One door to every model. Attested, metered, settled on Solana.

Models with is_tee: true in /v1/models run inside Trusted Execution Environments, served fail-closed from the TEE-only RedPill host with the gateway's own key — no key of yours needed. Chat, FLUX image generation (POST /v1/images/generations), Whisper / Voxtral transcription (POST /v1/audio/transcriptions), embeddings (POST /v1/embeddings), and Kev 4B System One decisions (POST /v1/systemone).

Every response carries an x-receipt-id; verify it at GET /v1/aci/receipts/<id>, and check the gateway itself at GET /v1/aci/attestation. Free holder/API-key access to TEE models is capped per wallet per day (they spend real confidential-compute credits); x402 pay-per-call is uncapped.

Hold $CLAWD? The gateway is free. Sign MUSEBOOK AI GATEWAY\n<your wallet>\n<unix timestamp> with your Solana wallet and send X-Clawd-Wallet, X-Clawd-Signature (base58) and X-Clawd-Timestamp headers. Any wallet holding $CLAWD (mint 8cHzQHUS2s2h8TzCmfqPKYiM4dSt4roa3n7MyRLApump) gets in.

Want an API key instead of signing every call? Hold $CLAWD, sign the same one-time message, and POST it as JSON (wallet, signature, timestamp, optional label) to POST /v1/keys. You get an mbg_live_... key, shown once (only its hash is stored). Use it as Authorization: Bearer <key> on any model. List keys with POST /v1/keys/list, revoke with DELETE /v1/keys. Up to 5 keys per wallet.

No $CLAWD required. Any Solana wallet can mint a paid key: sign the same one-time message and POST to /v1/keys with "plan":"paid". The key starts at $0; top it up by sending USDC, SOL, or $CLAWD (min $1) to the gateway wallet 5rxgJXoN2xvoZHcLXav1pEHAhvygLziZsz3xAzNEJfgr with the key's top-up memo (returned at mint and by GET /v1/credits/balance), then claim it with POST /v1/credits/topup — verified on-chain before crediting.

Balances live on your wallet, not on a key. Top up with one x402 payment: POST /v1/x402/top-up answers 402 with a USDC-on-Solana challenge (min $1, settled via the x402m facilitator); pay it and the paying wallet is credited 1:1. Chat is then metered per token at each model's model_spec.pricing rates, with X-Balance-Remaining on every response. Check GET /v1/x402/balance/<wallet> and your ledger at GET /v1/x402/transactions/<wallet>.

No $CLAWD? Pay per call with x402 on Solana. POST without auth and you get a 402 with the price in USDC, SOL, or $CLAWD. Pay it with a signed Solana transaction (exact scheme, memo included) and resend with the X-PAYMENT header.

Signed in to musebook.trade (Privy — Google, X, or wallet)? Mint an API key from the AI Gateway page — your Privy session plus one wallet signature, no $CLAWD balance needed. Sign in to your gateway wallet with your Musebook (Clerk) account on the wallet page.

Browse every model on the AI Gateway page on musebook.trade — the live catalog with search and filters, a 3D constellation of all the models, and key minting behind the same sign-in as the rest of the site. This page is the raw API door.

This worker is the model-inference front door. The wider gateway — tools, APIs and agent services — runs on the Clawd Gateway: mesh.musebook.trade and the TEE gateway site at gateway.musebook.trade (live status: /v1/mesh).