Hello, I started using AI Gateway and I'm randomly getting: "message": "403 Country, region, or ter

EEgor Hello, I started using AI Gateway and I'm randomly getting: "message": "403 Cou...

H

harry•9/2/25, 9:12 AM

Second this. I also tried to deploy Workers using smart placement but the issue persists.

G

gianluca.henze•9/2/25, 12:44 PM

Hi there,
I am running into weird issues where out of nowhere the latency of the Autorag spikes to up to 30 seconds. From the logs to me it seems, that it's not the finding process or the LLM, but something else. I would highly apreciate help, if I can fix this as this problem never used to happen or if this is a server side problem today. Thanks!

I

idham•9/2/25, 4:12 PM

Is it possible to use custom openai compatible API for provider? The provider we use is not available in the list

B

brylan•9/3/25, 12:48 PM

Is function calling possible on the new GPT oss?

K

Kepro•9/3/25, 2:16 PM

Hello, SRE team gave me access to our domains and they gave me access to
AI Gateway - Read
AI Gateway - Edit
but I'm still getting 403 "Authentication error" from the UI and also from CLI, any idea what we are missing? When they tried to give me access to workers that started working right away...

B

brylan•9/4/25, 12:04 AM

Gateway error: {"errors":[{"message":"AiError: AiError: 'NoneType' object has no attribute 'startswith' (d9c72023-0abe-41ce-982f-197dbd233576)","code":3030}],"success":false,"result":{},"messages":[]}

R

RU;5JI•9/5/25, 1:59 AM

https://developers.cloudflare.com/ai-gateway/configuration/bring-your-own-keys/
in Cloudflare AI Gateway's WebSocket implementation where BYOK (Bring Your Own Key) authentication doesn't work properly

https://github.com/jiangzhuo/cloudflare-ai-gateway-realtime-poc

Cloudflare Docs

BYOK (Store Keys)

Bring your own keys (BYOK) is a feature in Cloudflare AI Gateway that allows you to securely store your AI provider API keys directly in the Cloudflare dashboard. Instead of including API keys in every request to your AI models, you can configure them once in the dashboard, and reference them in your gateway configuration.

GitHub

GitHub - jiangzhuo/cloudflare-ai-gateway-realtime-poc

Contribute to jiangzhuo/cloudflare-ai-gateway-realtime-poc development by creating an account on GitHub.

RRU;5JI https://developers.cloudflare.com/ai-gateway/configuration/bring-your-own-keys/ ...

M

Mirza•9/5/25, 4:45 AM

Unauthorised 401 is coming for me, direct provider working but not through Gateway.....

Did anyone get this working ? Let me know what I might be doing wrong...

rn_image_picker_lib_temp_89382b74-c6c0-4e50-9552-116cbfb5e0ca.jpg

rn_image_picker_lib_temp_d0ac9692-37b0-46a7-bb97-17d9fa66f6c4.jpg

O

ozan•9/5/25, 1:48 PM

How can I use Vercel AI SDK with BYOK? In my createOpenAI call if I don't pass an apiKey parameter, I get an error about env.OPENAI_API_KEY missing. If I pass empty string, AI Gateway tries to use this as the API key and it it fails with "Incorrect API key provided"

S

SmallShen•9/5/25, 7:58 PM

Is this intended? streaming reqeusts input output does not get counted?
Even tho the data is available

Z

Zack•9/8/25, 8:45 PM

I've been really struggling to get the ai gateway to work, I can't seem to get an api token that has the correct permissions.

