Skip to main content

​
/api/openrouter-key

Supports GET, POST, and DELETE.

​
GET

Returns key presence only: 
{ "hasKey": true }

​
POST

Stores encrypted OpenRouter key. 
{ "apiKey": "sk-or-v1-..." }

​
DELETE

Removes stored key for authenticated user.

​
Security

  • No response ever includes raw key.
  • Same-origin + auth + rate limiting are enforced.