Is there a Cloudflare AI Gateway alternative for a team's Claude Code?

When your apps already run on Cloudflare. A Worker reaches the gateway through a binding, with no header to add. Dashboard analytics, caching and rate limiting are free on every plan.

It reaches Claude on Amazon Bedrock and Google Vertex with credentials stored in the gateway. Its Unified Billing puts OpenAI, Anthropic, Google and other providers on one Cloudflare bill, from prepaid credits, at the providers' own token prices.

It has setup pages for more coding tools than Selan covers, among them Cursor, Gemini CLI, GitHub Copilot CLI and Xcode. With a Zero Trust subscription that includes data loss prevention, the detection profiles you already use elsewhere in Cloudflare scan prompts too.

If no team runs coding tools through a gateway, you do not need Selan.

By a Cloudflare Access sign-in, or by metadata you attach yourself. A gateway token on its own names no person.

Cloudflare's docs say AI Gateway tokens are scoped to the account, not to one gateway. Any token with Run permission can send requests through every gateway in the account. It then uses the provider keys stored on those gateways.

With Access in front of a custom domain, Claude Code fetches a short-lived token through cloudflared in its apiKeyHelper. The gateway then records the person as cf.user_id. A spend limit rule split by cf.user_id gives each person their own budget. Requests made with a service token carry no cf.user_id.

Without Access, a per-person budget needs a user id that you add to every request as custom metadata.

Its core features are free on all plans. Accounts that created their first gateway on or after 24 September 2026 keep logs in Workers Logs, priced as that product is. Older accounts keep up to 100,000 logs on Workers Free and 10 million per gateway on Workers Paid.

Data loss prevention scanning is free. Without a Zero Trust subscription it has two predefined profiles: financial information, and social, insurance and national identifier numbers. Guardrails are billed as Workers AI inference.

Cloudflare credits cost 5% on top, so a $100 purchase is a $105 charge, by credit card only. Requests paid from credits are limited to 200 per 60 seconds per gateway. Requests on your own provider keys are not.

When the traffic is a team's coding tools and nobody wants to hand out gateway tokens. A developer runs selan login once, then selan claude, selan codex or selan opencode. Claude Desktop goes through the same gateway with one settings file.

Claude Code, Codex, OpenCode and Claude Desktop go into one usage record per person, with no identity proxy or metadata to set up. A limit per person applies across every pay-per-use key.

An owner connects the company's accounts and keys once, and switches on the models the team may use. No provider key reaches a laptop. With secret scanning on, a secret it recognises is replaced before the request leaves.

The trade-off is that requests travel through Selan, so if Selan is unavailable those requests fail. Your accounts can still be used directly.

Which providers serve which models is in models and providers, limits per person are on the spend page, and scanning is in the secret scanning docs.

Cloudflare's setup adds three variables: ANTHROPIC_BASE_URL, ANTHROPIC_API_KEY and ANTHROPIC_CUSTOM_HEADERS. Remove them from your shell profile or from the env block of ~/.claude/settings.json. With Access, delete the cloudflared apiKeyHelper line too. On the Bedrock or Vertex route, also remove CLAUDE_CODE_USE_BEDROCK or CLAUDE_CODE_USE_VERTEX with their base URL and skip-auth variables.

Then run selan login and selan claude. Connect the same Anthropic or Vertex accounts in Selan and switch on their models. You can keep AI Gateway for your own apps and run the team's coding tools through Selan. Keeping provider keys off laptops is covered in Claude Code without API keys on laptops, and the kinds of gateway in Claude Code gateways.

Free for up to three seats, and the Free plan needs no card.