Choose OmniSwitch when…
- Running the control plane in your infrastructure is a requirement.
- Local policy checks and inspectable request data matter to your team.
- You are prepared to own deployment and operations.
Architecture before checklists
OmniSwitch vs Cloudflare AI Gateway
Compare a secure self-hosted control plane, AI gateway routing, and agent protocol scope with Cloudflare AI Gateway. Evaluate the operating model before the feature list.
Updated · Public beta
Managed service. Register a8a594b; each cell records its own version and verified date. A capability review, not a benchmark.
At a glance
Choose Cloudflare AI Gateway when…
- A managed operating model is your preference.
- You already use the Cloudflare ecosystem.
- You have checked its current feature scope, logging, and spend controls.
No scores or totals: uneven documentation coverage is not a measure of product quality.
The full capability comparison
READING THE MATRIXSupportedManaged onlyPartialNot availableNot verified
| Capability | OmniSwitch[1]Register a8a594b | Cloudflare AI Gateway[6]Managed service |
|---|---|---|
| Deployment & license | ||
| Self-hosted deployment | Not verifiedNo claim is recorded for this capability in the pinned register.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ | Not verifiedNo claim is recorded for this capability in the pinned register.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| SQLite / Postgres storage | SupportedSQLite by default; PostgreSQL via OMNISWITCH_DATABASE_URL. Logs and keys remain SQLite-local even in the Postgres case per the project's own docs.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Kubernetes manifests / Helm chart | SupportedKustomize manifests (Deployment/Service/ConfigMap/Secret example/PVCs/Redis) plus a Helm chart; no operator/CRDs/inference-aware routing.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Config hot reload | SupportedConfig hot reload covers routes, guardrails, cache posture, circuit breaker, and shadow provider without restart.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Built-in dashboard/UI | SupportedLocal dashboard for logs, metrics, prompts, providers, and guardrails.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| License | Supported | Not availableClosed managed service; not self-hostable/open-source.
|
| APIs & providers | ||
| OpenAI-compatible chat completions | Supported/v1/chat/completions, streaming and non-streaming.
| Managed onlyProxies OpenAI-compatible and other provider APIs.
|
| OpenAI-compatible embeddings | Supported | Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| OpenAI Responses API | Partial/v1/responses text subset only (no image/audio/tool-streaming parity with OpenAI).
/v1/responses text subset only (no image/audio/tool-streaming parity with OpenAI). | Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Anthropic Messages API | Partial/v1/messages core subset. | Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Native (non-passthrough) provider adapters | Partial4 native adapters (OpenAI, Anthropic, Google, Groq); no native Bedrock/Vertex/Cohere. Everything else goes through the generic OpenAI-compatible custom adapter with 15+ documented presets.
4 native adapters (OpenAI, Anthropic, Google, Groq); no native Bedrock/Vertex/Cohere. Everything else goes through the generic OpenAI-compatible custom adapter with 15+ documented presets. | Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Custom/generic OpenAI-compatible endpoint | SupportedGeneric custom provider adapter with presets for Azure OpenAI, Ollama, vLLM, LiteLLM, DeepSeek, Together, Fireworks, and aliases.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Routing, reliability & cost | ||
| Routing & fallbacks | Supportedroute-level fallbacks, max_retries, retry_backoff, retry_codes, per-attempt timeout.
| Managed onlyRequest retries and model fallback documented.
|
| Weighted / load-balanced routing | SupportedWeighted variants per route.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Conditional routing (rule/expression based) | SupportedCEL condition expressions on route variants.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Circuit breaker | SupportedDefault 5 failures / 60s cooldown, configurable via gateway.circuit_breaker_failures / _cooldown.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Exact-match cache | SupportedSHA-256 request-fingerprint cache key, tenant-scoped (api_key/workspace/organization/global), SQLite-backed.
| Managed onlyCaches identical requests to reduce latency/cost.
|
| Similarity cache (see scope) | SupportedNOT embedding-based. Vectorize() builds a normalized token-frequency map over lowercased, stop-word-filtered tokens; Similarity() is cosine over those token-frequency vectors. State this precisely wherever OmniSwitch's cache is compared to embedding-based semantic caches.
| Not verifiedDocumented caching is exact-match; semantic/similarity caching not confirmed.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Budgets and quotas | SupportedCost and token budgets per API key.
| Managed onlySpend limits (cumulative dollar caps) documented separately from request-count rate limiting.
|
| Rate limiting | PartialLocal sliding-window request limits plus optional Redis-coordinated fixed window across replicas; no token-based (TPM) limiter.
