Blog

Use Kimi K3 through your agent — without exposing your OpenRouter key

July 17, 2026

Kimi K3 launched this week, and the fastest way for most agents to reach it is an OpenRouter API key. Which raises the usual question: do you really want to paste that key into another agent config file?

You don't have to. Agent Master Key ships an OpenRouter connector template that keeps your key in the encrypted vault on your Mac. Here is the whole setup:

1. Connect OpenRouter

In Agent Master Key, choose the OpenRouter connector and paste your OpenRouter API key once. It is encrypted with AES-256-GCM and stored locally — it is not uploaded to us, and it will not sit in any agent's config file.

2. Hand your agent a stand-in key

Connect your agent (Claude Desktop, Codex, or any MCP-compatible agent — Agent Master Key writes the MCP setup for you). The agent receives a scoped amk_live_ key that only works through the broker on your Mac. Off your machine, it's useless.

3. Point it at Kimi K3

Your agent calls OpenRouter through the broker with a Kimi K3 model id (for example moonshotai/kimi-k3). The broker injects your real key into the outbound request itself, scrubs credential-shaped values from responses, and records the call in your local audit trail. Done with the experiment? Revoke that one agent key — your OpenRouter key never needs rotating, because the agent never had it.

The honest footnote

OpenRouter is one of our bring-your-own-key connector templates. GitHub and Telegram are the connectors we have live-proven end to end and vouch for today; the rest of the catalog brokers your own key through the same local vault, subject to each provider's own current-build verification. The security page states exactly where the boundary sits. And during the launch window, all of this — unlimited agents, unlimited connectors, bring-your-own-key included — is free for a limited time.

Deeper dive on The AMA Hub, our sister publication: use Kimi K3 without exposing your OpenRouter key.

Agent Master Key is live — and Premium is free for a limited time

July 16, 2026 · AI Appreciation Day

Today, on AI Appreciation Day, Agent Master Key goes live — and Premium is free for a limited time. Agents are doing real work now — writing code, triaging email, and operating across your accounts — and raw credentials do not belong in their config files. Agent Master Key is built to give agents scoped, revocable access without placing raw provider credentials in the agent's hands.

What it is

Agent Master Key is a Mac app with one promise: give your agent access, not your keys — kill it in one step.

Provider credentials are stored in an AES-256-GCM encrypted local vault and used by the loopback broker to make approved provider requests. Each agent receives a scoped, revocable stand-in key rather than the raw provider credential. Broker decisions land in a local, redacted audit trail, and any grant can be undone: revoke one key, or use the kill switch to pause scoped agent calls. Safe reads proceed inside the granted scope; risky writes wait for your explicit approval.

No security product should make you guess, so the security page states plainly where the boundary sits and what sits outside it. We'd rather you read the honest version there than hear a stronger claim from us anywhere else.

New to the pattern? The AMA Hub's plain-language primer on what a credential broker for AI agents is explains why this design exists.

The launch decision

This free launch includes launch access to all product capabilities. This preview build will keep that access. We are opening it broadly so real users can test the product, report issues, and help shape what comes next.

How launch claims are proved

Connector and distribution claims are bound to the exact sealed release candidate. The public download is promoted only after physical QA and a public re-download match the release receipt. Bring-your-own-key providers are included in launch access, while each provider workflow remains subject to its own current-build verification.

What happens later

This free-launch build will not be remotely downgraded. If later releases introduce different commercial terms, we will announce them here at least seven days before they apply.

How to help

Download it. Break it. Tell us. The most valuable thing you can do is run Agent Master Key against your real agents and report what you find — what broke, what confused you, and what's missing. The community page routes public discussion, private support, and confidential security reports.

Today, on AI Appreciation Day, give your agents access — and keep your keys.

— The AMK team · AM Accelerated LLC