Automatic API Key Configuration
You can easily save an API key for OpenRouter on your device with a simple operation.
Procedure
Press the Get API Key button on the Settings page to navigate to the OpenRouter authorization page (you will be prompted to sign in if you are not already signed in to OpenRouter). Press the Authorize button to return to this app's settings page, where the API key will be loaded onto your device, and a toast notification will appear on success.
This uses a technology called PKCE.
🔑 What is PKCE (Proof Key for Code Exchange)?
PKCE (pronounced "pixy") is a mechanism for securely obtaining API keys (access tokens) in environments where authentication credentials cannot be kept secret, such as game clients. In standard authentication (OAuth 2.0), a client secret is used to obtain an API key, but embedding this in a game program creates a risk of theft through reverse engineering. PKCE enables secure API authentication even in game apps by generating a disposable "secret passphrase" on the spot for authentication, without using a Client Secret.