ok token/cost is not REST api vs gateway binding, its Streaming vs Non-Streaming.

So that only leaves the issue of: Why do I not get logs if I'm using the bindings without gateway.run? Is it because it only logs queries that go through the API and direct bindings bypass that? In which case what features do I actually get, since logs are kind of the big one?

A

ac•6/29/25, 7:12 PM

We are having issues where OpenAI requests are now getting blocked because they are originating from unsupported countries (via AI Gateway). This didn't start happening until this week for us, but it seems to be a new error as of the past few weeks (see https://community.cloudflare.com/t/cloudflare-worker-blocked-by-openai/804750

https://community.cloudflare.com/t/ai-gateway-routes-to-restricted-regions-causing-api-blocks/808571/6).

an anyone at Cloudflare comment on this?

Aac We are having issues where OpenAI requests are now getting blocked because they ...

H

harshil1712•6/30/25, 10:33 AM

forwarding this to the team.

Hharshil1712 forwarding this to the team.

A

ac•6/30/25, 10:37 AM

Thank you! This is a big issue for us.

J

jedi•6/30/25, 12:16 PM

hi guys

J

jedi•6/30/25, 12:16 PM

how can i apply temperature?

J

jedi•6/30/25, 12:16 PM

in the request via api?

V

Vk•7/1/25, 7:40 PM

Do you support custom domain for AI Gateway? Can we use AI gateway to invoke all the worker AI inference points? (Or are there exceptions)?

N

neil•7/3/25, 2:04 AM

hey! currently seeing issues (not sdk - appears to be cf's backend issue) with Universal Endpoint's Authorization header forwarding FOR ALL PROVIDERS

only for Authenticated Gateways. disabling Authenticated Gateway fixes the issue.

_Example__
Request:

curl https://gateway.ai.cloudflare.com/v1/[account_id]/[gateway-id] \
  --header 'Content-Type: application/json' \
  --header 'cf-aig-authorization: Bearer [cf-aig-token]' \
  --data '[
    {
      "provider": "openai",
      "endpoint": "chat/completions",
      "headers": {
        "Authorization": "Bearer [openai_api_key]",
      },
      "query": {
        "model": "gpt-4o-mini",
        "messages": [
          {
            "role": "user",
            "content": "What is Cloudflare?"
          }
        ]
      }
    }
  ]'

curl https://gateway.ai.cloudflare.com/v1/[account_id]/[gateway-id] \
  --header 'Content-Type: application/json' \
  --header 'cf-aig-authorization: Bearer [cf-aig-token]' \
  --data '[
    {
      "provider": "openai",
      "endpoint": "chat/completions",
      "headers": {
        "Authorization": "Bearer [openai_api_key]",
      },
      "query": {
        "model": "gpt-4o-mini",
        "messages": [
          {
            "role": "user",
            "content": "What is Cloudflare?"
          }
        ]
      }
    }
  ]'

curl https://gateway.ai.cloudflare.com/v1/[account_id]/[gateway-id] \
  --header 'Content-Type: application/json' \
  --header 'cf-aig-authorization: Bearer [cf-aig-token]' \
  --data '[
    {
      "provider": "openai",
      "endpoint": "chat/completions",
      "headers": {
        "Authorization": "Bearer [openai_api_key]",
      },
      "query": {
        "model": "gpt-4o-mini",
        "messages": [
          {
            "role": "user",
            "content": "What is Cloudflare?"
          }
        ]
      }
    }
  ]'

curl https://gateway.ai.cloudflare.com/v1/[account_id]/[gateway-id] \
  --header 'Content-Type: application/json' \
  --header 'cf-aig-authorization: Bearer [cf-aig-token]' \
  --data '[
    {
      "provider": "openai",
      "endpoint": "chat/completions",
      "headers": {
        "Authorization": "Bearer [openai_api_key]",
      },
      "query": {
        "model": "gpt-4o-mini",
        "messages": [
          {
            "role": "user",
            "content": "What is Cloudflare?"
          }
        ]
      }
    }
  ]'

Response:

