1# Configuration & Setup
2 
3## Creating a Gateway
4 
5### Dashboard
6AI > AI Gateway > Create Gateway > Configure (auth, caching, rate limiting, logging)
7 
8### API
9```bash
10curl -X POST https://api.cloudflare.com/client/v4/accounts/{account_id}/ai-gateway/gateways \
11  -H "Authorization: Bearer $CF_API_TOKEN" -H "Content-Type: application/json" \
12  -d '{"id":"my-gateway","cache_ttl":3600,"rate_limiting_interval":60,"rate_limiting_limit":100,"collect_logs":true}'
13```
14 
15**Naming:** lowercase alphanumeric + hyphens (e.g., `prod-api`, `dev-chat`)
16 
17## Wrangler Integration
18 
19```toml
20[ai]
21binding = "AI"
22 
23[[ai.gateway]]
24id = "my-gateway"
25```
26 
27```bash
28wrangler secret put CF_API_TOKEN
29wrangler secret put OPENAI_API_KEY  # If not using BYOK
30```
31 
32## Authentication
33 
34### Gateway Auth (protects gateway access)
35```typescript
36const client = new OpenAI({
37  baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
38  defaultHeaders: { 'cf-aig-authorization': `Bearer ${cfToken}` }
39});
40```
41 
42### Provider Auth Options
43 
44**1. Unified Billing (keyless)** - pay through Cloudflare, no provider key:
45```typescript
46const client = new OpenAI({
47  baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
48  defaultHeaders: { 'cf-aig-authorization': `Bearer ${cfToken}` }
49});
50```
51Supports: OpenAI, Anthropic, Google AI Studio
52 
53**2. BYOK** - store keys in dashboard (Provider Keys > Add), no key in code
54 
55**3. Request Headers** - pass provider key per request:
56```typescript
57const client = new OpenAI({
58  apiKey: process.env.OPENAI_API_KEY,
59  baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
60  defaultHeaders: { 'cf-aig-authorization': `Bearer ${cfToken}` }
61});
62```
63 
64## API Token Permissions
65 
66- **Gateway management:** AI Gateway - Read + Edit
67- **Gateway access:** AI Gateway - Read (minimum)
68 
69## Gateway Management API
70 
71```bash
72# List
73curl https://api.cloudflare.com/client/v4/accounts/{account_id}/ai-gateway/gateways \
74  -H "Authorization: Bearer $CF_API_TOKEN"
75 
76# Get
77curl .../gateways/{gateway_id}
78 
79# Update
80curl -X PUT .../gateways/{gateway_id} \
81  -d '{"cache_ttl":7200,"rate_limiting_limit":200}'
82 
83# Delete
84curl -X DELETE .../gateways/{gateway_id}
85```
86 
87## Getting IDs
88 
89- **Account ID:** Dashboard > Overview > Copy
90- **Gateway ID:** AI Gateway > Gateway name column
91 
92## Python Example
93 
94```python
95from openai import OpenAI
96import os
97 
98client = OpenAI(
99    api_key=os.environ.get("OPENAI_API_KEY"),
100    base_url=f"https://gateway.ai.cloudflare.com/v1/{os.environ['CF_ACCOUNT_ID']}/{os.environ['GATEWAY_ID']}/openai",
101    default_headers={"cf-aig-authorization": f"Bearer {os.environ['CF_API_TOKEN']}"}
102)
103```
104 
105## Best Practices
106 
1071. **Always authenticate gateways in production**
1082. **Use BYOK or unified billing** - secrets out of code
1093. **Environment-specific gateways** - separate dev/staging/prod
1104. **Set rate limits** - prevent runaway costs
1115. **Enable logging** - track usage, debug issues
112