MagmaRouter

We are MagmaRouter. One key into the uncensored, abliterated and niche models the mainstream APIs will not serve.

Featured Venice: Uncensored

Venice: Uncensored UNCENSORED 128K context

Impact: unauthenticated remote code execution on the ingest service. Vector: a crafted header reaching the deserialiser before auth. Detection: a 200 on /ingest with no prior /auth in the same session.

412 in / 380 out $0.000512 receipt issued cap held, then settled

We are not a filter. MagmaRouter prices the request, holds it against your cap and passes it through. It does not moderate it.

Every key has a ceiling. The reply cannot physically cost more than the hold placed before it was sent.

Nothing is written down. The database holds the model, the token counts and the cost. Your prompt is not in it, because it was never put there.

requests — id · tenant_id · api_key_id · requested_model · upstream_model · streamed · status · outcome · prompt_tokens · completion_tokens · upstream_cost_nanos · cost_nanos · latency_ms · error · created_at
~~no prompt column · no completion column · no message text of any kind~~

Blind Hop A receipt on every reply

Blind hop SIGNED rlr1 · HMAC-SHA256

$ curl .../v1/chat/completions -d '{"model": "...", "messages": [...]}'

x-magma-receipt: rlr1.eyJ2IjoxLCJtb2RlbCI6ImNvZ…WqRyZESexh2Q

$ curl .../v1/verify-receipt -d '{"receipt": "rlr1…", "messages": [...]}'

{ "ok": true, "model": "cognitivecomputations/dolphin-mistral-24b-venice-edition", "prompt_sha256": "7fb8ae9fcf38789e0528b2655afb194d5519aaf4…", "prompt_matches": true, "ts": 1789740841978 }

$ ... the same receipt, with one full stop removed from the prompt

{ "ok": true, "prompt_matches": false }

the hash is one way the prompt is not in the receipt the plaintext reaches the model, then it is gone

You do not have to trust us. Keep your own copy of the messages, post it back with the receipt, and the gateway proves it served exactly those, on exactly that model.

prompt_sha256 …

Your browser just hashed that the same way the gateway does, over the same canonical form. Change one character and every digit moves, and no amount of the digest gets you back to the sentence. That string is what a receipt carries. Nothing on this line left your machine.

Zero prompt
retention.

Get a key.

A six digit code by email, no password. Mint a key per user with a lifetime cap, a monthly cap, or both, and point your app at one base URL.

One endpoint, OpenAI and Anthropic compatible.