Chat app
Solrouter chat at solrouter.com: every normal message is sealed in your browser, history stays on your device, and Agent mode with Notion or GitHub is available unsealed.
Solrouter chat at solrouter.com/chat is a chat app that answers only with open-weight models. There is no OpenAI, Anthropic, or Google model behind it.
Getting started
Sign in
Open solrouter.com/chat and sign in with an email address or a Solana wallet. There is no KYC. If you sign in with email and have no wallet, one is made for you.
Not signed in? Guests get 5 sealed messages a day.
Use your free messages
Every signed-in account gets 5 free messages. A message uses a call from your plan first, then a free message, then $0.02 of USDC balance.
Pick a plan
Pro is $9 for 2,000 calls, Builder $49 for 12,500, and Scale $99 for 30,000, each per 30 days in USDC. No crypto? Pay by card through MoonPay. See Pricing.
Pick a model and chat
Choose a model in the composer and send your message. If a model's node was idle, the first reply can say "Nosana GPU node is warming up". Wait a moment and send it again.
Models
| Model | Note |
|---|---|
| GPT-OSS 20B | Default |
| Qwen 3.8 27B | Uncensored |
| Qwen3 Coder 30B | Coding |
Each has 8K tokens of context and up to 4K tokens of output. See Models.
What is sealed in the app
Every normal chat message is sealed, whether you are signed in or a guest. The browser encrypts the prompt to the enclave's key and sends it to POST /tee/process. Solrouter's backend relays ciphertext and cannot read it. There is no plaintext fallback: if sealing fails, the app shows an error and sends nothing.
The enclave calls the model's GPU. For Qwen3.5 122B that is an H200 GPU enclave whose host cannot read your words. For the smaller models it is a Nosana GPU node, and that node sees the prompt and the reply in plaintext while it runs the model; Solrouter does not control that hardware.
| Feature | Sealed |
|---|---|
| Chat prompts and replies, signed in or guest | Yes |
| Plain-text file attachments | Yes. The text rides inside the sealed prompt |
| Recent turns and remembered facts sent as context | Yes. They ride inside the sealed prompt |
| Agent mode (default) | Yes. The agent runs inside the enclave with web search, token price and security, trending tokens, swap quotes and wallet balances |
| Agent mode with Extended tools (Notion and GitHub connectors, scraping) | No. Badged "Not sealed". The tool loop runs on the backend |
Each sealed reply carries a lock link to its Solana receipt. See Check a reply yourself.
History stays in your browser
Sealed chat history is stored in your browser's IndexedDB, not on Solrouter's servers. It does not sync across devices, and clearing site data erases it. The server keeps only the chat row: the title "New Chat", the model, and timestamps. The real title and every message stay on your device. Agent mode messages are still stored on the server.
Privacy screen
Sharing your screen or chatting in public? Turn on Privacy screen next to the Sealed badge above the message box. Messages stay blurred until you hover over one, or tap it on a phone. The setting is remembered in this browser, and it only changes what is shown on your screen, not how messages are encrypted.
Not available in sealed chat
The enclave receives one sealed prompt and nothing else, so features that need the backend to read your words are off:
- Live web search and the knowledge base (RAG)
- Connectors and scraping. Turn on Extended tools in Agent mode for these, which is not sealed
- Automatic memory capture. Saying "remember that ..." still works, and the fact is encrypted with your wallet key
- Image and document attachments. They are refused before upload. Paste the text or attach a plain-text file instead
For who can read what, see What is private here.
Features
Agent mode
Switch the composer to Agent and the model can search the web, read Solana data, and call tools. Not sealed.
Connectors
Turn on Extended tools in Agent mode, then connect Notion or GitHub. The tools only read. Not sealed.
Text files
Attach plain-text files to a sealed message. Images and documents are refused in sealed chat.
Local history
Sealed chats are kept in your browser. They survive a reload but do not sync to other devices.
Image and video generation is Archived. It is disabled in the chat app.