curl https://gateway.ai.cloudflare.com/v1/{redacted}/{redacted}/workers-ai/@cf/huggingface/distilbert-sst-2-int8 \
 --header 'Authorization: Bearer {redacted}' \
 --header 'Content-Type: application/json' \
 --data '{ "text": "Cloudflare docs are amazing!" }'

curl https://gateway.ai.cloudflare.com/v1/{redacted}/{redacted}/workers-ai/@cf/huggingface/distilbert-sst-2-int8 \
 --header 'Authorization: Bearer {redacted}' \
 --header 'Content-Type: application/json' \
 --data '{ "text": "Cloudflare docs are amazing!" }'

curl https://gateway.ai.cloudflare.com/v1/{redacted}/{redacted}/workers-ai/@cf/huggingface/distilbert-sst-2-int8 \
 --header 'Authorization: Bearer {redacted}' \
 --header 'Content-Type: application/json' \
 --data '{ "text": "Cloudflare docs are amazing!" }'

curl https://gateway.ai.cloudflare.com/v1/{redacted}/{redacted}/workers-ai/@cf/huggingface/distilbert-sst-2-int8 \
 --header 'Authorization: Bearer {redacted}' \
 --header 'Content-Type: application/json' \
 --data '{ "text": "Cloudflare docs are amazing!" }'

gives me an error

{"success":false,"result":[],"messages":[],"error":[{"code":2009,"message":"Unauthorized"}]}

{"success":false,"result":[],"messages":[],"error":[{"code":2009,"message":"Unauthorized"}]}

{"success":false,"result":[],"messages":[],"error":[{"code":2009,"message":"Unauthorized"}]}

{"success":false,"result":[],"messages":[],"error":[{"code":2009,"message":"Unauthorized"}]}

Y

yureckey•9/9/25, 4:50 AM

I'm trying to use guardrails in ai-gateway.
It's not quite working as expected. I'm running image generation with test NSFW prompt. In the ai-gateway log I see that llamaguard is passed (green shield icon) although it clearly states that it is not safe (I've set config to block on S12)
{
"response": {
"safe": false,
"categories": [
"S12"
]
}
}

Hharshil1712 forwarding this to the team.

C

cosbgn•9/9/25, 8:48 AM

Is there any update on that? It would be great if we could blacklist some regions like HK and Taiwan. I have some users in Japan getting router to these regions and blocked by openAI

C

Comrade Nalaxone•9/9/25, 10:53 PM

Why the hell do you all have like 20 localized pages of this blog and not a single english one? https://blog.cloudflare.com/pl-pl/fedramphigh-ai/

C

Comrade Nalaxone•9/9/25, 10:53 PM

That's the weirdest thing I've ever seen. Is AI doing this?

C

Comrade Nalaxone•9/9/25, 10:54 PM

@kian | DevDocs ???

CComrade Nalaxone Why the hell do you all have like 20 localized pages of this blog and not a sing...

I

Isaac McFadyen•9/9/25, 11:38 PM

That is because I believe the blog was pulled, so you were seeing a cached version that is no longer there.

IIsaac McFadyen That is because I believe the blog was pulled, so you were seeing a cached versi...

C

Comrade Nalaxone•9/9/25, 11:57 PM

Makes sense. Thanks for updating me. What's the status on FedRamp + Cloudflare AI?

C

Comrade Nalaxone•9/9/25, 11:57 PM

Is it still something that's happening?

D

dave•9/11/25, 2:45 AM

FYI there is a bug in cost calculation where it's set to zero if input tokens is zero

D

dave•9/11/25, 2:45 AM

Legit example from anthropic:

"usage": {
    "input_tokens": 0,
    "cache_creation_input_tokens": 575,
    "cache_read_input_tokens": 106910,
    "cache_creation": {
      "ephemeral_5m_input_tokens": 575,
      "ephemeral_1h_input_tokens": 0
    },
    "output_tokens": 957,
    "service_tier": "standard"
  }

"usage": {
    "input_tokens": 0,
    "cache_creation_input_tokens": 575,
    "cache_read_input_tokens": 106910,
    "cache_creation": {
      "ephemeral_5m_input_tokens": 575,
      "ephemeral_1h_input_tokens": 0
    },
    "output_tokens": 957,
    "service_tier": "standard"
  }

