The AI Gateway uses HTTP headers to control authentication, request routing, retries, and metadata tagging. This page covers custom metadata and the available request and response headers. Match known tokens as case-insensitive substrings, most-specific-first, and bucket each into one of five types. Cloudflare caught Perplexity using undeclared crawlers that impersonated Chrome (Cloudflare, 2025), so high-stakes. This document proposes a machine-readable Hypertext Transfer Protocol (HTTP) response header field, AI-Disclosure, to disclose the presence and degree of Artificial Intelligence (AI) generated or AI-assisted content in web responses. The header is designed for compatibility with HTTP structured. A newly disclosed critical vulnerability, tracked as CVE-2026-48710 and dubbed “BadHost,” is putting thousands of AI-powered applications at risk by enabling authentication bypass through manipulated HTTP headers. The flaw affects Starlette versions before 1. 1, a core framework widely used in. Every time a search engine crawler visits your website, it's having a conversation you never hear.
[PDF Version]