Local sliding-window request limits plus optional Redis-coordinated fixed window across replicas; no token-based (TPM) limiter. | Managed onlyRate limiting to control scale/cost/abuse, documented separately from spend limits.
|
| Token-based rate limits | Not verifiedNo claim is recorded for this capability in the pinned register.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ | Not verifiedNo claim is recorded for this capability in the pinned register.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Identity & guardrails | ||
| API key management | SupportedHashed API keys, bootstrap owner key, workspace-scoped keys.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| OIDC / JWT identity | SupportedOIDC JWT/JWKS workload identity (identity.oidc.jwks_url/issuer/audience).
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Mutual TLS | Not availableExplicitly not implemented; listed as a roadmap item, not a shipped feature.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| RBAC / policy engine (CEL or equivalent) | SupportedCEL allow/deny authorization rules plus fixed role gates.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Built-in guardrails | SupportedBuilt-in PII/prompt-injection/SQL-injection/toxicity/secret detectors plus custom regex rules, single-pass Rust-WASM scan with pure-Go fallback.
| Managed onlyGuardrails evaluate prompts/responses using @cf/meta/llama-guard-3-8b on Workers AI.
|
| Guardrail webhooks / external connectors | SupportedHTTP webhook connectors with configurable stage/action/timeout/fail_open.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Output redaction | Supportedredact action available on output-stage guardrail rules.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Guardrails applied to streaming output | Supportedguardrails.stream_buffer defaults to true: the full SSE stream is buffered and scanned before release, which means TTFT with guardrails on is dominated by upstream generation time, not gateway overhead. Benchmark both stream_buffer=true and false and label them.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Governed agent infrastructure | ||
| MCP gateway | SupportedHTTP MCP targets with streamed SSE / streamable-HTTP pass-through.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| MCP over stdio | SupportedPersistent stdio MCP transport targets.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| MCP federation (multiple targets) | SupportedMultiple named MCP targets, policy-gated tools/call, server-side headers.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| OpenAPI-to-MCP conversion | Not availableNot implemented; explicit gap in the project's own comparison doc.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| MCP OAuth / token exchange | SupportedRFC 8693 token exchange plus RFC 7523 JWT Bearer Grant for MCP OAuth delegation.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| A2A agent card discovery | SupportedPublic A2A v1 Agent Card discovery (/.well-known/agent-card.json) plus authenticated GetExtendedAgentCard.
Current protocol scope: SendMessage, SendMessageStream (SSE task events), GetTask, best-effort CancelTask; tasks in memory; no push notifications; no downstream agent proxy. | Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| A2A task methods | PartialSendMessage / SendMessageStream, GetTask, CancelTask implemented (JSON-RPC methods and REST aliases). Agent card advertises pushNotifications: false, so push-notification task updates are not supported.
Current protocol scope: SendMessage, SendMessageStream (SSE task events), GetTask, best-effort CancelTask; tasks in memory; no push notifications; no downstream agent proxy. SendMessage / SendMessageStream, GetTask, CancelTask implemented (JSON-RPC methods and REST aliases). Agent card advertises pushNotifications: false, so push-notification task updates are not supported. | Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Operations & evidence | ||
| Prompt management | PartialTemplates with version history and rendering; no approval workflow, rollback/promotion, or experiments.
Templates with version history and rendering; no approval workflow, rollback/promotion, or experiments. | Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Evals / experiments | PartialPolicy replay endpoint for batch allow/deny simulation only; no model-quality eval datasets/scoring.
