Skip to content
actionlake
Start free

Connectors · AI

OpenRouter MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to OpenRouter and the rest of your systems. It gives your agent 146 OpenRouter actions (73 reads, 56 writes and 17 that wait for a confirmation) and holds the OpenRouter credential itself, so the agent never does. It paces OpenRouter's limits and records every call.

Connect OpenRouter freeSee pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "openrouter.keys.list",  intent: "check which OpenRouter account is connected"}# List API keys · read · 1 upstream call
  • 146actionsin one signed file
  • 73readlook, never change
  • 56writecreate and update
  • 17wait for a yesdestructive, confirmed first

Set up

Connect OpenRouter in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect OpenRouter.

    API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_keyOpenRouter API key (sk-or-v1-…)
    account { op: "connections.requirements", service: "openrouter" }
# free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "openrouter.keys.list" }# list api keys · read · 1 upstream callcheck { action: "openrouter.keys.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

OpenRouter at a glance

Sign-in
API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_key
Limits we pace to
600 calls a minute, per connection
API covered
OpenRouter API 1.0.0openrouter.ai/api/v1
Built from
OpenRouter's documentation, read 23 October 2026openrouter.aiopenrouter.ai
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
61 of 73 reads, for up to 5 minutes; a write clears what it affects
Shared entities
4, so ask can line OpenRouter up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in OpenRouter.

146 actions in 47 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 73readlook, never change
  • 56writecreate and update
  • 17destructivewait for a confirmation

  1. Interns

    13

    5 read · 7 write · 1 destructive

    Create an intern · Get an intern · Delete an intern · List interns

  2. Guardrails

    11

    4 read · 4 write · 3 destructive

    List guardrails · Create a guardrail · Get a guardrail · Update a guardrail

  3. Private endpoints

    10

    2 read · 7 write · 1 destructive

    Create a private endpoint · List private endpoints · Validate a draft private endpoint · Activate a validated private endpoint

  4. Workspaces

    8

    3 read · 3 write · 2 destructive

    List workspaces · Create a workspace · Get a workspace · Update a workspace

  5. Presets

    7

    4 read · 3 write · 0 destructive

    Create a preset from a chat-completions request body · Create a preset from a messages request body · Create a preset from a responses request body · List presets

  6. Intern vault

    6

    3 read · 2 write · 1 destructive

    List intern secrets · Delete an intern secret · Store an intern secret · Copy workspace secrets to an intern

  7. Byok keys

    5

    2 read · 2 write · 1 destructive

    List BYOK provider credentials · Create a BYOK provider credential · Get a BYOK provider credential · Update a BYOK provider credential

  8. External users

    5

    2 read · 2 write · 1 destructive

    Register an external user · List registered external users · Get a registered external user · Update a registered external user

39 more areas · 81 actions
  • Keys 5
  • Models 5
  • Observability destinations 5
  • Scim group mappings 5
  • Batches 4
  • Workspace budgets 4
  • Container files 3
  • Datasets 3
  • Files 3
  • Generations 3
  • Organization 3
  • Vault secrets 3
  • Analytics 2
  • Auth keys 2
  • Guardrail assignments 2
  • Image models 2
  • Oauth 2
  • Scim sync jobs 2
  • Tools 2
  • Videos 2
  • Activity 1
  • Audio transcriptions 1
  • Benchmarks 1
  • Chat completions 1
  • Classifications 1
  • Credits 1
  • Decisions 1
  • Embeddings 1
  • Embeddings models 1
  • Endpoints 1
  • Images 1
  • Key 1
  • Messages 1
  • Providers 1
  • Rerank 1
  • Responses 1
  • Scim groups 1
  • Systemone 1
  • Video models 1

Top actions

The OpenRouter API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 54 of OpenRouter's 54 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
openrouter.organization.list_membersList organization membersList organization members.readidentity.user.list474 connectors
openrouter.scim_groups.listList SCIM groupsList SCIM groups.readidentity.group.list262 connectors
openrouter.files.listList filesList files.readcontent.file.list77 connectors
openrouter.workspaces.listList workspacesList workspaces.readwork.workspace.list50 connectors
openrouter.container_files.listList container filesList container files.readcontent.file.list77 connectors
openrouter.keys.createCreate a new API keyCreate a new API key.writeidentity.api_key.create100 connectors
openrouter.keys.listList API keysList API keys.readidentity.api_key.list96 connectors
openrouter.messages.createCreate a messageCreate a message.writeanalytics.inference.create17 connectors
openrouter.responses.createCreate a responseCreate a response.writeanalytics.inference.create17 connectors
openrouter.guardrails.createCreate a guardrailCreate a guardrail.writesecurity.policy.create25 connectors
openrouter.workspaces.createCreate a workspaceCreate a workspace.writework.workspace.create36 connectors
openrouter.files.deleteDelete a fileDelete a file.destructivecontent.file.delete68 connectors

Try it

Prompts to paste into Claude.

