Trusted Unified LLM API Gateway.
Built on cryptography and trusted execution environments (TEE)
Leading models, from just 1%* of official prices
Leading intelligence. Within reach.
of official prices
OpenAI
Claude* The lowest price applies to selected models and supply. See model pricing for current prices and availability.
What have we made possible?
Verifiable protection for models, channels and privacy.
Your chosen model cannot be secretly replaced.
Your selected plan cannot be mixed with lower tiers.
The platform cannot read your prompts or answers.
Trust, backed by evidence.
Published source does not prove what is running on the server.
Verify program identity
Protect execution
Connect to the verified program
What is public is what runs.
Using reproducible builds and runtime measurements, the local open-source client verifies the source-to-program match before establishing an encrypted connection.01 / Remote attestation
Our companion open-source client runs on your own computer.
It verifies that the PrimeRouter program handling your request matches the public source and build artifacts. Your content is sent only after verification passes.
View source on GitHubOpen code for you to inspect.
Link source to the released artifact.
Verify program identity through AMD or AWS remote attestation.
Verify on your computer. Connect only if it passes.
Verification runs on your computer. The verification code is open too.
Remote attestation identifies the running artifact. Reproducible builds connect that artifact to public source.02 / What is a TEE?
A trusted execution environment is a hardware-protected space for running programs. PrimeRouter runs inside it, with runtime memory and state isolated from the host. Even host administrators cannot directly read or modify its protected memory.
Remote attestation verifies the program’s identity. The TEE protects its execution.
03 / What is end-to-end encryption?
End-to-end encryption encrypts content at the sender and decrypts it only at the receiver. Here, the endpoints are our open-source client on your computer and PrimeRouter inside the TEE. The relay forwards ciphertext without decryption keys.
The relay uses routing metadata and signed usage receipts for scheduling and billing. The program inside the TEE calls the model provider over TLS; the provider performs inference.
TEE protects execution. End-to-end encryption protects transit.Verify the program. Then connect securely.
Become a PrimeRouter partner
Have a Codex or Claude subscription, or an API key?
Sell unused capacity. Keep plaintext credentials off the platform.
Withdraw your earnings or spend them on model services.
The open-source client encrypts credentials before submission. The platform cannot read them.
Credentials are used inside the isolated environment to call model providers.
Calls are recorded and settled using signed usage receipts.
PrimeRouter open-source client
Keep your workflow. Verification and encryption happen locally.
Connect through compatible OpenAI and Claude API endpoints.
Open sourceLocal verificationEnd-to-end encryption
