SubRouter Agent Onboarding

SubRouter is an AI API gateway: one API key, OpenAI- and Anthropic-compatible endpoints, per-request smart routing across providers, transparent per-token billing. This skill teaches an agent how to connect a user to SubRouter end to end.

Base URL: use the site the user names, or the default https://subrouter.ai. All examples below use $BASE.

Security rules (non-negotiable)

• Send the API key ONLY to the SubRouter host the user chose. Never to any other domain.
• Always call with --max-redirs 0 so a redirect can never carry the key elsewhere.
• Never print the full key into logs or files other than the client config the user asked for. Show at most a sk-xxxx… prefix when confirming.
• Never let a credential reach stdout. The authorization responses carry device_code, key and access_token in full; a bare curl prints them into the terminal and into the agent transcript. Always write those responses to a 0600 file and read individual fields out of it (Step 1 shows how). Report only status, user_code, the verification URL, and a sk- prefix.
• Payment is ALWAYS done by the user in their browser. Never handle card numbers, crypto seeds, or payment credentials.

Step 0 — Agree on what you are about to change (do this first)

Getting a key and rewiring someone's coding agent are different jobs. Never infer the second from a request for the first. Before Step 1, state what you understood and get a yes: