Cloudflare AI Gateway v2026-11-03：新建网关强制启用认证且不可关闭
AI Gateway - New AI Gateways require authentication
涉及核心基础设施的安全策略收紧，新建网关强制认证且不可逆，直接影响依赖该服务的开发者架构与调用方式，请务必在接入新网关前检查并配置好 API Token。
New AI Gateways now require authentication to prevent unauthorized requests. Once authentication is on, you cannot turn it off through the dashboard or API.
新的 AI 网关现在需要身份验证，以防止未经授权的请求。启用身份验证后，您无法通过仪表板或 API 将其关闭。
When you create a new AI Gateway through the API, authentication is on by default. You can leave out the authentication field or set it to true. If you set it to false, the API returns HTTP 400.
当通过 API 创建新的 AI 网关时，默认情况下身份验证处于开启状态。您可以省略 authentication 字段或将其设置为 true。如果将其设置为 false，API 将返回 HTTP 400。
When you update an existing gateway, leaving out authentication keeps its current setting. If you try to turn off authentication after it is on, the API returns HTTP 400.
更新现有网关时，省略 authentication 字段会保留其当前设置。如果在身份验证已开启的情况下尝试将其关闭，API 将返回 HTTP 400。
Existing gateways with authentication turned off can continue without it. You can turn it on in your gateway settings or include authentication: true in a gateway update request:
已关闭身份验证的现有网关可以继续在不启用身份验证的情况下运行。您可以在网关设置中开启它，或在网关更新请求中包含 authentication: true：
{
"authentication": true
}Before turning authentication on, configure HTTP clients to send a valid Cloudflare API token. Requests through Workers bindings remain pre-authenticated.
在开启身份验证之前，请配置 HTTP 客户端以发送有效的 Cloudflare API 令牌。通过 Workers 绑定发出的请求仍保持预认证状态。
For setup instructions and supported authorization headers, refer to AI Gateway authentication.
有关设置说明和支持的身份验证标头，请参阅 AI 网关身份验证。
更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力