This topic describes how to manage authorization for API consumers to ensure that only authenticated and authorized requests can access service resources.
Authorize consumers
Log on to the AI Gateway console.
In the navigation pane on the left, choose Consumers. In the top menu bar, select a region.
On the Consumers page, click the name of the target consumer to open its details page, and then select the Consumer Authorization tab.
Two types of authorization are supported: Model API and MCP.
Authorize a Model API
Select the Model API tab and click Authorization.
In the authorization panel, configure the parameters and click OK.
Parameter
Description
Effective For
Select the cloud-native gateway instance for which the authorization takes effect.
Select API
Select the Model API to be authorized.
Available APIs
The APIs that are published to the gateway and can be selected.
Selected APIs
The list of selected APIs. Click View next to an API to see its details.
Authorize an MCP service
Select the MCP tab and click Authorization.
In the authorization panel, configure the parameters and click OK.
Parameter
Description
Effective For
Select the cloud-native gateway instance for which the authorization takes effect.
Select MCP Service
Select the MCP service to be authorized.
Available
The MCP services that are published to the gateway and can be selected.
Selected
The list of selected MCP services. Click View next to a service to see its details.
Remove authorization
Log on to the AI Gateway console.
In the navigation pane on the left, choose Consumers. In the top menu bar, select a region.
On the Consumers page, click the name of the target consumer to open its details page, and then select the Consumer Authorization tab.
You can remove authorization from a Model API or an MCP service.
Remove authorization from a Model API
Select the Model API tab.
For the target API, in the Actions column, click Revoke Authorization, and then click Revoke in the confirmation dialog.
Remove authorization from an MCP service
Select the MCP tab.
For the target service, in the Actions column, click Revoke Authorization, and then click Revoke in the confirmation dialog.
References
For more information, see Consumer authentication and authorization.