"usage": {
    "input_tokens": 0,
    "cache_creation_input_tokens": 575,
    "cache_read_input_tokens": 106910,
    "cache_creation": {
      "ephemeral_5m_input_tokens": 575,
      "ephemeral_1h_input_tokens": 0
    },
    "output_tokens": 957,
    "service_tier": "standard"
  }

"usage": {
    "input_tokens": 0,
    "cache_creation_input_tokens": 575,
    "cache_read_input_tokens": 106910,
    "cache_creation": {
      "ephemeral_5m_input_tokens": 575,
      "ephemeral_1h_input_tokens": 0
    },
    "output_tokens": 957,
    "service_tier": "standard"
  }

D

dave•9/11/25, 12:25 PM

It would be nice if the binding allowed use to provider endpoints instead of just the universial one, since otherwise we have to manually provide an auth token for AI Gateway.

https://developers.cloudflare.com/ai-gateway/configuration/authentication/#expected-behavior

Jjoe am I misunderstanding how metadata filtering is supposed to work? if I attach sa...

J

joe•9/11/25, 5:03 PM

just echoing this? it completely negates the point of being able to filter by metadata keys

D

dave•9/11/25, 6:39 PM

How do I force https://blog.cloudflare.com/ai-side-channel-attack-mitigated/ to be off?

S

sakty•9/11/25, 7:46 PM

what's the limit requests / day for this ai: https://developers.cloudflare.com/workers-ai/models/llama-3.2-11b-vision-instruct/

Cloudflare Docs

llama-3.2-11b-vision-instruct

The Llama 3.2-Vision instruction-tuned models are optimized for visual recognition, image reasoning, captioning, and answering general questions about an image.

S

sakty•9/11/25, 7:47 PM

for free user

SSmallShen Is this intended? streaming reqeusts input output does not get counted? Even th...

S

SmallShen•9/11/25, 11:20 PM

anyone have idea on this one?

S

SmallShen•9/12/25, 2:41 AM

Does ai gateway compat support Responses api?

T

Timo•9/12/25, 12:17 PM

Hi, has anyone experienced degraded accuracy when using gemini-2.5-pro through the AI gateway?

T

Timo•9/12/25, 12:18 PM

We've investigated and for some reason tokens are lost when going through the gateway vs calling the google api directly.

D

dave•9/16/25, 12:24 PM

AI Gateway is incorrectly considering a streaming

refusal

refusal

on the Anthropic API to be successful. https://docs.anthropic.com/en/docs/test-and-evaluate/strengthen-guardrails/handle-streaming-refusals#implementation-guide

Here's is a sample response:

{
  "id": "msg_01HCDu5LRGeP2o7s2xGmxyx8",
  "type": "message",
  "role": "assistant",
  "model": "claude-opus-4-1-20250805",
  "content": "",
  "stop_reason": null,
  "stop_sequence": null,
  "usage": {
    "input_tokens": 9,
    "cache_creation_input_tokens": 16203,
    "cache_read_input_tokens": 0,
    "cache_creation": {
      "ephemeral_5m_input_tokens": 16203,
      "ephemeral_1h_input_tokens": 0
    },
    "output_tokens": 0
  },
  "streamed_data": [
    {
      "nonce": "e8071956",
      "type": "message_start",
      "message": {
        "id": "msg_01HCDu5LRGeP2o7s2xGmxyx8",
        "type": "message",
        "role": "assistant",
        "model": "claude-opus-4-1-20250805",
        "content": [],
        "stop_reason": null,
        "stop_sequence": null,
        "usage": {
          "input_tokens": 9,
          "cache_creation_input_tokens": 16203,
          "cache_read_input_tokens": 0,
          "cache_creation": {
            "ephemeral_5m_input_tokens": 16203,
            "ephemeral_1h_input_tokens": 0
          },
          "output_tokens": 0
        }
      }
    },
    {
      "type": "message_delta",
      "delta": {
        "stop_reason": "refusal",
        "stop_sequence": null
      },
      "usage": {
        "input_tokens": 9,
        "cache_creation_input_tokens": 16203,
        "cache_read_input_tokens": 0,
        "output_tokens": 0
      }
    },
    {
      "nonce": "8aeda459",
      "type": "message_stop"
    }
  ]
}

