Qeravio
Canonical AI event

Llama.cpp router mode no longer forwards --api-key-file to child instances.

Router mode now prevents API key forwarding to child instances, resolving 401 errors on chat completions and internal stream calls.

21 Sept 20261 verified claims1 sources1 observations
What happened

The official source reports this update: b11077: server : do not forward --api-key-file to router-spawned child instances. server : do not forward --api-key-file to router-spawned child instances ( #28938 ) In router mode, authentication belongs to the router. unset_reserved_args() already unset LLAMA_API_KEY, but did not unset LLAMA_ARG_API_KEY_FILE. When --api-key-file was passed, children re-validated against file keys only, causing clients using --api-key to 401 on chat completions ( #28820 ). In addition, router internal calls without auth headers (such as POST /v1/streams/lookup and DELETE /v1/stream) were silently rejected with 401.

Why it matters

This official update documents a development concerning b11077: server : do not forward --api-key-file to router-spawned child instances. Its practical significance depends on the scope and evidence stated by the source.

What to watch next

Read the official source update and verify its stated scope, evidence and timing before acting on it.

Connected knowledge

Entities affected by this event

Continue this topic
Evidence trail

Sources behind the event