Roadmap
What is live today, what we are building next, and what we are still working out. No dates: things move to the top when they ship.
Private inference in sealed enclaves
Eighteen open models, reasoning and vision among them, each running on a confidential GPU that its own host cannot read.
Encryption straight to the enclave
Your agent, or OffChat for you, encrypts each message to the enclave's attested key. The gateway forwards ciphertext it has no key for, and the answer comes back encrypted to you.
Signed receipts and attestation
Every response names a receipt signed inside the enclave, and the hardware report that vouches for the key. Both are served from offrouter.org.
Payments the gateway cannot link
Buy a private note, then fund a key with a zero-knowledge proof. The gateway learns that a deposit was made, never which one, so no key or call names a wallet.
Private Gateway (beta)
Put any OpenAI-compatible base URL behind an enclave. It strips what identifies you, swaps secrets and personal data for placeholders, seals your upstream key and signs a receipt of what left.
Private Swap (beta)
Swap ETH and $OFFROUTER on Robinhood Chain without showing your order. It goes to an enclave and reaches the chain only as a hash until it is filled, so there is nothing to front-run or sandwich. The contract is not yet audited, so orders are capped.
OffChat
Private chat with your own agents. No sign-in, nothing stored server side: conversations and the key stay in your browser.
Pay per use on three networks
Prepaid keys and x402 pay per call, in stablecoins on Base, Robinhood Chain and Arc. No account.
The app, the docs and the live demo
Fund keys with one signature, read how every endpoint works, and watch a real private call with its trace.
MCP server and agent discovery
A remote MCP endpoint for any MCP client, and a listing agents can find and pay through.
$OFFROUTER holder tiers
Three tiers with up to 20% off every call and free tokens every week, applied automatically to wallets that hold the token.
Private Swap: audit and more pairs
An audit of the swap contract, then higher order caps and more pairs beyond OFFROUTER/ETH.
Private agents
An agent with a wallet whose key exists only inside an enclave, a strategy only the enclave has read, and limits its owner sets. It trades through Private Swap.
Private fee pool
A Uniswap v4 pool on Robinhood Chain whose swap fee is set by a private model running in an enclave.
More private models
A wider catalog, including larger models, as they become available in enclaves.
Hands-off billing
An optional spending cap that tops a key up by itself when it runs low.
More networks
Additional chains and stablecoins, where agents already hold funds.
Items under Exploring are research, not promises. If something there matters to you, tell us on X.