{
  "id": "msg_01HCDu5LRGeP2o7s2xGmxyx8",
  "type": "message",
  "role": "assistant",
  "model": "claude-opus-4-1-20250805",
  "content": "",
  "stop_reason": null,
  "stop_sequence": null,
  "usage": {
    "input_tokens": 9,
    "cache_creation_input_tokens": 16203,
    "cache_read_input_tokens": 0,
    "cache_creation": {
      "ephemeral_5m_input_tokens": 16203,
      "ephemeral_1h_input_tokens": 0
    },
    "output_tokens": 0
  },
  "streamed_data": [
    {
      "nonce": "e8071956",
      "type": "message_start",
      "message": {
        "id": "msg_01HCDu5LRGeP2o7s2xGmxyx8",
        "type": "message",
        "role": "assistant",
        "model": "claude-opus-4-1-20250805",
        "content": [],
        "stop_reason": null,
        "stop_sequence": null,
        "usage": {
          "input_tokens": 9,
          "cache_creation_input_tokens": 16203,
          "cache_read_input_tokens": 0,
          "cache_creation": {
            "ephemeral_5m_input_tokens": 16203,
            "ephemeral_1h_input_tokens": 0
          },
          "output_tokens": 0
        }
      }
    },
    {
      "type": "message_delta",
      "delta": {
        "stop_reason": "refusal",
        "stop_sequence": null
      },
      "usage": {
        "input_tokens": 9,
        "cache_creation_input_tokens": 16203,
        "cache_read_input_tokens": 0,
        "output_tokens": 0
      }
    },
    {
      "nonce": "8aeda459",
      "type": "message_stop"
    }
  ]
}

{
  "id": "msg_01HCDu5LRGeP2o7s2xGmxyx8",
  "type": "message",
  "role": "assistant",
  "model": "claude-opus-4-1-20250805",
  "content": "",
  "stop_reason": null,
  "stop_sequence": null,
  "usage": {
    "input_tokens": 9,
    "cache_creation_input_tokens": 16203,
    "cache_read_input_tokens": 0,
    "cache_creation": {
      "ephemeral_5m_input_tokens": 16203,
      "ephemeral_1h_input_tokens": 0
    },
    "output_tokens": 0
  },
  "streamed_data": [
    {
      "nonce": "e8071956",
      "type": "message_start",
      "message": {
        "id": "msg_01HCDu5LRGeP2o7s2xGmxyx8",
        "type": "message",
        "role": "assistant",
        "model": "claude-opus-4-1-20250805",
        "content": [],
        "stop_reason": null,
        "stop_sequence": null,
        "usage": {
          "input_tokens": 9,
          "cache_creation_input_tokens": 16203,
          "cache_read_input_tokens": 0,
          "cache_creation": {
            "ephemeral_5m_input_tokens": 16203,
            "ephemeral_1h_input_tokens": 0
          },
          "output_tokens": 0
        }
      }
    },
    {
      "type": "message_delta",
      "delta": {
        "stop_reason": "refusal",
        "stop_sequence": null
      },
      "usage": {
        "input_tokens": 9,
        "cache_creation_input_tokens": 16203,
        "cache_read_input_tokens": 0,
        "output_tokens": 0
      }
    },
    {
      "nonce": "8aeda459",
      "type": "message_stop"
    }
  ]
}

