The agreement prohibits a range of activities including scraping, automated access beyond reasonable human rates, spam transmission, system interference, uploading malicious code, harvesting personal information, commercial solicitation, identity misrepresentation, and circumventing access controls.
This analysis describes what OpenRouter's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision defines the boundaries of permitted service use and establishes grounds for account enforcement action. Violations may result in account suspension or termination, and the clause authorizes OpenRouter to assess what constitutes an unreasonable load on infrastructure at its sole discretion.
The updated terms establish that users are responsible for all account activity and charges occurring under their API credentials, with the exception of activity directly caused by OpenRouter's breach of the terms. Users are required to promptly notify OpenRouter of any actual or suspected compromise or unauthorized use of API credentials. OpenRouter reserves the right to suspend, revoke, or limit API credentials or account access if OpenRouter reasonably believes doing so is necessary to protect the service, the user, OpenRouter, or any third party. Additionally, promotional credits provided by OpenRouter have no cash value, cannot be refunded or exchanged except under specific conditions, are non-transferable between accounts, and expire on dates specified at issuance or in accordance with the terms. You can manage your API credentials through your account settings and should promptly contact OpenRouter if you suspect unauthorized access.
View change record →The updated terms clarify that enabling prompt logging automatically activates chat logging as well, and grant OpenRouter a perpetual, worldwide license to use your content for service provision and commercial purposes. This includes the explicit right to license or sell your user content in anonymized form. Users accessing Stealth Program models must now also agree to a separate End User License Agreement. You can disable prompt logging in your account settings if you do not wish to grant these permissions.
View change record →This new provision establishes clear restrictions on automated access, scraping, and improper use of the service infrastructure.
View full change record →Under this clause, users are contractually prohibited from a defined list of activities including scraping, automated over-access, spam, and identity misrepresentation. OpenRouter retains sole discretion to determine whether a user's activity imposes an unreasonable infrastructure load, which may affect account standing.
How other platforms handle this
Use our Services in relation to any political campaign financing or for the purpose of influencing any election, other than sharing your own personal political opinions;
Send bulk emails, meaning commercial or marketing emails directed to a number of individuals with the same content, through Mailchimp Inbox.
use TikTok Content...another user's content or generative AI-enabled features for commercial purposes unless permitted by TikTok USDS Joint Venture or the user, respectively...
"You agree not to engage in any of the following prohibited activities: (i) copying, distributing, or disclosing any part of the Service in any medium, including without limitation by any automated or non-automated "scraping"; (ii) using any automated system, including without limitation "robots," "spiders," "offline readers," etc., to access the Service in a manner that sends more request messages to the OpenRouter servers than a human can reasonably produce in the same period by using a conventional online web browser; (iii) transmitting spam, chain letters, or other unsolicited email; (iv) attempting to interfere with, compromise the system integrity or security or decipher any transmissions to or from the servers running the Service; (v) taking any action that imposes, or may impose at our sole discretion an unreasonable or disproportionately large load on our infrastructure; (vi) uploading invalid data, viruses, worms, or other software agents through the Service; (vii) collecting or harvesting any personally identifiable information, including account names, from the Service; (viii) using the Service for any commercial solicitation purposes; (ix) impersonating another person or otherwise misrepresenting your affiliation with a person or entity, conducting fraud, hiding or attempting to hide your identity; (x) interfering with the proper working of the Service; (xi) accessing any content on the Service through any technology or means other than those provided or authorized by the Service; or (xii) bypassing the measures we may use to prevent or restrict access to the Service.Excerpt from OpenRouter's Terms of Service
1) REGULATORY LANDSCAPE: The prohibition on harvesting personally identifiable information may engage the CFAA (Computer Fraud and Abuse Act) and applicable state computer crime statutes.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision defines the boundaries of permitted service use and establishes grounds for account enforcement action. Violations may result in account suspension or termination, and the clause authorizes OpenRouter to assess what constitutes an unreasonable load on infrastructure at its sole discretion.
Under this clause, users are contractually prohibited from a defined list of activities including scraping, automated over-access, spam, and identity misrepresentation. OpenRouter retains sole discretion to determine whether a user's activity imposes an unreasonable infrastructure load, which may affect account standing.
ConductAtlas has identified this type of provision across 282 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenRouter.