​
API overview

The v2 origin is https://v2.aius.co. The browser uses a secure session cookie. The terminal uses OAuth authorization-code or device approval and receives separate model and platform MCP grants. Your OpenRouter key is never given to the terminal; the server holds the upstream credential.
EndpointPurpose
GET /v1/modelsFixed AIUS model catalog; model bearer grant required
POST /v1/chat/completionsModel proxy; model bearer grant required
POST /mcp/platformAIUS Web Platform tools; platform bearer grant required
GET /.well-known/oauth-authorization-serverOAuth server metadata
GET /.well-known/oauth-protected-resource/mcp/platformMCP resource metadata
The terminal performs the OAuth flow for you. API clients must use the correct grant for each resource and must not send browser cookies to model or MCP endpoints. See Models for the model IDs accepted by v2.