diff --git a/infra/console.ts b/infra/console.ts
index ef53d6a87ba..630bb56fec7 100644
--- a/infra/console.ts
+++ b/infra/console.ts
@@ -283,6 +283,7 @@ new sst.cloudflare.x.SolidStart("Console", {
     ZEN_LITE_PRICE,
     new sst.Secret("ZEN_LIMITS"),
     new sst.Secret("ZEN_SESSION_SECRET"),
+    new sst.Secret("CLOUDFLARE_ACCESS_CLIENT_ID"),
     ...ZEN_MODELS,
     ...($dev
       ? [
diff --git a/packages/console/app/src/lib/inference-proxy.ts b/packages/console/app/src/lib/inference-proxy.ts
index d57b1033cae..d6515c3386d 100644
--- a/packages/console/app/src/lib/inference-proxy.ts
+++ b/packages/console/app/src/lib/inference-proxy.ts
@@ -81,6 +81,7 @@ export async function proxyInference(
   ])
     forwarded.headers.delete(name)
   forwarded.headers.set("authorization", `Bearer ${key}`)
+  forwarded.headers.set("CF-Access-Client-Id", Resource.CLOUDFLARE_ACCESS_CLIENT_ID.value)
   const ip = request.headers.get("cf-connecting-ip")
   if (ip) forwarded.headers.set("x-zen-ip", ip)
   const requestID = request.headers.get("x-opencode-request-id") ?? request.headers.get("x-opencode-request")