{
  "id": "msg_01HCDu5LRGeP2o7s2xGmxyx8",
  "type": "message",
  "role": "assistant",
  "model": "claude-opus-4-1-20250805",
  "content": "",
  "stop_reason": null,
  "stop_sequence": null,
  "usage": {
    "input_tokens": 9,
    "cache_creation_input_tokens": 16203,
    "cache_read_input_tokens": 0,
    "cache_creation": {
      "ephemeral_5m_input_tokens": 16203,
      "ephemeral_1h_input_tokens": 0
    },
    "output_tokens": 0
  },
  "streamed_data": [
    {
      "nonce": "e8071956",
      "type": "message_start",
      "message": {
        "id": "msg_01HCDu5LRGeP2o7s2xGmxyx8",
        "type": "message",
        "role": "assistant",
        "model": "claude-opus-4-1-20250805",
        "content": [],
        "stop_reason": null,
        "stop_sequence": null,
        "usage": {
          "input_tokens": 9,
          "cache_creation_input_tokens": 16203,
          "cache_read_input_tokens": 0,
          "cache_creation": {
            "ephemeral_5m_input_tokens": 16203,
            "ephemeral_1h_input_tokens": 0
          },
          "output_tokens": 0
        }
      }
    },
    {
      "type": "message_delta",
      "delta": {
        "stop_reason": "refusal",
        "stop_sequence": null
      },
      "usage": {
        "input_tokens": 9,
        "cache_creation_input_tokens": 16203,
        "cache_read_input_tokens": 0,
        "output_tokens": 0
      }
    },
    {
      "nonce": "8aeda459",
      "type": "message_stop"
    }
  ]
}

Anthropic

Streaming refusals - Anthropic

D

dave•9/19/25, 5:18 AM

Is it not possible to delete dynamic routes?

.

.r20•9/19/25, 7:03 PM

ive been wondering the same thing too i cant find a way to do it

B

Beefp•9/19/25, 7:07 PM

Any plans to support OpenAIs responses API? (and offer compatibility with other models) - would be an absolute game changer compared to other AI gateways

.

.r20•9/19/25, 9:44 PM

it already supports responses api

.

.r20•9/19/25, 9:44 PM

just use the compat endpoint they give you for the base url and you can just do client.response like normal

.

.r20•9/19/25, 9:44 PM

no changes necessary

..r20 no changes necessary

S

SmallShen•9/20/25, 12:14 AM

I think the compat endpoint only support completions api?

.

.r20•9/20/25, 12:56 AM

ive used responses api with ai gateway before i just dont remember which endpoint i used tbh

K

karimulm•9/22/25, 5:18 AM

Dynamic routes menu missing pagination. No pagination controls available, making page 2+ data inaccessible.

Ddave Is it not possible to delete dynamic routes?

P

Puliczek•9/22/25, 10:24 AM

same problem

P

Puliczek•9/22/25, 10:25 AM

models/gemini-2.5-flash-lite is not found for API version v1, or is not supported for generateContent. Call ListModels to see the list of available models and their supported methods

models/gemini-2.5-flash-lite is not found for API version v1, or is not supported for generateContent. Call ListModels to see the list of available models and their supported methods

How to call gemini-2.5-flash-lite?

P

Puliczek•9/22/25, 11:05 AM

btw gemini-2.5-flash is working

P

Puliczek•9/22/25, 11:07 AM

but i need gemini-2.5-flash-lite

P

Puliczek•9/22/25, 11:17 AM

gemini-2.5-flash-lite model works when I use @google/generative-ai. So problem solved, i think now i can't use own cf-metadata.

D

dave•9/22/25, 8:56 PM

HTTP 525 issue with Anthropic models with AI Gateway it seems?

S

SmallShen•9/23/25, 5:24 AM

I think there is a performance issue for ai gateway ui dashboard, if the streaming response is large, clicking(expand) the log would lag for a sec.

S

SmallShen•9/23/25, 5:26 AM

There is also a ui bug in dynamic routes dashboard, the background color is incorrect when in dark theme.

.

.r20•9/25/25, 11:40 PM

whats the prompts tab for in ai gateway?

.

.r20•9/25/25, 11:40 PM

its not showing anything

Hello, I started using AI Gateway and I'm randomly getting: "message": "403 Country, region, or ter

Similar Threads

Similar Threads

Similar Threads