Architecture

Every part of Solrouter on one interactive map: what each part holds, what it can see, and where the code lives.

Solrouter has a handful of moving parts. This map shows all of them at once: what each part holds, what it can see, and where the code lives. Each page in this section zooms into one piece. It gets technical, and every claim points at the code.

Click a node to open its details. Drag to pan. Pinch to zoom.

Chat app

Encrypts in the browser

@solrouter/sdk

Encrypts before send

@solrouter/mcp-server

Your machine, 22 tools

REST and x402 clients

API key or wallet, you encrypt

Solrouter backend

Blind relay, keys, billing

Intel TDX CVM

Phala dStack, tee-service

Nosana GPU node

One job per model, Ollama

Solana

Light compressed receipts

Umbra mixer plus Jupiter

Private swaps

Soon

Coinbase x402 facilitator

From the live manifest

React Flow

Select a node to see what it holds and what it sees.

In words

Chat app (solrouter.com/chat): holds your wallet session and, in Maximum Privacy Mode, encrypts each prompt in the browser. In the default mode it sends plaintext to the backend.
@solrouter/sdk: holds your API key and encrypts by default. Sends the ciphertext bundle plus the API key, model id, and chat id in plaintext.
@solrouter/mcp-server (your machine): holds SOLROUTER_API_KEY, SOLROUTER_API_URL, and BRAVE_API_KEY. Four tools use the encrypted path for the model step. Search and market lookups go to third parties in plaintext.
REST and x402 clients: send whatever they build. POST /api/v1/chat/completions and /tee/process require encryptedPrompt; /agent accepts plaintext or encryptedPrompt.
Solrouter backend (behind api.solrouter.com): checks the key, bills, runs the x402 paywall, relays ciphertext to the enclave, and commits receipts with its deployer wallet. It holds no decryption key on the encrypted path.
Intel TDX enclave on Phala dStack: generates an X25519 sealing key and an ed25519 signing key at boot, decrypts with RescueCipher, requests TDX quotes from the tappd agent, runs a 5-tool allowlist for encrypted agent mode, and hosts SearXNG in the same enclave.
Nosana GPU node, one per model: runs the open-weight model in Ollama and sees the prompt and reply during inference. Solrouter does not control that hardware.
Solana: holds one Light Protocol compressed receipt per private inference, under program ATMRatMtsKX4bHax7U4FRdhbE4mjU4NKpDZGqZqAhBKb.
Umbra mixer plus Jupiter (Soon): the private-swap path. The backend orchestrates it; no mainnet run is confirmed.
x402 facilitator: the live manifest advertises Coinbase. Which facilitator settles a payment is set on the server and is not visible from outside. The agent never talks to the facilitator.