--- title: "OpenRouter MCP server for AI agents - actionlake" description: "Give Claude 146 OpenRouter actions through one MCP server: interns, guardrails. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/openrouter updated: 2026-10-23 --- Connectors · AI # OpenRouter MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to OpenRouter and the rest of your systems. It gives your agent 146 OpenRouter actions (73 reads, 56 writes and 17 that wait for a confirmation) and holds the OpenRouter credential itself, so the agent never does. It paces OpenRouter's limits and records every call. [Connect OpenRouter free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "openrouter.keys.list", intent: "check which OpenRouter account is connected" } # List API keys · read · 1 upstream call ``` - 146 actions in one signed file - 73 read look, never change - 56 write create and update - 17 wait for a yes destructive, confirmed first Set up ## Connect OpenRouter in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect OpenRouter. API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_key` OpenRouter API key (sk-or-v1-…) ``` account { op: "connections.requirements", service: "openrouter" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "openrouter.keys.list" } # list api keys · read · 1 upstream call check { action: "openrouter.keys.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` OpenRouter at a glance **Sign-in** API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_key` **Limits we pace to** 600 calls a minute, per connection **API covered** OpenRouter API 1.0.0`openrouter.ai/api/v1` **Built from** OpenRouter's documentation, read 23 October 2026[openrouter.ai](https://openrouter.ai/openapi.json) [openrouter.ai](https://openrouter.ai/docs/api-reference/overview) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 61 of 73 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 4, so ask can line OpenRouter up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in OpenRouter. 146 actions in 47 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **73** read look, never change - **56** write create and update - **17** destructive wait for a confirmation 1. ### Interns 13 5 read · 7 write · 1 destructive Create an intern · Get an intern · Delete an intern · List interns 2. ### Guardrails 11 4 read · 4 write · 3 destructive List guardrails · Create a guardrail · Get a guardrail · Update a guardrail 3. ### Private endpoints 10 2 read · 7 write · 1 destructive Create a private endpoint · List private endpoints · Validate a draft private endpoint · Activate a validated private endpoint 4. ### Workspaces 8 3 read · 3 write · 2 destructive List workspaces · Create a workspace · Get a workspace · Update a workspace 5. ### Presets 7 4 read · 3 write · 0 destructive Create a preset from a chat-completions request body · Create a preset from a messages request body · Create a preset from a responses request body · List presets 6. ### Intern vault 6 3 read · 2 write · 1 destructive List intern secrets · Delete an intern secret · Store an intern secret · Copy workspace secrets to an intern 7. ### Byok keys 5 2 read · 2 write · 1 destructive List BYOK provider credentials · Create a BYOK provider credential · Get a BYOK provider credential · Update a BYOK provider credential 8. ### External users 5 2 read · 2 write · 1 destructive Register an external user · List registered external users · Get a registered external user · Update a registered external user **39 more areas · 81 actions** - Keys **5** - Models **5** - Observability destinations **5** - Scim group mappings **5** - Batches **4** - Workspace budgets **4** - Container files **3** - Datasets **3** - Files **3** - Generations **3** - Organization **3** - Vault secrets **3** - Analytics **2** - Auth keys **2** - Guardrail assignments **2** - Image models **2** - Oauth **2** - Scim sync jobs **2** - Tools **2** - Videos **2** - Activity **1** - Audio transcriptions **1** - Benchmarks **1** - Chat completions **1** - Classifications **1** - Credits **1** - Decisions **1** - Embeddings **1** - Embeddings models **1** - Endpoints **1** - Images **1** - Key **1** - Messages **1** - Providers **1** - Rerank **1** - Responses **1** - Scim groups **1** - Systemone **1** - Video models **1** Top actions ## The OpenRouter API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 54 of OpenRouter's 54 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `openrouter.organization.list_members` List organization