Cloudflare Access authentication with a service token
Selection or refresh of available models
Settings in this edition
Set the server URL for the OpenAI-compatible endpoint
Store the CF-Access-Client-ID and CF-Access-Client-Secret
Optionally store a bearer token for the service behind the tunnel
Choose the transcription model in add-on or provider settings
Platform differences
On macOS, Cloudflare ASR connects to your OpenAI-compatible transcription backend through a Cloudflare Tunnel. On Windows, it calls Cloudflare Workers AI directly using your account ID and API token.
Setup on macOS: Cloudflare Tunnel
Deploy an OpenAI-compatible transcription backend behind a Cloudflare Tunnel.
If the service is protected by Cloudflare Access, create a service token for it.
Open Settings > Integrations, find Cloudflare ASR, and open its configuration.
Enter the backend’s base URL. TypeWhisper appends /v1/models for model discovery and /v1/audio/transcriptions for transcription, so do not enter the full transcription endpoint.
For an Access-protected service, enter CF-Access-Client-Id and CF-Access-Client-Secret.
Refresh the backend’s models and select one, or enter the model name manually when discovery is unavailable.
Select Cloudflare ASR as the transcription engine in Settings or a profile.
Audio is sent to the backend you operate through Cloudflare. Its model and processing behavior depend on that backend.
Setup on Windows: Workers AI
Obtain your Cloudflare Account ID and create an API Token authorized to use Workers AI for that account.
Open Settings > Integrations, find Cloudflare ASR, and open its configuration.
Enter Account ID and API Token, then save the configuration.
Select Cloudflare ASR as the transcription engine and use Whisper (Cloudflare).
The Windows plugin constructs https://api.cloudflare.com/client/v4/accounts/{account-id}/ai/run/@cf/openai/whisper itself and authenticates with the API token. It uses the fixed Workers AI Whisper model; no custom endpoint, Tunnel, or Access service token is needed. Audio is sent to Cloudflare Workers AI.