Policy replay endpoint for batch allow/deny simulation only; no model-quality eval datasets/scoring. | Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| OTLP telemetry export | SupportedOTel trace export (tested against Langfuse/Jaeger/Tempo).
| Not verifiedAnalytics/logging documented; OTLP export specifically not confirmed.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Prometheus metrics | Supported/metrics endpoint, gated by OMNISWITCH_PROMETHEUS_ENABLED.
| Not verifiedManaged service: capability-map only, no same-host benchmark run. Not verified in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Published cross-gateway benchmarks | PartialIn-repo Rust-WASM-vs-Go guardrail micro-benchmark only (BENCHMARKS.md, measured on a non-pinned Windows laptop). No cross-gateway comparative run published yet -- this benchmark effort (bench/) is that follow-up.
In-repo Rust-WASM-vs-Go guardrail micro-benchmark only (BENCHMARKS.md, measured on a non-pinned Windows laptop). No cross-gateway comparative run published yet -- this benchmark effort (bench/) is that follow-up. | Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
Deployment & license
Self-hosted deployment
- OmniSwitch[1]
Not verified
No claim is recorded for this capability in the pinned register.
- Version
- Not recorded
- Verified
- Not recorded
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗- Cloudflare AI Gateway[6]
Not verified
No claim is recorded for this capability in the pinned register.
- Version
- Not recorded
- Verified
- Not recorded
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
SQLite / Postgres storage
- OmniSwitch[1]
Supported
SQLite by default; PostgreSQL via OMNISWITCH_DATABASE_URL. Logs and keys remain SQLite-local even in the Postgres case per the project's own docs.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Kubernetes manifests / Helm chart
- OmniSwitch[1]
Supported
Kustomize manifests (Deployment/Service/ConfigMap/Secret example/PVCs/Redis) plus a Helm chart; no operator/CRDs/inference-aware routing.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Config hot reload
- OmniSwitch[1]
Supported
Config hot reload covers routes, guardrails, cache posture, circuit breaker, and shadow provider without restart.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Built-in dashboard/UI
- OmniSwitch[1]
Supported
Local dashboard for logs, metrics, prompts, providers, and guardrails.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
License
- OmniSwitch[1]
Supported
- Cloudflare AI Gateway[6]
Not available
Closed managed service; not self-hostable/open-source.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
APIs & providers
OpenAI-compatible chat completions
- OmniSwitch[1]
Supported
/v1/chat/completions, streaming and non-streaming.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Managed only
Proxies OpenAI-compatible and other provider APIs.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
OpenAI-compatible embeddings
- OmniSwitch[1]
Supported
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
OpenAI Responses API
- OmniSwitch[1]
Partial
/v1/responses text subset only (no image/audio/tool-streaming parity with OpenAI).
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
/v1/responses text subset only (no image/audio/tool-streaming parity with OpenAI).
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Anthropic Messages API
- OmniSwitch[1]
Partial
/v1/messages core subset.
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Native (non-passthrough) provider adapters
- OmniSwitch[1]
Partial
4 native adapters (OpenAI, Anthropic, Google, Groq); no native Bedrock/Vertex/Cohere. Everything else goes through the generic OpenAI-compatible custom adapter with 15+ documented presets.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
4 native adapters (OpenAI, Anthropic, Google, Groq); no native Bedrock/Vertex/Cohere. Everything else goes through the generic OpenAI-compatible custom adapter with 15+ documented presets.
