Skip to content

[AI Gateway] Use gateway token for Claude Code; add Bedrock and Vertex docs #31681

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
adriandlam wants to merge 2 commits into
base: production
Choose a base branch
from
+92 −8
Open

[AI Gateway] Use gateway token for Claude Code; add Bedrock and Vertex docs #31681

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
cbe6f1b
[AI Gateway] Use gateway token for Claude Code; add Bedrock and Vertex
adriandlam Jun 24, 2026
70ba683
[AI Gateway] Align Claude Code Anthropic flow with Unified Billing; f…
adriandlam Jun 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
100 changes: 92 additions & 8 deletions src/content/docs/ai-gateway/integrations/coding-agents/claude-code.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: Claude Code
description: Route Claude Code through AI Gateway using your own Anthropic API key.
description: Route Claude Code through AI Gateway using your Cloudflare gateway token.
pcx_content_type: configuration
sidebar:
order: 1
Expand All @@ -10,33 +10,35 @@ products:

import { Tabs, TabItem, Steps } from "~/components";

[Claude Code](https://docs.anthropic.com/en/docs/claude-code/overview) reads its endpoint and credentials from environment variables. This configuration sends requests to AI Gateway's [Anthropic endpoint](/ai-gateway/usage/providers/anthropic/) using your own Anthropic API key, passed directly in the `ANTHROPIC_API_KEY` environment variable. The Anthropic endpoint exposes the same `/v1/messages` API that Claude Code expects.
[Claude Code](https://docs.anthropic.com/en/docs/claude-code/overview) reads its endpoint and credentials from environment variables. This configuration sends requests to AI Gateway's [Anthropic endpoint](/ai-gateway/usage/providers/anthropic/), authenticated with your Cloudflare gateway token. The Anthropic endpoint exposes the same `/v1/messages` API that Claude Code expects. With [Unified Billing](/ai-gateway/features/unified-billing/), Cloudflare pays the provider and bills you, so you do not need an Anthropic API key.

## Prerequisites

Before you start, you need:

- An [authenticated gateway](/ai-gateway/configuration/authentication/) and its [gateway token](/ai-gateway/configuration/authentication/#setting-up-authenticated-gateway-using-the-dashboard). The gateway token must have `Run` permissions.
- Your Cloudflare account ID. To find it, refer to [Find your account and zone IDs](/fundamentals/account/find-account-and-zone-ids/).
- An Anthropic API key. To create one, go to [Account Settings](https://platform.claude.com/settings/keys) in the Claude Console. For more information, refer to [Anthropic's API overview](https://docs.anthropic.com/en/api/overview).
- Credentials for the provider you route to:
- **Anthropic**: [Unified Billing](/ai-gateway/features/unified-billing/) credits loaded on your Cloudflare account. No Anthropic API key is required.
- **Amazon Bedrock** or **Google Vertex AI**: your provider credentials stored in AI Gateway as a [provider key (BYOK)](/ai-gateway/configuration/bring-your-own-keys/).
- [Claude Code](https://docs.anthropic.com/en/docs/claude-code/setup) installed and updated to the latest version.

:::note
This configuration does not use [BYOK (Store Keys)](/ai-gateway/configuration/bring-your-own-keys/). The Anthropic API key comes from the `ANTHROPIC_API_KEY` environment variable, not from a key stored in AI Gateway. Anthropic bills you for model usage, and AI Gateway provides observability, caching, and rate limiting for the traffic. For details on where Claude Code reads credentials from, refer to [Anthropic's authentication documentation](https://docs.anthropic.com/en/docs/claude-code/iam#credential-management).
The `cf-aig-authorization` header is what authenticates your request to AI Gateway. For the Anthropic flow, `ANTHROPIC_API_KEY` is set to the same gateway token only because Claude Code requires the variable to be set — it is not an Anthropic API key. With [Unified Billing](/ai-gateway/features/unified-billing/), Cloudflare bills you for model usage, and AI Gateway provides observability, caching, and rate limiting for the traffic. For details on where Claude Code reads credentials from, refer to [Anthropic's authentication documentation](https://docs.anthropic.com/en/docs/claude-code/iam#credential-management).
:::

<Steps>

1. Set the base URL to your gateway's Anthropic endpoint, pass your Anthropic API key, and send your gateway token in the `cf-aig-authorization` header. The following commands set these as shell environment variables for the current session. To persist them, add them to your shell profile (for example, `~/.zshrc` or `~/.bashrc`) or to Claude Code's [`settings.json`](https://docs.anthropic.com/en/docs/claude-code/settings#settings-files) under the `env` key.
1. Set the base URL to your gateway's Anthropic endpoint and send your gateway token in the `cf-aig-authorization` header. Set `ANTHROPIC_API_KEY` to the same token, since Claude Code requires the variable to be set. The following commands set these as shell environment variables for the current session. To persist them, add them to your shell profile (for example, `~/.zshrc` or `~/.bashrc`) or to Claude Code's [`settings.json`](https://docs.anthropic.com/en/docs/claude-code/settings#settings-files) under the `env` key.

Replace `<ACCOUNT_ID>`, `<GATEWAY_ID>`, `<ANTHROPIC_API_KEY>`, and `<CF_AIG_TOKEN>` with your values.
Replace `<ACCOUNT_ID>`, `<GATEWAY_ID>`, and `<CF_AIG_TOKEN>` with your values.

