Preview · HUSH is in development. Activity and numbers on this page are illustrative. Try the demo →
STATUSBuilding · preview
NETWORKEthereum · Sepolia first
PROOFSGroth16 · BN254
TESTNETcoming soon
Private access rail · testnet coming soon

Pay for any AI.Leave no trail.

Fund once. Prove you can pay without saying who you are. Chat, generate, search and run agents on a key that dies in minutes. The provider gets paid. Nobody learns it was you.

Try the demo Try to catch someone
SCROLL

Every API you pay for knows exactly who you are. Your card, your email, your wallet, and every question you have ever asked, stitched into one profile. HUSH cuts the thread between the money and the request.

01 · The game

Twelve wallets funded the vault. One just paid for this request.

You're the AI provider. You've been paid, the proof is valid, the request is in front of you. Click the wallet you think sent it.

A live vault would hold thousands of notes, not twelve.

incomingkimi-k2 · "draft my severance negotiation…"
Pick a wallet.
02 · The rail

Four steps. Zero links.

Your browser keeps the secret. The server only ever sees a proof that someone in the vault can pay, and a key that expires before anyone cares.

01 / DEPOSIT

Fund once.
Blend in.

Send ETH to the shared vault. Your browser mints a secret note and drops its commitment into a 32-level Merkle tree with everyone else's. From now on you're one leaf in a forest.

02 / PROVE

Prove it.
Don't show it.

Before each session your browser builds a Groth16 proof: "I own an unspent note worth at least X". It never says which. A one-time nullifier stops anyone spending the same note twice.

03 / CALL

A key that
self-destructs.

The router issues an API key capped at the amount you proved, alive for minutes. Use it in the app, your IDE, or any OpenAI SDK. Even if it leaks, it can't spend a wei more.

04 / SETTLE

Pay exactly
what you used.

When the key closes, usage is metered, the provider is paid from the vault, and your change becomes a brand-new note nobody can tie to the old one. Key deleted.

Depositconfirmed
0.05 SepETH
→ leaf #4,812 of 4,812 · commitment 0x1f9c…a0e2
Groth16 · BN2540.00s
load circuitcached
merkle path · 32 levelsok
witness · 41,227 constraintsok
prove · wasm…
nullifier0x2b7e…9a11
Session key● live
HUSHTESTNET
hush_sk_test_••••••••••••f3a9
CAP 0.0040EXP 14:59
used 0.0000000
calls 0 · scope chat, search
Settlementfinal
SETTLED
calls14
tokens38,402
provider paid0.0013100
rail fee 2%0.0000262
change → new note0.0026638
keyrevoked ✓
receipt signed · settlement root 0x88a1…04fd
03 · Their side

What the provider's log actually says.

Same request. Same model. Same answer. One of these logs is a liability.

  api.provider.com · normal accountlinked

      
  api.provider.com · via HUSHunlinkable

    

  


  
  

    

      
04 · Catalog
One balance. Every machine service.

      
Planned pricing: the provider's price plus a flat 2% rail fee, metered in ETH. Same key, same receipt format, everywhere.

    

    

      

        

        Testnet first est. 0.0000004 / 1k tok
        
Private chat with frontier models

        
DeepSeek, Qwen, Kimi, GLM on decentralised GPUs inside TEEs. Claude, GPT and Gemini on mainnet. History stays in your browser.

        

          

          

          
model deepseek-v3.2 · TEEtokens 0cost 0.0000000 ETHwallet hidden

        

      

      

        

        Planned
        
Image generation

        
Qwen-Image and Flux, billed per image. Your prompts never touch your wallet's history.

        
qwen-image · denoising 0/30

      

      
Planned
Web search
Results piped into any model. No account, no profile. Est. 0.000002 ETH a query.

      
Planned
Ethereum RPC
Read the chain without handing one node operator your IP and your whole address list.

      
Soon
Embeddings & voice
Index private docs and transcribe calls without a vendor knowing whose they are.

    

  


  
  

    

      

        05 · Agents
        
Give an agent a budget, not your wallet.

        
    
          
  • Hard spend limit. The agent runs on its own capped key. It cannot spend a wei more than you proved.
    • 
          
  • Pick its tools. Models, search, RPC, images. On or off per task.
    • 
          
  • Auto-revoke. Task done, timed out or capped: the key is destroyed, the change goes back to a fresh note.
    • 
          
  • Receipts for every step. See what each tool call cost while it runs.
    • 
        

        Start an agent 
      

      

        
Market-watch agentdemo

        
“Every 30 min, check L2 bridge volumes, flag anything unusual, draft a 3-line note.”

        
Spent0.00062
Cap0.00500
Expires5h 41m

        

        

      

    

  


  
  

    

      
06 · Developers
Change one line. Keep your stack.

      
The router speaks the OpenAI API. Point any SDK, IDE plugin or agent framework at it and paste a capped key.

    

    

      

      

    

  


  
  

    

      
07 · $HUSH
Usage pays in ETH. $HUSH runs the rail.

      
Every settlement on the rail feeds the token. More privacy demand, more fees, more burn.

    

    

      

        
          
          
          
          $HUSH
          the flywheel
          
        
      

      

        

          
Rail fee2%on every settlement

          
Buy & burn1%market-bought $HUSH, burned

          
To stakers1%operators running the rail

        

        
    
          
  • Cheaper sessions. Hold $HUSH, prove it in zero knowledge, pay 1% instead of 2%. Your holding stays as private as your balance.
    • 
          
  • Stake to operate. Routers, indexers and challenge watchers stake $HUSH. Cheat and get slashed. Behave and earn half of every fee.
    • 
          
  • Vote on the catalog. Holders list new providers and delist the ones whose privacy promises break.
    • 
        

        
CA: TBA

      

    

  


  
  

    
08 · Roadmap
Where the rail goes next.

    

      
PHASE 0
Design & demo
  • Protocol design on open-source zkAPI
  • Landing page
  • Interactive demo app
  • Brand and community

      
PHASE 1 · NOW
Testnet rail
  • Sepolia vault + Groth16 verifier
  • In-browser proving
  • TEE text models
  • Private chat, live

      
PHASE 2
Launch
  • $HUSH on Ethereum
  • Mainnet vault (small caps)
  • Image, search, RPC
  • OpenAI-compatible API

      
PHASE 3
Agents & open rail
  • Budgeted autonomous agents
  • Operator staking + slashing
  • Any API can list and get paid
  • External audit

    

  


  
  

    
09 · FAQ
Straight answers.

    

      
Is this a mixer?
No. Funds never move to another person. You deposit, pay providers for services you used, and withdraw your own change. The privacy is about linking requests to a wallet, not about moving money around.

      
Can the model provider read my prompts?
Yes, a model has to read a prompt to answer it. What it can't do is tie that prompt to your wallet or your other sessions. For sensitive work pick a TEE model: it runs inside confidential hardware and the operator can't read memory.

      
When can I use it for real?
HUSH is in development. This page and the demo app show how it will work; nothing on them is live yet. The testnet rail comes first, then mainnet with small deposit caps. Follow the X account for dates.

      
What if the router goes down mid-session?
The router never holds your note. If a session isn't settled in its window, an escape hatch will let you reclaim the full proved amount on-chain, straight from the vault.

      
Where are my notes stored?
Encrypted in your browser. Export the backup file from Vault → Backup. Clear your browser without a backup and the balance is gone.

      
Is it audited?
Not yet. The circuits and vault are experimental. Use testnet ETH, or small mainnet amounts you can afford to lose.

    

  







  

    Fund once · use everything
    
Stay quiet.

    
The testnet rail is coming. Until then, try the full flow in the demo.

    
Try the demo See the roadmap