- New AI Gateways require authentication by default and cannot be disabled via dashboard or API.
- Creating a gateway via API sets authentication on; setting it to false or turning it off later returns HTTP 400, while existing unauthenticated gateways remain unchanged.
- Enable authentication by providing a valid Cloudflare API token; Workers bindings stay pre‑authenticated (see docs).