members | List organization members. | read | `identity.user.list` 474 connectors | | `openrouter.scim_groups.list` List SCIM groups | List SCIM groups. | read | `identity.group.list` 262 connectors | | `openrouter.files.list` List files | List files. | read | `content.file.list` 77 connectors | | `openrouter.workspaces.list` List workspaces | List workspaces. | read | `work.workspace.list` 50 connectors | | `openrouter.container_files.list` List container files | List container files. | read | `content.file.list` 77 connectors | | `openrouter.keys.create` Create a new API key | Create a new API key. | write | `identity.api_key.create` 100 connectors | | `openrouter.keys.list` List API keys | List API keys. | read | `identity.api_key.list` 96 connectors | | `openrouter.messages.create` Create a message | Create a message. | write | `analytics.inference.create` 17 connectors | | `openrouter.responses.create` Create a response | Create a response. | write | `analytics.inference.create` 17 connectors | | `openrouter.guardrails.create` Create a guardrail | Create a guardrail. | write | `security.policy.create` 25 connectors | | `openrouter.workspaces.create` Create a workspace | Create a workspace. | write | `work.workspace.create` 36 connectors | | `openrouter.files.delete` Delete a file | Delete a file. | destructive | `content.file.delete` 68 connectors | Try it ## Prompts to paste into Claude. Each one names the OpenRouter actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Which OpenRouter files changed this week, and who changed them? calls `openrouter.files.list` 2. Write write Create a new API key in OpenRouter. Show me exactly what you will send before you save it. calls `openrouter.keys.create` Governance for OpenRouter ## Destructive actions wait for a yes. 17 OpenRouter actions are destructive. These are all of them: - Delete a file `openrouter.files.delete` - Delete an API key `openrouter.keys.delete` - Delete a BYOK provider credential `openrouter.byok_keys.delete` - Delete a workspace secret `openrouter.vault_secrets.delete` - Delete an intern secret `openrouter.intern_vault.delete_secret` - Delete a guardrail `openrouter.guardrails.delete` - Delete a workspace `openrouter.workspaces.delete` - Delete an observability destination `openrouter.observability_destinations.delete` - Bulk remove members from a workspace `openrouter.workspaces.remove_members` - Delete a batch `openrouter.batches.delete` - Delete a workspace budget `openrouter.workspace_budgets.delete` - Delete an intern `openrouter.interns.delete` - Deactivate a registered external user `openrouter.external_users.delete` - Bulk unassign keys from a guardrail `openrouter.guardrails.unassign_keys` - Delete a private endpoint `openrouter.private_endpoints.delete` - Delete a SCIM group mapping `openrouter.scim_group_mappings.delete` - Bulk unassign members from a guardrail `openrouter.guardrails.unassign_members` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do openrouter.files.delete confirm_policy: **human** Delete a file? **intent:** the user asked me to delete a file run suspended · waiting for a named person · key _openrouter-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "openrouter-agent", allowed_actions: ["openrouter.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "openrouter.files.delete", approver: "lead@example.com" }, { match: "openrouter.keys.delete", approver: "lead@example.com" }, { match: "openrouter.byok_keys.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to OpenRouter only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What OpenRouter costs on actionlake. Every OpenRouter action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call OpenRouter refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 146 OpenRouter actions - 146 actions page each page of a long list is one call - 61 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every OpenRouter action. 