AI Bridge endpoints currently do not enforce RBAC checks, allowing any valid API key to access them. This prevents custom roles and scoped API keys from controlling access to AI Bridge functionality.

List of Endpoints

• Model Access
  • /api/v2/aibridge/openai/* - OpenAI proxy routes
  • /api/v2/aibridge/anthropic/* - Anthropic proxy routes
• Interceptions
  • /api/v2/aibridge/interceptions - list interceptions

Additionally, we can also consider adding custom roles

• aibridge-auditor has access to/api/v2/aibridge/interceptions
• aibridge-user has access to using aibridge LLM endpoints.