{"record":{"id":"b4b8b38fae43237b","repo":"vercel/ai","slug":"ai-gateway-client-secrets-must-be-minted-server-si","errorCode":null,"errorMessage":"AI Gateway client secrets must be minted server-side: minting needs your Gateway credential, which must never reach the browser. Call gateway.experimental_realtime.getToken() or gateway.experimental_transcription.getToken() from your server and pass the returned token to the client.","messagePattern":"AI Gateway client secrets must be minted server-side: minting needs your Gateway credential, which must never reach the browser\\. Call gateway\\.experimental_realtime\\.getToken\\(\\) or gateway\\.experimental_transcription\\.getToken\\(\\) from your server and pass the returned token to the client\\.","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"packages/gateway/src/gateway-provider.ts","lineNumber":666,"sourceCode":"  });\n\n  if (apiKey) {\n    return {\n      token: apiKey,\n      authMethod: 'api-key',\n    };\n  }\n\n  const oidcToken = await getVercelOidcToken();\n  return {\n    token: oidcToken,\n    authMethod: 'oidc',\n  };\n}\n\nfunction assertGatewayClientSecretServerEnvironment(): void {\n  if (typeof globalThis.window !== 'undefined') {\n    throw new Error(\n      'AI Gateway client secrets must be minted server-side: minting needs your Gateway credential, which must never reach the browser. Call gateway.experimental_realtime.getToken() or gateway.experimental_transcription.getToken() from your server and pass the returned token to the client.',\n    );\n  }\n}\n","sourceCodeStart":648,"sourceCodeEnd":671,"githubUrl":"https://github.com/vercel/ai/blob/69428b1f8b037e4d118fb4853428d5c4e620493c/packages/gateway/src/gateway-provider.ts#L648-L671","documentation":"Error \"AI Gateway client secrets must be minted server-side: minting needs your Gateway credential, which must never reach the browser. Call gateway.experimental_realtime.getToken() or gateway.experimental_transcription.getToken() from your server and pass the returned token to the client.\" thrown in vercel/ai.","triggerScenarios":"Thrown at packages/gateway/src/gateway-provider.ts:666 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"69428b1f8b037e4d118fb4853428d5c4e620493c","analyzedAt":"2026-08-30T12:32:21.016Z","schemaVersion":2},"datasetVersion":"2026-08-30T13:17:10.514Z"}