Skip to main content
POST
/
auth
/
keys
Exchange authorization code for API key
curl --request POST \
  --url https://openrouter.ai/api/v1/auth/keys \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "code": "auth_code_abc123def456",
  "code_challenge_method": "S256",
  "code_verifier": "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk"
}
'
{
  "key": "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",
  "user_id": "user_2yOPcMpKoQhcd4bVgSMlELRaIah"
}

Authorizations

​
Authorization
string
header
required

API key as bearer token in Authorization header

Body

application/json
​
code
string
required

The authorization code received from the OAuth redirect

Example:

"auth_code_abc123def456"

​
code_challenge_method
enum<string> | null

The method used to generate the code challenge

Available options:
S256,
plain,
null
Example:

"S256"

​
code_verifier
string

The code verifier if code_challenge was used in the authorization request

Example:

"dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk"

Response

Successfully exchanged code for an API key

​
key
string
required

The API key to use for OpenRouter requests

Example:

"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"

​
user_id
string | null
required

User ID associated with the API key

Example:

"user_2yOPcMpKoQhcd4bVgSMlELRaIah"