ST-2026-159 · Authentication & identity
Cloudflare AI Gateway adds Access-backed identity controls
Cloudflare AI Gateway can be placed behind Access on a custom domain and use authenticated Access identity for policies, metadata, logs, routing and spend controls.
CloudflareAI GatewayAccessauthenticationidentity
Previous state
AI Gateway did not expose the documented Access-protected custom-domain identity integration.
Current state
Access policies can protect a gateway endpoint and verified Access user identity is available as cf.user_id for gateway controls.
Affected users
Who needs to care
AI Gateway operators who need identity-aware endpoint access, logging, routing or spend policy.
Required response
What to do
Configure an Access-protected custom domain when identity-aware controls are required and validate policy scope.
Evidence boundary
What the source does not prove
The integration is opt-in through Access and a protected custom domain; it is not a new default for every gateway.
Lifecycle history
Dated event sequence
- Identity controls released
Cloudflare documented Access integration for AI Gateway.
Evidence ledger
First-party sources
- 01Cloudflare Developers — Identity-aware controls are now available in AI Gateway
Official Cloudflare changelog · 2026-08-05
Open official source ↗