Private SillyTavern API Backend: Verifiable Privacy, Crypto Pay
Use TrustedRouter as your SillyTavern API backend: OpenAI-compatible, no prompt or output logs, hardware-attested, with crypto pay-per-request.
Point SillyTavern at an API that never logs prompts or outputs and proves what it runs.
SillyTavern speaks OpenAI-compatible chat completions, and so does TrustedRouter. Set the endpoint, paste a key, pick a model. No extension, no proxy script. You get 220+ model routes across 30+ providers: Claude, GPT, Gemini, DeepSeek V4, Kimi K2.7, GLM-5, Qwen 3.5, MiniMax M3, and more, with automatic rollover to another provider when one goes down.
The difference is what happens to your chats afterward. TrustedRouter never logs prompt or output content. Ordinary synchronous and streaming inference does not retain it. The opt-in Batch API temporarily retains enclave-encrypted artifacts for up to 30 days. The prompt path runs inside a hardware-attested confidential-compute gateway. The gateway source is open, the image digest is published, and the attestation is checkable live from your own terminal. It binds to your TLS session, so it cannot be replayed.
# SillyTavern → API Connections
# Chat Completion Source: Custom (OpenAI-compatible)
# Endpoint: https://api-azure.trustedrouter.com/v1
# Model: trustedrouter/auto
# Verify the gateway before you trust it
NONCE=$(openssl rand -hex 16)
curl "https://api-azure.trustedrouter.com/attestation?nonce=$NONCE"
# JWT signed by the CPU vendor's root keyStorage you can check
Provider logging toggles ask you to believe a settings page. An attested gateway lets you fetch a JWT signed by the CPU vendor's root key and compare the image digest against the published open-source build. Privacy you can check beats privacy you're promised.
ZDR and TEE, labeled per route
Every route carries a tier. Zero-Data-Retention means the provider contractually keeps nothing. TEE means end-to-end confidential compute, where even the provider cannot read the prompt. trustedrouter/cheap always resolves to the cheapest capable route; add a Confidential privacy floor to keep it on TEE routes.
Credits, BYOK, or a wallet
Prepaid credits via Stripe, bring your own provider key, or x402 pay-per-request with Continue with MetaMask sign-in that works without a traditional account. That suits users who prefer not to attach an identity to their chats; the anonymous LLM API page covers the details. Per-model rates are on the pricing page: thin markup over provider list prices.
The same weights behave differently depending on who hosts them.
In our testing, identical GLM weights answered 60 of 60 sensitive questions through TrustedRouter's enclave and 30 of 60 through the vendor-hosted API. That filtering is host-applied, not in the weights. With Confidential privacy (provider.min_privacy "confidential"), prompts never reach the model vendor: a Confidential request routes only to third-party confidential-compute hosts, and fails rather than fall back to the vendor's own API.
Two plain limits. Every model keeps its own refusal behavior on every route, and acceptable-use terms apply to all traffic. What changes is storage and visibility: a no-log LLM API you can audit, with content-stateless real-time inference and explicitly labeled encrypted Batch retention. Moving from OpenRouter takes one base-URL change; keep your SDK, your model ids, and your code.
Current routes, prices, privacy, and measured performance.
Catalog facts come from the routes currently configured in TrustedRouter. Performance uses the same cached metadata snapshot as the public leaderboard. Prompts and outputs are not part of these measurements.
| Model | Providers | Context | Input | Output | Privacy | Measured route |
|---|---|---|---|---|---|---|
Anthropic: Claude Opus 4.8anthropic/claude-opus-4.8 |
|
1,000,000 | $5.275/1M | $26.375/1M | varies 5 cited scores | No measurements yet |
OpenAI: GPT-5.5openai/gpt-5.5 |
|
1,050,000 | $5.275/1M | $31.65/1M | ZDR 3 cited scores | No measurements yet |
Google: Gemini 3.5 Flashgoogle/gemini-3.5-flash |
|
1,048,576 | $1.5825/1M | $9.495/1M | ZDR | No measurements yet |
MoonshotAI: Kimi K2.7 Codemoonshotai/kimi-k2.7-code |
+11
|
262,144 | $0.692291/1M to $1.31875/1M | $3.4815/1M to $4.82135/1M | ZDR 5 cited scores | No measurements yet |
Z.ai: GLM 5.2z-ai/glm-5.2 |
+28
|
1,048,576 | $0.3587/1M to $2.370374/1M | $1.5825/1M to $6.838973/1M | Confidential + ZDR 4 cited scores | No measurements yet |
MiniMax: MiniMax M3minimax/minimax-m3 |
+13
|
1,048,576 | $0.24265/1M to $0.633/1M | $1.0128/1M to $2.532/1M | ZDR 4 cited scores | No measurements yet |
Browse every modelReview provider policiesOpen the full leaderboardSnapshot 2026-10-22T19:44:43Z
Questions
How do I connect SillyTavern to TrustedRouter?
Use SillyTavern's Chat Completion API with a Custom OpenAI-compatible source: set the endpoint to https://api.trustedrouter.com/v1, add your key, and pick any of 220+ model routes, or trustedrouter/auto to let the router choose per request. If a provider goes down, requests roll over to another automatically. Coming from OpenRouter, the only required change is the base URL; your model ids and code carry over.
Does TrustedRouter log my roleplay chats?
TrustedRouter never logs prompt or output content. Ordinary synchronous and streaming inference does not retain it. The opt-in Batch API temporarily retains enclave-encrypted artifacts for up to 30 days. The prompt path runs inside a hardware-attested confidential-compute gateway whose source is open and whose image digest is published. You can request a live attestation, a JWT signed by the CPU vendor's root key and bound to your TLS session, and verify it yourself instead of relying on a policy page. Details are on the security page.
Can I pay without creating a traditional account?
Yes. Besides prepaid Stripe credits and bringing your own provider key, TrustedRouter supports x402 pay-per-request and Continue with MetaMask wallet sign-in, which works without a traditional account. That suits users who prefer not to attach an identity to their chats, though it is a payment option, not an anonymity guarantee. Per-model pricing is listed on the pricing page.
Will models refuse less through TrustedRouter?
Model behavior belongs to the model: upstream refusal behavior applies on every route, and acceptable-use terms apply to all traffic. One published finding of ours: the same GLM weights answered 60 of 60 sensitive questions through TrustedRouter's enclave versus 30 of 60 via the vendor-hosted API, because that filtering is host-applied rather than in the weights. TrustedRouter changes who can read and store your prompts, not what a model chooses to say.