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Custom/generic OpenAI-compatible endpoint
- OmniSwitch[1]
Supported
Generic custom provider adapter with presets for Azure OpenAI, Ollama, vLLM, LiteLLM, DeepSeek, Together, Fireworks, and aliases.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Routing, reliability & cost
Routing & fallbacks
- OmniSwitch[1]
Supported
route-level fallbacks, max_retries, retry_backoff, retry_codes, per-attempt timeout.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Managed only
Request retries and model fallback documented.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
Weighted / load-balanced routing
- OmniSwitch[1]
Supported
Weighted variants per route.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Conditional routing (rule/expression based)
- OmniSwitch[1]
Supported
CEL condition expressions on route variants.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Circuit breaker
- OmniSwitch[1]
Supported
Default 5 failures / 60s cooldown, configurable via gateway.circuit_breaker_failures / _cooldown.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Exact-match cache
- OmniSwitch[1]
Supported
SHA-256 request-fingerprint cache key, tenant-scoped (api_key/workspace/organization/global), SQLite-backed.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Managed only
Caches identical requests to reduce latency/cost.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
Similarity cache (see scope)
- OmniSwitch[1]
Supported
NOT embedding-based. Vectorize() builds a normalized token-frequency map over lowercased, stop-word-filtered tokens; Similarity() is cosine over those token-frequency vectors. State this precisely wherever OmniSwitch's cache is compared to embedding-based semantic caches.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Documented caching is exact-match; semantic/similarity caching not confirmed.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Budgets and quotas
- OmniSwitch[1]
Supported
Cost and token budgets per API key.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Managed only
Spend limits (cumulative dollar caps) documented separately from request-count rate limiting.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
Rate limiting
- OmniSwitch[1]
Partial
Local sliding-window request limits plus optional Redis-coordinated fixed window across replicas; no token-based (TPM) limiter.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
Local sliding-window request limits plus optional Redis-coordinated fixed window across replicas; no token-based (TPM) limiter.
- Cloudflare AI Gateway[6]
Managed only
Rate limiting to control scale/cost/abuse, documented separately from spend limits.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
Token-based rate limits
- OmniSwitch[1]
Not verified
No claim is recorded for this capability in the pinned register.
- Version
- Not recorded
- Verified
- Not recorded
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗- Cloudflare AI Gateway[6]
Not verified
No claim is recorded for this capability in the pinned register.
- Version
- Not recorded
- Verified
- Not recorded
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Identity & guardrails
API key management
- OmniSwitch[1]
Supported
Hashed API keys, bootstrap owner key, workspace-scoped keys.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
OIDC / JWT identity
- OmniSwitch[1]
Supported
OIDC JWT/JWKS workload identity (identity.oidc.jwks_url/issuer/audience).
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Mutual TLS
- OmniSwitch[1]
Not available
Explicitly not implemented; listed as a roadmap item, not a shipped feature.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
RBAC / policy engine (CEL or equivalent)
- OmniSwitch[1]
Supported
CEL allow/deny authorization rules plus fixed role gates.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Built-in guardrails
- OmniSwitch[1]
Supported
Built-in PII/prompt-injection/SQL-injection/toxicity/secret detectors plus custom regex rules, single-pass Rust-WASM scan with pure-Go fallback.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Managed only
Guardrails evaluate prompts/responses using @cf/meta/llama-guard-3-8b on Workers AI.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
Guardrail webhooks / external connectors
- OmniSwitch[1]
Supported
HTTP webhook connectors with configurable stage/action/timeout/fail_open.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Output redaction
- OmniSwitch[1]
Supported
redact action available on output-stage guardrail rules.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Guardrails applied to streaming output
- OmniSwitch[1]
Supported
guardrails.stream_buffer defaults to true: the full SSE stream is buffered and scanned before release, which means TTFT with guardrails on is dominated by upstream generation time, not gateway overhead. Benchmark both stream_buffer=true and false and label them.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Governed agent infrastructure
MCP gateway
- OmniSwitch[1]
Supported
HTTP MCP targets with streamed SSE / streamable-HTTP pass-through.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
MCP over stdio
- OmniSwitch[1]
Supported
Persistent stdio MCP transport targets.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
MCP federation (multiple targets)
- OmniSwitch[1]
Supported
Multiple named MCP targets, policy-gated tools/call, server-side headers.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
OpenAPI-to-MCP conversion
- OmniSwitch[1]
Not available
Not implemented; explicit gap in the project's own comparison doc.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
MCP OAuth / token exchange
- OmniSwitch[1]
Supported
RFC 8693 token exchange plus RFC 7523 JWT Bearer Grant for MCP OAuth delegation.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
A2A agent card discovery
- OmniSwitch[1]
Supported
Public A2A v1 Agent Card discovery (/.well-known/agent-card.json) plus authenticated GetExtendedAgentCard.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
Current protocol scope: SendMessage, SendMessageStream (SSE task events), GetTask, best-effort CancelTask; tasks in memory; no push notifications; no downstream agent proxy.