Each one names the OpenRouter actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Which OpenRouter files changed this week, and who changed them?

    callsopenrouter.files.list

  2. Writewrite

    Create a new API key in OpenRouter. Show me exactly what you will send before you save it.

    callsopenrouter.keys.create

Governance for OpenRouter

Destructive actions wait for a yes.

17 OpenRouter actions are destructive. These are all of them:

  • Delete a fileopenrouter.files.delete
  • Delete an API keyopenrouter.keys.delete
  • Delete a BYOK provider credentialopenrouter.byok_keys.delete
  • Delete a workspace secretopenrouter.vault_secrets.delete
  • Delete an intern secretopenrouter.intern_vault.delete_secret
  • Delete a guardrailopenrouter.guardrails.delete
  • Delete a workspaceopenrouter.workspaces.delete
  • Delete an observability destinationopenrouter.observability_destinations.delete
  • Bulk remove members from a workspaceopenrouter.workspaces.remove_members
  • Delete a batchopenrouter.batches.delete
  • Delete a workspace budgetopenrouter.workspace_budgets.delete
  • Delete an internopenrouter.interns.delete
  • Deactivate a registered external useropenrouter.external_users.delete
  • Bulk unassign keys from a guardrailopenrouter.guardrails.unassign_keys
  • Delete a private endpointopenrouter.private_endpoints.delete
  • Delete a SCIM group mappingopenrouter.scim_group_mappings.delete
  • Bulk unassign members from a guardrailopenrouter.guardrails.unassign_members

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doopenrouter.files.deleteconfirm_policy: human

Delete a file?

intent: the user asked me to delete a file

run suspended · waiting for a named person · key openrouter-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "openrouter-agent",  allowed_actions: ["openrouter.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "openrouter.files.delete", approver: "[email protected]" },    { match: "openrouter.keys.delete", approver: "[email protected]" },    { match: "openrouter.byok_keys.delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to OpenRouter only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What OpenRouter costs on actionlake.

Every OpenRouter action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call OpenRouter refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 146 OpenRouter actions
  • 146actions pageeach page of a long list is one call
  • 61reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every OpenRouter action.

146 actions by area: the id your agent calls, what it does, and its effect.

