Sealed inference, drop-in.
Cloister is an OpenAI-compatible API over TEE-attested models. Change one line — your base URL — and your prompts run sealed.
01 Quickstart
Get a cloi- key from the dashboard (free credit, no email). Then point any OpenAI client at Cloister:
# base URL is the only change curl https://api.cloister.space/v1/chat/completions \ -H "Authorization: Bearer cloi-XXXX-XXXX-XXXX-XXXX" \ -H "Content-Type: application/json" \ -d '{"model":"deepseek-ai/DeepSeek-V3.2-TEE","messages":[{"role":"user","content":"hi"}]}'
base_url = https://api.cloister.space/v1.02 What "sealed" means
Every model Cloister serves runs inside a Trusted Execution Environment (Intel TDX / AMD SEV-SNP / NVIDIA Confidential Compute) — a hardware enclave the machine's own operator cannot read into. Your prompt is computed behind a wall of silicon, not a privacy policy.
Honest boundary: your request passes through our gateway in the clear for the instant it takes to route it, and we keep no logs. Sealed at the model; no logs at the proxy. We never claim we "can't see it at all" — that's the overclaim we're built to avoid.
03 Models
12 TEE-attested models, all vendor-prefixed. GET /v1/models returns the live list + per-token prices.
| Model | Note |
|---|---|
| deepseek-ai/DeepSeek-V3.2-TEE | general, strong |
| moonshotai/Kimi-K2.6-TEE | long context |
| Qwen/Qwen3.5-397B-A17B-TEE | MoE, large |
| mistralai/Mistral-Nemo-TEE | clean, fast default |
…and 8 more — see /v1/models | |
04 Endpoints
| Endpoint | Does |
|---|---|
| POST /v1/chat/completions | Sealed chat completion (proxied, debited per call) |
| GET /v1/models | List TEE models + live prices |
| POST /v1/account/create | Mint a new cloi- code |
| GET /v1/account | Balance, usage, fingerprint |
| POST /v1/account/topup-address | Your unique TAO deposit address |
| GET /buybacks | Public buyback / burn log |
05 Pricing
Pure pay-per-token — the chute's price × a small markup, billed at the live TAO/USD rate. Fractions of a cent per call (~$0.0003 average). Every new key is seeded with free credit so you can try before you fund anything. No subscriptions, no minimums.
06 Buybacks
15% of every inference fee accrues to a transparent treasury on a public endpoint. At threshold it auto-buys $CLOISTER on-market and burns it. A mechanic, not a promise — verify it yourself at api.cloister.space/buybacks. (See the disclaimer: the token is a placeholder, not a security.)
07 Honest FAQ
Can you read my prompt?
Not at the model — that runs in a TEE. At our gateway it's in the clear for a moment to route, and we keep no logs. We won't pretend otherwise.
Do I need the token?
No. The API is paid per-token; $CLOISTER is optional and not required to use anything.
What if I lose my code?
We store only a hash — a lost code can't be recovered, and its balance is gone. Save it.