OpenGen
CLI / API

Create with CLI & API.

Use the portable CLI with browser login, or create one scoped workspace API key.

Open your workspace ↗Create in browser →
OpenGen browser PKCE login / scoped API key

A few steps to get connected.

  1. Obtain the reviewed versioned CLI/skill bundle from your operator and use its offline installer on Node 22.12 or later. No source checkout is needed. Public downloads are pending release review.
  2. Configure MEDIA_ROUTER_URL for your gateway, then run login and status below. Review the paying workspace and read/generate permissions in your browser.
  3. For a backend API integration, create a separate expiring read/generate key in Workspace → API keys. Save it once in your application’s secret manager and send it only in the Authorization header.
After installing the reviewed CLI · gateway URL is public configuration
export MEDIA_ROUTER_URL="https://opengen.dev"
opengen login
opengen doctor
opengen catalog search "image"

Instructions based on OpenGen CLI guide ↗, reviewed 2026-11-03. Client interfaces and permissions can change.

YOU CHOOSE THE WORKSPACE

Review consent

Check the app name, callback destination, permissions and paying workspace. Read allows discovery; generate permits billable jobs within your workspace’s rules. Denying consent grants no access.

Start with discovery

Ask for catalog search, inspect a model and request a quote. Check availability and the spending ceiling before generation. Your new personal workspace starts with zero managed credit.

Stay in control

Manage connected apps and revoke their authorizations in your workspace. Keep API keys separate for each application. Signing out of the website does not revoke an agent’s grant.

If setup stops halfway

The browser sign-in is unavailable

Your deployment must have sign-in configured. Start at your workspace to check availability. Hosted assistants need a publicly reachable HTTPS endpoint; installing code inside their sandbox does not create a hosted connector.

I denied consent or chose the wrong workspace

Start connection again and review the paying workspace before approving. A key stays in its issued workspace. To change an agent’s workspace, revoke its old authorization and sign in again with the intended selection.

Local login expired or was interrupted

Run opengen doctor using the installed CLI. Sign in again when expired or revoked. A stale profile lock requires checking that no OpenGen process is active before removing it; never bypass token-reuse checks or share the profile.

I want to disconnect

Revoke the connected app in OpenGen’s workspace, then remove its client configuration. For OpenGen’s CLI, opengen logout revokes before deleting the private profile. If revocation fails, keep the profile and retry.