Interns13
  • openrouter.interns.createCreate an internwrite
  • openrouter.interns.deleteDelete an interndestructive
  • openrouter.interns.getGet an internread
  • openrouter.interns.get_daemon_accessGet an intern's daemon accessread
  • openrouter.interns.get_daemon_access_legacyGet an intern's daemon access (deprecated alias)read
  • openrouter.interns.invokeStart an intern run without waiting for itwrite
  • openrouter.interns.listList internsread
  • openrouter.interns.list_connectionsList an intern's connectionsread
  • openrouter.interns.provisionProvision an internwrite
  • openrouter.interns.sign_daemon_requestSign a daemon request with the caller's identitywrite
  • openrouter.interns.sign_daemon_request_legacySign a daemon request with the caller's identity (deprecated alias)write
  • openrouter.interns.suspendSuspend an internwrite
  • openrouter.interns.updateUpdate an internwrite
Guardrails11
  • openrouter.guardrails.assign_keysBulk assign keys to a guardrailwrite
  • openrouter.guardrails.assign_membersBulk assign members to a guardrailwrite
  • openrouter.guardrails.createCreate a guardrailwrite
  • openrouter.guardrails.deleteDelete a guardraildestructive
  • openrouter.guardrails.getGet a guardrailread
  • openrouter.guardrails.listList guardrailsread
  • openrouter.guardrails.list_key_assignmentsList key assignments for a guardrailread
  • openrouter.guardrails.list_member_assignmentsList member assignments for a guardrailread
  • openrouter.guardrails.unassign_keysBulk unassign keys from a guardraildestructive
  • openrouter.guardrails.unassign_membersBulk unassign members from a guardraildestructive
  • openrouter.guardrails.updateUpdate a guardrailwrite
Private endpoints10
  • openrouter.private_endpoints.activateActivate a validated private endpointwrite
  • openrouter.private_endpoints.createCreate a private endpointwrite
  • openrouter.private_endpoints.deleteDelete a private endpointdestructive
  • openrouter.private_endpoints.disableDisable a private endpointwrite
  • openrouter.private_endpoints.enableEnable a private endpointwrite
  • openrouter.private_endpoints.getGet a private endpointread
  • openrouter.private_endpoints.listList private endpointsread
  • openrouter.private_endpoints.set_pricingSet private endpoint pricingwrite
  • openrouter.private_endpoints.updateUpdate a draft private endpointwrite
  • openrouter.private_endpoints.validateValidate a draft private endpointwrite
Workspaces8
  • openrouter.workspaces.add_membersBulk add members to a workspacewrite
  • openrouter.workspaces.createCreate a workspacewrite
  • openrouter.workspaces.deleteDelete a workspacedestructive
  • openrouter.workspaces.getGet a workspaceread
  • openrouter.workspaces.listList workspacesread
  • openrouter.workspaces.list_membersList workspace membersread
  • openrouter.workspaces.remove_membersBulk remove members from a workspacedestructive
  • openrouter.workspaces.updateUpdate a workspacewrite
Presets7
  • openrouter.presets.create_from_chat_completionsCreate a preset from a chat-completions request bodywrite
  • openrouter.presets.create_from_messagesCreate a preset from a messages request bodywrite
  • openrouter.presets.create_from_responsesCreate a preset from a responses request bodywrite
  • openrouter.presets.getGet a presetread
  • openrouter.presets.get_versionGet a specific version of a presetread
  • openrouter.presets.listList presetsread
  • openrouter.presets.list_versionsList versions of a presetread
Intern vault6
  • openrouter.intern_vault.copy_secretsCopy workspace secrets to an internwrite
  • openrouter.intern_vault.delete_secretDelete an intern secretdestructive
  • openrouter.intern_vault.list_connectionsList the connections an intern can useread
  • openrouter.intern_vault.list_effective_secretsList the secrets an intern receivesread
  • openrouter.intern_vault.list_secretsList intern secretsread
  • openrouter.intern_vault.store_secretStore an intern secretwrite
Byok keys5
  • openrouter.byok_keys.createCreate a BYOK provider credentialwrite
  • openrouter.byok_keys.deleteDelete a BYOK provider credentialdestructive
  • openrouter.byok_keys.getGet a BYOK provider credentialread
  • openrouter.byok_keys.listList BYOK provider credentialsread
  • openrouter.byok_keys.updateUpdate a BYOK provider credentialwrite
External users5
  • openrouter.external_users.createRegister an external userwrite
  • openrouter.external_users.deleteDeactivate a registered external userdestructive
  • openrouter.external_users.getGet a registered external userread
  • openrouter.external_users.listList registered external usersread
  • openrouter.external_users.updateUpdate a registered external userwrite
Keys5
  • openrouter.keys.createCreate a new API keywrite
  • openrouter.keys.deleteDelete an API keydestructive
  • openrouter.keys.getGet a single API keyread
  • openrouter.keys.listList API keysread
  • openrouter.keys.updateUpdate an API keywrite
Models5
  • openrouter.models.countGet total count of available modelsread
  • openrouter.models.getGet a model by its slugread
  • openrouter.models.listList all models and their propertiesread
  • openrouter.models.list_endpointsList all endpoints for a modelread
  • openrouter.models.list_for_userList models filtered by user provider preferences, privacy settings, and guardrailsread
Observability destinations5
  • openrouter.observability_destinations.createCreate an observability destinationwrite
  • openrouter.observability_destinations.deleteDelete an observability destinationdestructive
  • openrouter.observability_destinations.getGet an observability destinationread
  • openrouter.observability_destinations.listList observability destinationsread
  • openrouter.observability_destinations.updateUpdate an observability destinationwrite
Scim group mappings5
  • openrouter.scim_group_mappings.createCreate a SCIM group mappingwrite
  • openrouter.scim_group_mappings.deleteDelete a SCIM group mappingdestructive
  • openrouter.scim_group_mappings.getGet a SCIM group mappingread
  • openrouter.scim_group_mappings.listList SCIM group mappingsread
  • openrouter.scim_group_mappings.updateUpdate a SCIM group mappingwrite
Batches4
  • openrouter.batches.createCreate a batchwrite
  • openrouter.batches.deleteDelete a batchdestructive
  • openrouter.batches.getGet a batchread
  • openrouter.batches.listList batchesread
Workspace budgets4
  • openrouter.workspace_budgets.deleteDelete a workspace budgetdestructive
  • openrouter.workspace_budgets.getGet a workspace budgetread
  • openrouter.workspace_budgets.listList workspace budgetsread
  • openrouter.workspace_budgets.upsertCreate or update a workspace budgetwrite
Container files3
  • openrouter.container_files.getRetrieve a container fileread
  • openrouter.container_files.listList container filesread
  • openrouter.container_files.promotePromote a container file into workspace documentswrite
Datasets3
  • openrouter.datasets.list_app_rankingsTop apps by token usageread
  • openrouter.datasets.list_rankings_dailyDaily token totals for top 50 modelsread
  • openrouter.datasets.list_session_costCost per session by harness and modelread
Files3
  • openrouter.files.deleteDelete a filedestructive
  • openrouter.files.getGet file metadataread
  • openrouter.files.listList filesread
Generations3
  • openrouter.generations.create_feedbackSubmit feedback for a generationwrite
  • openrouter.generations.getGet request & usage metadata for a generationread
  • openrouter.generations.get_contentGet stored prompt, completion, and error content for a generationread
Organization3
  • openrouter.organization.get_settingsGet organization settingsread
  • openrouter.organization.list_membersList organization membersread
  • openrouter.organization.update_settingsUpdate organization settingswrite
Vault secrets3
  • openrouter.vault_secrets.deleteDelete a workspace secretdestructive
  • openrouter.vault_secrets.listList workspace secretsread
  • openrouter.vault_secrets.storeStore a workspace secretwrite
Analytics2
  • openrouter.analytics.get_metaGet available analytics metrics and dimensionsread
  • openrouter.analytics.queryQuery analytics dataread
Auth keys2
  • openrouter.auth_keys.create_codeCreate authorization codewrite
  • openrouter.auth_keys.exchange_codeExchange authorization code for API keywrite
Guardrail assignments2
  • openrouter.guardrail_assignments.list_keysList all key assignmentsread
  • openrouter.guardrail_assignments.list_membersList all member assignmentsread
Image models2
  • openrouter.image_models.listList image generation modelsread
  • openrouter.image_models.list_endpointsList endpoints for an image modelread
Oauth2
  • openrouter.oauth.exchange_tokenExchange a workload identity tokenwrite
  • openrouter.oauth.get_jwksOpenRouter access token signing keysread
Scim sync jobs2
  • openrouter.scim_sync_jobs.createStart a SCIM directory syncwrite
  • openrouter.scim_sync_jobs.getGet SCIM directory sync statusread
Tools2
  • openrouter.tools.getGet a server toolread
  • openrouter.tools.listList server toolsread
Videos2
  • openrouter.videos.createSubmit a video generation requestwrite
  • openrouter.videos.getPoll video generation statusread
Activity1
  • openrouter.activity.listGet user activity grouped by endpointread
Audio transcriptions1
  • openrouter.audio_transcriptions.createCreate transcriptionwrite
Benchmarks1
  • openrouter.benchmarks.listList Benchmarksread
Chat completions1
  • openrouter.chat_completions.createCreate a chat completionwrite
Classifications1
  • openrouter.classifications.list_task_shareTask classification market shareread
Credits1
  • openrouter.credits.getGet remaining creditsread
Decisions1
  • openrouter.decisions.createSubmit a Decisions requestwrite
Embeddings1
  • openrouter.embeddings.createSubmit an embedding requestwrite
Embeddings models1
  • openrouter.embeddings_models.listList all embeddings modelsread
Endpoints1
  • openrouter.endpoints.list_zdrPreview the impact of ZDR on the available endpointsread
Images1
  • openrouter.images.createGenerate an imagewrite
Key1
  • openrouter.key.get_currentGet current API keyread
Messages1
  • openrouter.messages.createCreate a messagewrite
Providers1
  • openrouter.providers.listList all providersread
Rerank1
  • openrouter.rerank.createSubmit a rerank requestwrite
Responses1
  • openrouter.responses.createCreate a responsewrite
Scim groups1
  • openrouter.scim_groups.listList SCIM groupsread
Systemone1
  • openrouter.systemone.createSubmit a System One requestwrite
Video models1
  • openrouter.video_models.listList all video generation modelsread