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
A2A task methods
- OmniSwitch[1]
Partial
SendMessage / SendMessageStream, GetTask, CancelTask implemented (JSON-RPC methods and REST aliases). Agent card advertises pushNotifications: false, so push-notification task updates are not supported.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
Current protocol scope: SendMessage, SendMessageStream (SSE task events), GetTask, best-effort CancelTask; tasks in memory; no push notifications; no downstream agent proxy.
SendMessage / SendMessageStream, GetTask, CancelTask implemented (JSON-RPC methods and REST aliases). Agent card advertises pushNotifications: false, so push-notification task updates are not supported.
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Operations & evidence
Prompt management
- OmniSwitch[1]
Partial
Templates with version history and rendering; no approval workflow, rollback/promotion, or experiments.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
Templates with version history and rendering; no approval workflow, rollback/promotion, or experiments.
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Evals / experiments
- OmniSwitch[1]
Partial
Policy replay endpoint for batch allow/deny simulation only; no model-quality eval datasets/scoring.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
Policy replay endpoint for batch allow/deny simulation only; no model-quality eval datasets/scoring.
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
OTLP telemetry export
- OmniSwitch[1]
Supported
OTel trace export (tested against Langfuse/Jaeger/Tempo).
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Analytics/logging documented; OTLP export specifically not confirmed.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Prometheus metrics
- OmniSwitch[1]
Supported
/metrics endpoint, gated by OMNISWITCH_PROMETHEUS_ENABLED.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Cloudflare AI Gateway[6]
Not verified
Managed service: capability-map only, no same-host benchmark run. Not verified in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Published cross-gateway benchmarks
- OmniSwitch[1]
Partial
In-repo Rust-WASM-vs-Go guardrail micro-benchmark only (BENCHMARKS.md, measured on a non-pinned Windows laptop). No cross-gateway comparative run published yet -- this benchmark effort (bench/) is that follow-up.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
In-repo Rust-WASM-vs-Go guardrail micro-benchmark only (BENCHMARKS.md, measured on a non-pinned Windows laptop). No cross-gateway comparative run published yet -- this benchmark effort (bench/) is that follow-up.
- Cloudflare AI Gateway[6]
Not verified
Not confirmed in available sources.
- Version
- hosted service, n/a
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
OmniSwitch scope. The pinned register marks OpenAI Responses API, Anthropic Messages API, Native (non-passthrough) provider adapters, Rate limiting, Mutual TLS, OpenAPI-to-MCP conversion, A2A task methods, Prompt management, Evals / experiments, Published cross-gateway benchmarks as partial or unavailable. Read each source and version; compare them with the build you actually deploy.
Read unknowns carefully. “Not verified” means an evidence gap, not absence. Editions remain separate. Register a8a594b; 2 compared deployments.
A2A (Beta). SendMessage, SendMessageStream (SSE task events), GetTask, best-effort CancelTask; tasks in memory; no push notifications; no downstream agent proxy.
Running side by side
Cloudflare AI Gateway has a different platform or proxy operating model. Start a separate OmniSwitch deployment, define a representative route, and compare request behavior and operational fit. No base-URL migration guide is offered without verified compatibility on both sides.
Start a local evaluationSources & methodology
- [1]
OmniSwitch
Product register a8a594b. Cells reflect registered source claims, not roadmap plans or release-artifact availability; each retains its own verified date and version.
- [6]
Cloudflare AI Gateway
Managed service. Capability-specific documentation and dated editorial sources remain separate from independent testing.
Supported means documented within the named capability and deployment scope, not full product parity. Beta and licensed editions are shown when the register supplies a qualifier. Not verified describes an evidence gap, not absence. Claims come from the pinned register; cells have no scores or totals. This is a dated documentation review, not a performance test or a security certification. See the benchmark methodology.