<Tabs syncKey="os">
<TabItem label="macOS / Linux">

```bash
export ANTHROPIC_BASE_URL="https://gateway.ai.cloudflare.com/v1/<ACCOUNT_ID>/<GATEWAY_ID>/anthropic"
export ANTHROPIC_API_KEY="<ANTHROPIC_API_KEY>"
export ANTHROPIC_API_KEY="<CF_AIG_TOKEN>"
Comment thread
adriandlam marked this conversation as resolved.
export ANTHROPIC_CUSTOM_HEADERS="cf-aig-authorization: Bearer <CF_AIG_TOKEN>"
```

Expand All @@ -45,7 +47,7 @@ This configuration does not use [BYOK (Store Keys)](/ai-gateway/configuration/br

```powershell
$env:ANTHROPIC_BASE_URL = "https://gateway.ai.cloudflare.com/v1/<ACCOUNT_ID>/<GATEWAY_ID>/anthropic"
$env:ANTHROPIC_API_KEY = "<ANTHROPIC_API_KEY>"
$env:ANTHROPIC_API_KEY = "<CF_AIG_TOKEN>"
Comment thread
adriandlam marked this conversation as resolved.
$env:ANTHROPIC_CUSTOM_HEADERS = "cf-aig-authorization: Bearer <CF_AIG_TOKEN>"
```

Expand All @@ -60,4 +62,86 @@ This configuration does not use [BYOK (Store Keys)](/ai-gateway/configuration/br

</Steps>

## Use Amazon Bedrock

To run Claude models through [Amazon Bedrock](/ai-gateway/usage/providers/bedrock/) instead, point Claude Code at your gateway's Amazon Bedrock endpoint. AI Gateway authenticates to Bedrock with the AWS credentials you [store as a provider key](/ai-gateway/configuration/bring-your-own-keys/), so you can skip Claude Code's own AWS authentication.

<Steps>

1. Replace `<ACCOUNT_ID>`, `<GATEWAY_ID>`, `<AWS_REGION>` (for example, `us-east-1`), and `<CF_AIG_TOKEN>` with your values.

<Tabs syncKey="os">
<TabItem label="macOS / Linux">

```bash
export CLAUDE_CODE_USE_BEDROCK="1"
export ANTHROPIC_BEDROCK_BASE_URL="https://gateway.ai.cloudflare.com/v1/<ACCOUNT_ID>/<GATEWAY_ID>/aws-bedrock/bedrock-runtime/<AWS_REGION>/"
export CLAUDE_CODE_SKIP_BEDROCK_AUTH="1"
Comment thread
adriandlam marked this conversation as resolved.
export ANTHROPIC_CUSTOM_HEADERS="cf-aig-authorization: Bearer <CF_AIG_TOKEN>"
```

</TabItem>
<TabItem label="Windows (PowerShell)">

```powershell
$env:CLAUDE_CODE_USE_BEDROCK = "1"
$env:ANTHROPIC_BEDROCK_BASE_URL = "https://gateway.ai.cloudflare.com/v1/<ACCOUNT_ID>/<GATEWAY_ID>/aws-bedrock/bedrock-runtime/<AWS_REGION>/"
$env:CLAUDE_CODE_SKIP_BEDROCK_AUTH = "1"
Comment thread
adriandlam marked this conversation as resolved.
$env:ANTHROPIC_CUSTOM_HEADERS = "cf-aig-authorization: Bearer <CF_AIG_TOKEN>"
```

</TabItem>
</Tabs>

2. Start Claude Code and send a prompt. Requests now route through AI Gateway to Amazon Bedrock.

```bash
claude
```

</Steps>

## Use Google Vertex AI

To run Claude models through [Google Vertex AI](/ai-gateway/usage/providers/vertex/) instead, point Claude Code at your gateway's Google Vertex AI endpoint. AI Gateway authenticates to Vertex AI with the Google Cloud credentials you [store as a provider key](/ai-gateway/configuration/bring-your-own-keys/), so you can skip Claude Code's own Vertex authentication.

<Steps>

1. Replace `<ACCOUNT_ID>`, `<GATEWAY_ID>`, `<GCP_PROJECT_ID>`, `<GCP_REGION>` (for example, `us-east5`), and `<CF_AIG_TOKEN>` with your values.

<Tabs syncKey="os">
<TabItem label="macOS / Linux">

```bash
export CLAUDE_CODE_USE_VERTEX="1"
export ANTHROPIC_VERTEX_BASE_URL="https://gateway.ai.cloudflare.com/v1/<ACCOUNT_ID>/<GATEWAY_ID>/google-vertex-ai/v1"
export ANTHROPIC_VERTEX_PROJECT_ID="<GCP_PROJECT_ID>"
export CLOUD_ML_REGION="<GCP_REGION>"
export CLAUDE_CODE_SKIP_VERTEX_AUTH="1"
export ANTHROPIC_CUSTOM_HEADERS="cf-aig-authorization: Bearer <CF_AIG_TOKEN>"
```

</TabItem>
<TabItem label="Windows (PowerShell)">

```powershell
$env:CLAUDE_CODE_USE_VERTEX = "1"
$env:ANTHROPIC_VERTEX_BASE_URL = "https://gateway.ai.cloudflare.com/v1/<ACCOUNT_ID>/<GATEWAY_ID>/google-vertex-ai/v1"
$env:ANTHROPIC_VERTEX_PROJECT_ID = "<GCP_PROJECT_ID>"
$env:CLOUD_ML_REGION = "<GCP_REGION>"
$env:CLAUDE_CODE_SKIP_VERTEX_AUTH = "1"
$env:ANTHROPIC_CUSTOM_HEADERS = "cf-aig-authorization: Bearer <CF_AIG_TOKEN>"
```

</TabItem>
</Tabs>

2. Start Claude Code and send a prompt. Requests now route through AI Gateway to Google Vertex AI.

```bash
claude
```

</Steps>

To confirm traffic reaches AI Gateway, refer to [Verify it works](/ai-gateway/integrations/coding-agents/#verify-it-works).
Loading