{
    "error": {
        "message": "You didn't provide an API key. You need to provide your API key in an Authorization header using Bearer auth (i.e. Authorization: Bearer YOUR_KEY), or as the password field (with blank username) if you're accessing the API from your browser and are prompted for a username and password. You can obtain an API key from https://platform.openai.com/account/api-keys.",
        "type": "invalid_request_error",
        "param": null,
        "code": null
    }
}

{
    "error": {
        "message": "You didn't provide an API key. You need to provide your API key in an Authorization header using Bearer auth (i.e. Authorization: Bearer YOUR_KEY), or as the password field (with blank username) if you're accessing the API from your browser and are prompted for a username and password. You can obtain an API key from https://platform.openai.com/account/api-keys.",
        "type": "invalid_request_error",
        "param": null,
        "code": null
    }
}

{
    "error": {
        "message": "You didn't provide an API key. You need to provide your API key in an Authorization header using Bearer auth (i.e. Authorization: Bearer YOUR_KEY), or as the password field (with blank username) if you're accessing the API from your browser and are prompted for a username and password. You can obtain an API key from https://platform.openai.com/account/api-keys.",
        "type": "invalid_request_error",
        "param": null,
        "code": null
    }
}

{
    "error": {
        "message": "You didn't provide an API key. You need to provide your API key in an Authorization header using Bearer auth (i.e. Authorization: Bearer YOUR_KEY), or as the password field (with blank username) if you're accessing the API from your browser and are prompted for a username and password. You can obtain an API key from https://platform.openai.com/account/api-keys.",
        "type": "invalid_request_error",
        "param": null,
        "code": null
    }
}

Have tried sending api key with initial request headers, in the body like above, and both. Issue is not just scoped to OpenAI's api - have also tested Vertex AI and issue persists. Anthropic does not have this issue since their api key is supplied in the

x-api-key

x-api-key

x-api-key

x-api-key header.

A

ari•7/3/25, 2:14 AM

We've been seeing something similar. Universal endpoint + Authenticated Gateway. We have OpenAI as primary and Anthropic as secondary, and OpenAI consistently fails with this same error message and then Anthropic succeeds. On one hand, it's a win for the cross-vendor fallback model.

A

ari•7/3/25, 4:08 AM

In the process of trying to debug this, I came across conflicting documentation on where the

authorization

authorization

authorization

authorization should be stored. Is this out-of-date? https://developers.cloudflare.com/ai-gateway/universal/#:~:text=The%20payload%20is%20expecting%20an%20array%20of%20message%2C%20and%20each%20message%20is%20an%20object%20with%20the%20following%20parameters

N

neil•7/3/25, 5:11 AM

seems like it - the worker gateway binding also doesn't have types for this prop

N

neil•7/3/25, 5:12 AM

Screenshot_2025-07-02_at_10.12.23_PM.png

A

ari•7/3/25, 6:47 AM

I did find one call that worked that I wasn't expecting: moving the OpenAI-specific authorization up to the top level, next to the

cf-aig-authorization

cf-aig-authorization

cf-aig-authorization

cf-aig-authorization gateway-level setting. Perhaps this is header configuration hierarchy at work? https://developers.cloudflare.com/ai-gateway/universal/#header-configuration-hierarchy

Screenshot_2025-07-02_at_11.41.20_PM.png

N

neil•7/3/25, 9:05 AM

hm i just tried putting it in the top level header - both with and without it being in the request body

N

neil•7/3/25, 9:05 AM

didn't work for curl at least

N

neil•7/3/25, 9:06 AM

either way, authorization should def be a request level header for universal endpoint

V

Vk•7/3/25, 1:51 PM

Hello folks: Trying to understand AI Gateway better. With the openAI compatible endpoint, does it support all the models and integrations using compatible endpoint or are there specific ones"

N

neil•7/3/25, 8:21 PM

it’s basically a reverse proxy for rest endpoints (primarily nice for centralized logging). you can specifically request a url path with the endpoint body parameter for universal endpoint or just concat to the url path for provider specific ai gateway

N

neil•7/3/25, 8:22 PM

so for example you can request openai’s /chat/completions as well as /responses with { model: “gpt-4.1” | “gpt-4o” } in the request body

thanks for reporting! we've fixed this bug

Similar Threads

Similar Threads

Similar Threads