Authentication and headers
Authenticate every request with a Bearer key created in the console:
Authorization: Bearer gw_…Headers
Section titled “Headers”| Header | Required | Meaning |
|---|---|---|
x-upstream-base |
yes | Where the masked request goes: workers-ai, mask-only (dry run), or any HTTPS origin for your own provider |
x-upstream-key |
when using your own provider | Forwarded as that provider’s Authorization: Bearer |
x-conversation-id |
no | Groups requests that share the same placeholder mapping |
x-redact-hint |
no | off disables the system-hint added for the provider |
x-redact-patterns |
no | off disables the deterministic pattern pass |
Anything not on this list is stripped before the request leaves Baati.