> ## Documentation Index
> Fetch the complete documentation index at: https://openrouter.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Ori Harness

> Run your existing agent CLI on OpenRouter with any model, organization guardrails, and one bill

Ori Harness runs the agent CLI you already use on OpenRouter. One command runs the agent CLI you already have, with OpenRouter credentials, models, and environment set up for you. Your workflow does not change.

## Bring your own agent

Use Claude Code, Codex, Hermes, or OpenCode with the commands you already know:

```text theme={null}
ori claude
ori codex
ori hermes
ori opencode
```

These commands launch the real agent CLI on your machine. Ori runs the CLI already on your `PATH`. If it is not installed, Ori tells you how to install it and lets you try again.

The [install-ori-harness skill](https://openrouter.ai/skills/install-ori-harness) gives a coding agent the same steps:

```text theme={null}
run curl -fsSL https://openrouter.ai/skills/install-ori-harness and follow the instructions in its output to get started
```

## Sign in instead of managing keys

Install Ori:

```sh theme={null}
curl -fsSL https://openrouter.ai/labs/ori/install.sh | bash
```

Then run an agent. Ori uses OAuth PKCE with your existing OpenRouter login. A browser opens for sign-in. There is no new account and no key to create or paste.

You can also sign in before your first run:

```sh theme={null}
ori login
```

<Note>
  Your models, credits, and organization settings come with your OpenRouter
  login. You do not need to manage a separate provider key for each agent.
</Note>

Upgrade Ori with:

```sh theme={null}
ori update
```

## Any agent, any model

Pass `--model` with any OpenRouter model ID:

```sh theme={null}
ori claude --model anthropic/claude-sonnet-4.6
ori codex --model openai/gpt-5.2
ori hermes --model openrouter/auto
ori opencode --model openrouter/auto
```

One flag picks the model. Everything after the flags goes to the agent untouched:

```sh theme={null}
ori codex --model google/gemini-3.6-flash --full-auto
```

Your usual agent flags still work. The model can come from any provider in the OpenRouter catalog.

<Tip>
  Use your agent's normal flags after Ori's flags. Ori keeps them unchanged and
  passes them to the agent.
</Tip>

## Guardrails, on every agent

Configure [guardrails](/docs/guides/features/guardrails), allowlists, and per-workspace permissions on your OpenRouter organization. Set [workspace budgets](/docs/guides/features/workspaces/workspace-budgets) there too. OpenRouter enforces these controls on every request, whatever client makes it—including an agent running through Ori.

## One bill across agents

Ori traffic uses OpenRouter's normal billing and activity reporting. It appears alongside your other OpenRouter traffic in [Usage Accounting](/docs/cookbook/administration/usage-accounting) and [Activity Export](/docs/cookbook/administration/activity-export). There is no separate Ori bill.

## Frequently asked questions

### Do I need an OpenRouter API key?

No. Ori signs you in with OAuth PKCE through your existing OpenRouter login. There is no key to copy or paste.

### Do I need to change my agent workflow?

No. Keep the same agent and the same commands and flags. Your workflow does not change.

### Which agents are supported?

Claude Code (`ori claude`), Codex (`ori codex`), Hermes (`ori hermes`), and OpenCode (`ori opencode`) are supported today, with more harnesses on the way.