Questions

The OpenRouter MCP server, answered.

Is there an OpenRouter MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 146 OpenRouter actions across interns, guardrails, private endpoints and workspaces, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by OpenRouter.

What do I need to connect OpenRouter?

OpenRouter API key (sk-or-v1-…). The free call account { op: "connections.requirements", service: "openrouter" } lists exactly what to paste.

Can an AI agent delete or change things in OpenRouter?

Only if its key allows it, and only with an explicit confirmation. 17 OpenRouter actions are destructive, including delete a file, delete an API key and delete a BYOK provider credential. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my OpenRouter API limit?

actionlake paces every call to the limits in the OpenRouter service file: 600 calls a minute per connection. Repeated reads are answered from cache (61 OpenRouter actions can be), which never reaches OpenRouter.

What does an OpenRouter action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (146 OpenRouter actions page). Cache hits, searches, dry runs and calls OpenRouter refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which OpenRouter API does it cover?

The OpenRouter API 1.0.0 at openrouter.ai/api/v1. It is built from OpenRouter's documentation as read on 23 October 2026. 146 actions in 47 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my OpenRouter data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your OpenRouter credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

More connectors like OpenRouter

Shares the most action names with

Joins with, on shared entities

Browse

actionlake is independent. It is not made or endorsed by OpenRouter; the name is the vendor's own. Counts are from the OpenRouter service file, version 1.0.0.

Give your agent OpenRouter today.

Connect OpenRouter freeSee pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.