Skip to main content

​
/api/openrouter-key

Supports GET, POST, and DELETE.

​
GET

Returns key presence only:

​
POST

Stores encrypted OpenRouter key.

​
DELETE

Removes stored key for authenticated user.

​
Security

  • No response ever includes raw key.
  • Same-origin + auth + rate limiting are enforced.