Ask anything.
Nobody can read it.

Every model. A label that says who can read it. Prices below the labs.

What happens to a message

Locked on your device. Opened only inside the chip.

your deviceSealed

Encrypted to one verified chip.

hush0Routed

We move bytes we can't read.

enclaveAnswered

The model runs inside the hardware.

back to youReceipted

The chip signs what ran.

Three ways in

Three ways in.

For people

Chat

Every model, one place. History stays on your device.

Open the app
For developers and agents

API

One OpenAI-compatible key. Agents pay per call, no account.

Read the docs
For credit holders

Sell

List unused API credit. Earn on every request it serves.

Start selling
The label

Every model tells you who can read it.

SealedNobody. Decrypted only inside a verified enclave.llama · qwen · deepseek · kimi
PrivateThe machine, for one moment. Zero retention.open models on partner GPUs
AnonymizedThe lab that made it. They see the text, not you.claude · gpt · gemini · grok
LocalOnly you. Runs on your device. Free.in-browser · your hardware
hush0 · sealed session09:42
Summarize the lease my landlord sent and flag anything unusual.
Three things stand out. The early-termination fee is two full months, which is above the local norm. Clause 14 lets the landlord enter with 12 hours' notice instead of 24. And the security deposit clause doesn't state a return deadline.
attestationverified · nvidia cc · 09:42:11
enclave measurementa4f1…9c2e
model weightssha256 71bd…04ae
decrypted outside enclavenever
served byseller #2291 · key never exposed
you paid$0.0031 · 62% below list
Prices

Private shouldn't cost extra.

Supply is unused credit, listed by the people who hold it. Output, per million tokens.

ModelWho can read itListHere
Claude Fable 5.1anonymized$50.00$10.00
GPT-6 Astraanonymized$50.00$11.50
Claude Sonnet 5anonymized$10.00$2.20
Kimi K3sealed$13.30$3.90
DeepSeek V4 Prosealed$1.74$0.61
Llama 4 Mavericksealed$0.85$0.32
Qwen 3.8 235Bprivate$1.20$0.38
Gemini 3.8 Flashanonymized$3.75$0.75
Liquidity book
How it's priced
  • Deposit stays in dollarsFrom $5. Pay per request.
  • Better prices serve firstSellers set 10% to 80% off.
  • The real model, provablyEvery reply carries the weight hash.
API and agents

Two lines to switch.

Change the base URL and the key. Everything else works as it does today.

  • One key, every model
  • Privacy floor per request
  • Agents pay per call, no account
  • Receipt on every response
# before OPENAI_BASE_URL=https://openrouter.ai/api/v1 OPENAI_API_KEY=sk-or-v1-… # after OPENAI_BASE_URL=https://api.hush0.ai/v1 OPENAI_API_KEY=sk-hush0-… # optional: never go below sealed X-Privacy-Floor: sealed # comes back on every response X-Privacy-Level: sealed X-Attestation: verified;nvidia-cc;a4f1…9c2e X-Weights-Sha256: 71bd…04ae X-Cost-USD: 0.0031
Sell

Unused credit expires. Sell it instead.

List a key you don't fully use. Set your discount. Earn in USDC.

  • Paste a keyPick how much to offer and at what discount.
  • It's sealedNo employee can read it. No buyer ever sees it.
  • Earn per requestWithdraw from $10. No payout fee.
Questions

Straight answers.

Is Claude really private here?

Partly. Anthropic sees the text, not you. We keep nothing. For nobody-can-read-it, pick a Sealed model.

What does "Sealed" mean?

Encrypted in your browser to a key only one verified chip holds. We route ciphertext we cannot read.

Where does the discount come from?

People sell credit they won't use. You pay the best offer. We take a small spread.

Do you store my prompts?

No. Model, tokens, cost and timing only. Never the text.