146 actions by area: the id your agent calls, what it does, and its effect. **Interns 13** - `openrouter.interns.create` Create an intern write - `openrouter.interns.delete` Delete an intern destructive - `openrouter.interns.get` Get an intern read - `openrouter.interns.get_daemon_access` Get an intern's daemon access read - `openrouter.interns.get_daemon_access_legacy` Get an intern's daemon access (deprecated alias) read - `openrouter.interns.invoke` Start an intern run without waiting for it write - `openrouter.interns.list` List interns read - `openrouter.interns.list_connections` List an intern's connections read - `openrouter.interns.provision` Provision an intern write - `openrouter.interns.sign_daemon_request` Sign a daemon request with the caller's identity write - `openrouter.interns.sign_daemon_request_legacy` Sign a daemon request with the caller's identity (deprecated alias) write - `openrouter.interns.suspend` Suspend an intern write - `openrouter.interns.update` Update an intern write **Guardrails 11** - `openrouter.guardrails.assign_keys` Bulk assign keys to a guardrail write - `openrouter.guardrails.assign_members` Bulk assign members to a guardrail write - `openrouter.guardrails.create` Create a guardrail write - `openrouter.guardrails.delete` Delete a guardrail destructive - `openrouter.guardrails.get` Get a guardrail read - `openrouter.guardrails.list` List guardrails read - `openrouter.guardrails.list_key_assignments` List key assignments for a guardrail read - `openrouter.guardrails.list_member_assignments` List member assignments for a guardrail read - `openrouter.guardrails.unassign_keys` Bulk unassign keys from a guardrail destructive - `openrouter.guardrails.unassign_members` Bulk unassign members from a guardrail destructive - `openrouter.guardrails.update` Update a guardrail write **Private endpoints 10** - `openrouter.private_endpoints.activate` Activate a validated private endpoint write - `openrouter.private_endpoints.create` Create a private endpoint write - `openrouter.private_endpoints.delete` Delete a private endpoint destructive - `openrouter.private_endpoints.disable` Disable a private endpoint write - `openrouter.private_endpoints.enable` Enable a private endpoint write - `openrouter.private_endpoints.get` Get a private endpoint read - `openrouter.private_endpoints.list` List private endpoints read - `openrouter.private_endpoints.set_pricing` Set private endpoint pricing write - `openrouter.private_endpoints.update` Update a draft private endpoint write - `openrouter.private_endpoints.validate` Validate a draft private endpoint write **Workspaces 8** - `openrouter.workspaces.add_members` Bulk add members to a workspace write - `openrouter.workspaces.create` Create a workspace write - `openrouter.workspaces.delete` Delete a workspace destructive - `openrouter.workspaces.get` Get a workspace read - `openrouter.workspaces.list` List workspaces read - `openrouter.workspaces.list_members` List workspace members read - `openrouter.workspaces.remove_members` Bulk remove members from a workspace destructive - `openrouter.workspaces.update` Update a workspace write **Presets 7** - `openrouter.presets.create_from_chat_completions` Create a preset from a chat-completions request body write - `openrouter.presets.create_from_messages` Create a preset from a messages request body write - `openrouter.presets.create_from_responses` Create a preset from a responses request body write - `openrouter.presets.get` Get a preset read - `openrouter.presets.get_version` Get a specific version of a preset read - `openrouter.presets.list` List presets read - `openrouter.presets.list_versions` List versions of a preset read **Intern vault 6** - `openrouter.intern_vault.copy_secrets` Copy workspace secrets to an intern write - `openrouter.intern_vault.delete_secret` Delete an intern secret destructive - `openrouter.intern_vault.list_connections` List the connections an intern can use read - `openrouter.intern_vault.list_effective_secrets` List the secrets an intern receives read - `openrouter.intern_vault.list_secrets` List intern secrets read - `openrouter.intern_vault.store_secret` Store an intern secret write **Byok keys 5** - `openrouter.byok_keys.create` Create a BYOK provider credential write - `openrouter.byok_keys.delete` Delete a BYOK provider credential destructive - `openrouter.byok_keys.get` Get a BYOK provider credential read - `openrouter.byok_keys.list` List BYOK provider credentials read - `openrouter.byok_keys.update` Update a BYOK provider credential write **External users 5** - `openrouter.external_users.create` Register an external user write - `openrouter.external_users.delete` Deactivate a registered external user destructive - `openrouter.external_users.get` Get a registered external user read - `openrouter.external_users.list` List registered external users read - `openrouter.external_users.update` Update a registered external user write **Keys 5** - `openrouter.keys.create` Create a new API key write - `openrouter.keys.delete` Delete an API key destructive - `openrouter.keys.get` Get a single API key read - `openrouter.keys.list` List API keys read - `openrouter.keys.update` Update an API key write **Models 5** - `openrouter.models.count` Get total count of available models read - `openrouter.models.get` Get a model by its slug read - `openrouter.models.list` List all models and their properties read - `openrouter.models.list_endpoints` List all endpoints for a model read - `openrouter.models.list_for_user` List models filtered by user provider preferences, privacy settings, and guardrails read **Observability destinations 5** - `openrouter.observability_destinations.create` Create an observability destination write - `openrouter.observability_destinations.delete` Delete an observability destination destructive - `openrouter.observability_destinations.get` Get an observability destination read - `openrouter.observability_destinations.list` List observability destinations read - `openrouter.observability_destinations.update` Update an observability destination write **Scim group mappings 5** - `openrouter.scim_group_mappings.create` Create a SCIM group mapping write - `openrouter.scim_group_mappings.delete` Delete a SCIM group mapping destructive - `openrouter.scim_group_mappings.get` Get a SCIM group mapping read - `openrouter.scim_group_mappings.list` List SCIM group mappings read - `openrouter.scim_group_mappings.update` Update a SCIM group mapping write **Batches 4** - `openrouter.batches.create` Create a batch write - `openrouter.batches.delete` Delete a batch destructive - `openrouter.batches.get` Get a batch read - `openrouter.batches.list` List batches read **Workspace budgets 4** - `openrouter.workspace_budgets.delete` Delete a workspace budget destructive - `openrouter.workspace_budgets.get` Get a workspace budget read - `openrouter.workspace_budgets.list` List workspace budgets read - `openrouter.workspace_budgets.upsert` Create or update a workspace budget write **Container files 3** - `openrouter.container_files.get` Retrieve a container file read - `openrouter.container_files.list` List container files read - `openrouter.container_files.promote` Promote a container file into workspace documents write **Datasets 3** - `openrouter.datasets.list_app_rankings` Top apps by token usage read - `openrouter.datasets.list_rankings_daily` Daily token totals for top 50 models read - `openrouter.datasets.list_session_cost` Cost per session by harness and model read **Files 3** - `openrouter.files.delete` Delete a file destructive - `openrouter.files.get` Get file metadata read - `openrouter.files.list` List files read **Generations 3** - `openrouter.generations.create_feedback` Submit feedback for a generation write - `openrouter.generations.get` Get request & usage metadata for a generation read - `openrouter.generations.get_content` Get stored prompt, completion, and error content for a generation read **Organization 3** - `openrouter.organization.get_settings` Get organization settings read - `openrouter.organization.list_members` List organization members read - `openrouter.organization.update_settings` Update organization settings write **Vault secrets 3** - `openrouter.vault_secrets.delete` Delete a workspace secret destructive - `openrouter.vault_secrets.list` List workspace secrets read - `openrouter.vault_secrets.store` Store a workspace secret write **Analytics 2** - `openrouter.analytics.get_meta` Get available analytics metrics and dimensions read - `openrouter.analytics.query` Query analytics data read **Auth keys 2** - `openrouter.auth_keys.create_code` Create authorization code write - `openrouter.auth_keys.exchange_code` Exchange authorization code for API key write **Guardrail assignments 2** - `openrouter.guardrail_assignments.list_keys` List all key assignments read - `openrouter.guardrail_assignments.list_members` List all member assignments read **Image models 2** - `openrouter.image_models.list` List image generation models read - `openrouter.image_models.list_endpoints` List endpoints for an image model read **Oauth 2** - `openrouter.oauth.exchange_token` Exchange a workload identity token write - `openrouter.oauth.get_jwks` OpenRouter access token signing keys read **Scim sync jobs 2** - `openrouter.scim_sync_jobs.create` Start a SCIM directory sync write - `openrouter.scim_sync_jobs.get` Get SCIM directory sync status read **Tools 2** - `openrouter.tools.get` Get a server tool read - `openrouter.tools.list` List server tools read **Videos 2** - `openrouter.videos.create` Submit a video generation request write - `openrouter.videos.get` Poll video generation status read **Activity 1** - `openrouter.activity.list` Get user activity grouped by endpoint read **Audio transcriptions 1** - `openrouter.audio_transcriptions.create` Create transcription write **Benchmarks 1** - `openrouter.benchmarks.list` List Benchmarks read **Chat completions 1** - `openrouter.chat_completions.create` Create a chat completion write **Classifications 1** - `openrouter.classifications.list_task_share` Task classification market share read **Credits 1** - `openrouter.credits.get` Get remaining credits read **Decisions 1** - `openrouter.decisions.create` Submit a Decisions request write **Embeddings 1** - `openrouter.embeddings.create` Submit an embedding request write **Embeddings models 1** - `openrouter.embeddings_models.list` List all embeddings models read **Endpoints 1** - `openrouter.endpoints.list_zdr` Preview the impact of ZDR on the available endpoints read **Images 1** - `openrouter.images.create` Generate an image write **Key 1** - `openrouter.key.get_current` Get current API key read **Messages 1** - `openrouter.messages.create` Create a message write **Providers 1** - `openrouter.providers.list` List all providers read **Rerank 1** - `openrouter.rerank.create` Submit a rerank request write **Responses 1** - `openrouter.responses.create` Create a response write **Scim groups 1** - `openrouter.scim_groups.list` List SCIM groups read **Systemone 1** - `openrouter.systemone.create` Submit a System One request write **Video models 1** - `openrouter.video_models.list` List all video generation models read Questions ## The OpenRouter MCP server, answered. **Is there an OpenRouter MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 146 OpenRouter actions across interns, guardrails, private endpoints and workspaces, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by OpenRouter. **What do I need to connect OpenRouter?** OpenRouter API key (sk-or-v1-…). The free call account { op: "connections.requirements", service: "openrouter" } lists exactly what to paste. **Can an AI agent delete or change things in OpenRouter?** Only if its key allows it, and only with an explicit confirmation. 17 OpenRouter actions are destructive, including delete a file, delete an API key and delete a BYOK provider credential. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my OpenRouter API limit?** actionlake paces every call to the limits in the OpenRouter service file: 600 calls a minute per connection. Repeated reads are answered from cache (61 OpenRouter actions can be), which never reaches OpenRouter. **What does an OpenRouter action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (146 OpenRouter actions page). Cache hits, searches, dry runs and calls OpenRouter refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which OpenRouter API does it cover?** The OpenRouter API 1.0.0 at openrouter.ai/api/v1. It is built from OpenRouter's documentation as read on 23 October 2026. 146 actions in 47 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my OpenRouter data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your OpenRouter credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like OpenRouter Shares the most action names with - [Mistral AI 21](https://actionlake.com/connectors/mistral-ai) - [Fireworks AI 16](https://actionlake.com/connectors/fireworks-ai) - [Claude API (Anthropic) 16](https://actionlake.com/connectors/anthropic-claude-api) - [OpenAI Platform 16](https://actionlake.com/connectors/openai-platform) - [Portkey 12](https://actionlake.com/connectors/portkey) - [xAI Grok API 9](https://actionlake.com/connectors/xai-grok-api) Joins with, on shared entities - [Adobe Frame.io (V4) 4](https://actionlake.com/connectors/adobe-frame-io-v4) - [Slack 3](https://actionlake.com/connectors/slack) - [Canvas LMS 3](https://actionlake.com/connectors/canvas-lms) - [Appwrite Cloud 3](https://actionlake.com/connectors/appwrite-cloud) - [MongoDB Atlas 3](https://actionlake.com/connectors/mongodb-atlas) - [Gitea 3](https://actionlake.com/connectors/gitea) Browse - [All AI connectors](https://actionlake.com/connectors/category/ai) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by OpenRouter; the name is the vendor's own. Counts are from the OpenRouter service file, version 1.0.0. ## Give your agent OpenRouter today. [Connect OpenRouter free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/openrouter More: https://actionlake.com/llms.txt