Your onchain agent thinks, pays, connects and trades. Today, every step is watched. OffRouter is the private router for onchain agents: 01 Private Inference: 18 models in GPU enclaves 02 Private Payments: no account, ZK-funded keys 03 Private Gateway: any endpoint, behind an enclave 04 Private Swap: sealed orders, live in beta Built on @RobinhoodCrypto.

Every swap you make is a signal. Bots see your token, your size and your slippage before you execute, then buy ahead of you and sell back into you. You pay for being seen. Not anymore. Private Swap is live in beta on @RobinhoodChain: your order goes to an enclave and reaches the chain only as a hash until it’s filled. Nothing to read. Nothing to front-run. 🧵

Every swap you make is public. Someone reads it, and trades first. We’re building a swap where your order stays sealed in an enclave until it’s filled. Nothing to front-run. Private Swap. Coming soon.

Four new private models on OffRouter: → glm-5.2: reasoning and tools, $1.26 / $3.00 → qwen3.6-27b: reasoning and vision, $0.32 / $3.25 → qwen3.6-35b-a3b: reasoning and vision, $0.20 / $1.27 → qwen3-vl-30b: vision, $0.20 / $0.70 18 models now, every one sealed in a GPU enclave with a signed receipt. Pay in stablecoins, no account. offrouter.org/models

Roadmap update: more of OffRouter is live. → 14 private models, each in a GPU enclave → Unlinkable payments: fund a key with a ZK proof, no wallet attached → Private Gateway (beta): put any OpenAI-compatible endpoint behind an enclave → OffChat: private chat, nothing stored server side Next up: Private Swap and private agents. offrouter.org/roadmap

We've submitted $OFFROUTER to CoinGecko. The listing request is in. Now it's under review on their side. When it goes live you'll see price, market cap and volume there. We'll post it here when it does.

First repo: an MCP server for our private models. It runs on your machine, verifies the enclave, then encrypts your prompt before it leaves. Our gateway only ever sees ciphertext. Free to try: claude mcp add offrouter -- npx -y github:offrouter/mcp github.com/offrouter/mcp

OffRouter is on GitHub now. We keep saying private inference should be something you can check, not something you take our word for. So the code is going public, one repo at a time. github.com/offrouter

Your AI provider is a server too. If it gets owned, what’s in its request log? Behind OffRouter Private Gateway: → no IP, no user id, just our enclave → [EVM_ADDRESS_1] instead of your wallet → [API_KEY_1] instead of your key → [SEED_PHRASE_1] instead of your seed Two lines of code, any OpenAI-compatible API. Your app still gets the real values back, with a signed receipt. Free in beta → offrouter.org/gateway

Lesson from PHP zero-day: assume the server gets owned. Then ask: what could the attacker read? For most AI APIs: your prompts, in plaintext. For confidential inference: ciphertext. The model runs inside a GPU enclave that even the host can’t look into. Privacy should survive a breach, not just a policy.

DeepSeek V4.1 Flash is live on OffRouter. Released Oct 17. Reasoning, tool calling and image input, running sealed in a GPU enclave. Never logged, signed receipt on every answer. $0.75 in / $1.60 out per 1M tokens. Pay in stablecoins, no account. offrouter.org/models