OpenRouter launches Armor beta to screen agent tool calls before they run
Overview
OpenRouter launches Armor in beta, a guard that checks agent tool calls against policy before the agent executes them.
Armor uses @typesafeai's Jev model and scores each call against a set of rules plus a slice of the transcript, prioritizing user intent. OpenRouter says Armor performs better than Claude Code's auto classifier at a fraction of the cost. In its example, a git push is allowed when the user asked to push their work, while a dangerous command the user never requested is flagged.
Any agent doing inference through OpenRouter can opt in by adding Armor as a plugin with custom rules, configured as [{ id: "armor" }]. OpenRouter also says Armor makes Claude Code's auto permissions mode work with any model, and shares an Ori command that runs Claude Code with a chosen model and the --permission-mode auto flag.
Written by AI from the articles below · updated Oct 15, 5:04 PM ET
Check the sources:
Developments
4 developments
- Oct 15, 5:00 PM ET · 1 articleOpenRouter lets agents opt in to Armor via a pluginOpenRouter: OpenRouter lets agents opt in to Armor via a plugin setting
- Oct 15, 5:00 PM ET · 1 articleOpenRouter introduces Armor, scoring agent tool calls against rules and user intentOpenRouter: Armor scores agent tool calls against rules and user intent
- Oct 15, 5:00 PM ET · 1 articleOpenRouter posts setup command to run Claude Code auto permissions mode with any model via ArmorOpenRouter: Armor makes Claude Code's auto permissions mode work with any model
- Oct 15, 5:00 PM ET · 1 articleOpenRouter launches Armor in beta to guard agent tool callsOpenRouter: OpenRouter launches Armor beta to screen agent tool calls before execution
Article timeline
The articles in this story. Times are ET.
OpenRouter@OpenRouterOfficialOpenRouter lets agents opt in to Armor via a plugin settingAIOpenRouter says any agent doing inference through its platform can enable Armor by adding it as a plugin with custom rules, using the configuration [{ id: "armor" }]. Documentation for the feature is available at
OpenRouter@OpenRouterOfficialArmor scores agent tool calls against rules and user intentAIOpenRouter says Armor checks each tool call against a set of rules and a slice of the transcript, prioritizing user intent. In its example, a git push is allowed when the user asked to push their work, while a dangerous command the user never requested is flagged.

OpenRouter@OpenRouterOfficialArmor makes Claude Code's auto permissions mode work with any modelAIArmor says it makes Claude Code's auto permissions mode compatible with any model. OpenRouter's Ori command runs Claude Code with a chosen model, such as moonshotai/kimi-k3, and the --permission-mode auto flag.
OpenRouter@OpenRouterOfficialOpenRouter launches Armor beta to screen agent tool calls before executionAIOpenRouter launches Armor in beta, a guard that checks agent tool calls against policy before they run. Armor uses typesafeai's Jev model to catch out-of-policy calls that regex filtering often misses. OpenRouter says it performs better than Claude Code's auto classifier at a fraction of the cost.

Heat trend
Not enough continuous observations to show a trend yet.