OpenRouter API Keys

Snapshot: 2026-05-25 (UTC)  ·  Source: OpenRouter Management API, cross-checked against local .env files and GitHub Actions secrets  ·  Workspace: Project-Brianstorm (project-brianstorm)

—
Total budget (capped keys)
Sum of per-key limits · excludes unlimited · mixed weekly/monthly
—
Total spend to date
Lifetime usage across all keys in tables
7
Active keys
3
Personal
1
Collaborator
3
Shared (automation / service)

Assignment legend

Who owns the key and whether it is ever stored in shared systems (GitHub, deploy pipelines, servers).

Personal One person only. Local .env, gitignored — never in GitHub or org-wide secret stores.
Collaborator Issued to another employee for their machine only. Not in repo or CI; they hold the key locally.
Shared Automation (CI) or a always-on service (bot, Cloud Run). Multiple people or systems can trigger spend; key lives in GH secrets, server .env, or GCP.

Project-Brianstorm workspace guardrails on

All project keys live here for spend caps, observability, and workspace-level guardrails. Click a column header to sort.
brainstorm-dev Personal Shawn (techno) · local machine only · not in GitHub sk-or-v1-569…ebd $50 monthly $50.00 $0.00 brainstorming/.env Your local dev — gateway demo, compose smoke, integration tests, seed scripts. Do not share or commit.
brainstorm-ci Shared GitHub Actions · org repo secret · any CI run on main sk-or-v1-63d…7e4 $10 weekly $10.00 $0.00 GitHub secret OPENROUTER_API_KEY CI only — gateway-smoke demo verify on main pushes (~4 LLM calls, <$0.01/run). Not used on PRs.
hermes-PM-agent Shared Service · Hermes bot on Zima · deployed via sync-env.sh sk-or-v1-2f5…b6f $30 monthly $30.00 $0.00 hermes-agent/.env → Zima 24/7 Hermes PM Discord agent. Raised to $30/mo (2026-05-25) — monitor usage before adjusting again.
brainstorm-cursor-cloud-agent Personal Shawn · Cursor cloud settings · not in repo sk-or-v1-f6d…650 $10 monthly $10.00 $0.00 Cursor cloud agent UI Your Cursor cloud / background agents on the brainstorming repo.
command-tower Shared Service · Command Tower on Cloud Run · team deploy surface sk-or-v1-216…205 $20 weekly $20.00 $0.02 command-tower/.env → GCP (planned) Command Tower Discord gateway (EA/PM/EM). Shared product runtime — not personal dev.
hung-do-dev Collaborator Hung Do · his local machine only · not in GitHub sk-or-v1-aff…861 $50 weekly $50.00 ~$0.00 Hung's local .env Hung's personal dev key for local gateway and experimentation on project-brainstorm.

Default workspace personal

Outside project guardrails — intentionally left in Default Workspace. Click a column header to sort.
techno-opencode Personal Shawn · OpenCode · outside project workspace sk-or-v1-12b…39d none — — $13.73 OpenCode config Personal tooling — not project-brainstorm; no org guardrails.

Wiring map

brainstorming/.env → brainstorm-dev
GitHub OPENROUTER_API_KEY → brainstorm-ci
hermes-agent/.env → zima → hermes-PM-agent
command-tower/.env → command-tower
Cursor cloud agent UI → brainstorm-cursor-cloud-agent
(hung local) → hung-do-dev
Do not copy brainstorming/.env into Hermes — Hermes has its own key and budget.

Not tracked here

Other secrets

  • GCP Secret Manager openrouter-api-key Staging/deploy key for Helm/Terraform — verify with gcloud secrets versions access.
  • OPENROUTER_MANAGEMENT_KEY Repo-root mox/.env only — admin key for listing/creating keys; never used for LLM calls.
  • GLM / Firecrawl / Linear / Discord Non-OpenRouter providers — see assets/hermes-agent/.env.example.

Refresh snapshot

curl -sS -H "Authorization: Bearer $OPENROUTER_MANAGEMENT_KEY" \
  'https://openrouter.ai/api/v1/keys?workspace_id=f7194761-e861-4f12-9c98-46f6ddde97b4' \
  | python3 -m json.tool

After rotating a key, update the wired-to surface and regenerate this page.

Changelog

2026-05-25 Raised hermes-PM-agent limit from $10 → $30/month; monitor before next change.
2026-05-25 Added assignment column (personal / collaborator / shared) and legend.
2026-05-25 Initial snapshot. Migrated project keys from Default Workspace into Project-Brianstorm; rotated dev/ci/hermes/cursor keys; disabled legacy Default-workspace copies.