zeroseal
ZEROSEAL · EARLY ACCESS

Your AI gateway.
Open to verification.

A verifiable TEE gateway for developers who want evidence of what runs between their app and a model provider. Accounts are open. Model calls and live attestation are coming soon.

Create an account Explore verification →
python · connection preview · not live yet
from openai import OpenAI

client = OpenAI(
    base_url="https://gw.zeroseal.cc/v1",
    api_key="YOUR_ZEROSEAL_API_KEY",
)
gateway · planned trust boundary
# Inside the Intel TDX guest
req  := receive(tls_in_td)
key  := authenticate(req)
up   := route(req.model)
resp := stream(up, req.body)
# No prompt or response storage
# Verify measurements + TLS binding
gateway → coming soon
02 · VERIFICATION

Check the running system.

Our gateway design combines reproducible measurements, Intel TDX attestation and TLS channel binding. Live evidence for the Singapore deployment will be available when model access opens.

REPRODUCIBLE MEASUREMENTS

Compare the deployed software.

Recompute RTMR1 and RTMR2 from the matching release and compare them with the measurements in its TDX quote. Verification tools are available in our public repository.

release → reproduced measurements → quote
TLS CHANNEL BINDING

Check the connection to the TD.

Bind attestation evidence to the exported keying material of your TLS session. A proxy that terminates TLS creates a different session and cannot match your client's value.

your TLS session → EKM → bound evidence
gw.zeroseal.cc/v1PLANNED TEE SCOPE

The gateway will terminate TLS inside the TD and forward model requests without storing prompts or completions. The selected upstream model provider receives the request to run inference; its own data handling remains outside this TEE boundary.

zeroseal.ccSTANDARD WEB SERVICE

The website and console manage accounts, API keys, balances and usage records. They run outside the TEE and do not carry model prompts.

What verification covers

Does open source alone prove what is running?

No. The intended check compares a matching release with hardware-signed attestation evidence and binds that evidence to your connection.

Can I verify the overseas gateway today?

Not yet. The Singapore gateway and its live verification flow will be delivered together with model access. The website being online does not mean that gateway attestation is available.

What happens when the gateway is updated?

Measurements change with a release. Verification must use the corresponding release artifacts.

Falicitas/zeroseal-verifierInspect the open-source measurement reproduction tools.
03 · MODEL ACCESS

One API. A visible trust boundary.

An OpenAI-compatible interface is planned for the overseas gateway. The model catalog and USD pricing will be published when calls are available.

AVAILABLE NOW

Set up your account.

Sign in with an email code, create API keys and view your USD balance. Overseas accounts, keys and credits are separate from zeroseal.cn.

COMING SOON

Try the gateway.

Initial model access will use manually granted test credits. There is no checkout or paid plan during this test. Contact us to discuss access.

04 · GETTING STARTED

Start with an account.

Registration is open. Model calls are not available yet.

  1. Open the console and verify your email. Your first sign-in creates an account with a zero balance.
  2. Create an API key and save it when it is shown. The full key cannot be retrieved later.
  3. Contact us for test credits. After credits are added, refresh the console to see your USD balance.
  4. When model access opens, use https://gw.zeroseal.cc/v1 with your key and a model from the published catalog.
Open consoleContact us →