moth docs
Protocol Anonymized and Sealed

Anonymized and Sealed

Every model runs in one of two modes and is labelled with it. Anonymized keeps who you are private and runs on every model today, and Sealed, coming after launch, will keep what you send private too.

Anonymized Live

  1. Your deviceYour wallet, IP and device
    The prompt, readable
  2. MothpointWho you are comes off
    The prompt passes through, no copy kept
  3. Model hostSees a pooled key
    Reads the prompt under its own policy

Sealed After launch

  1. Your deviceYour wallet, IP and device
    The prompt, encrypted in your client
  2. MothpointWho you are comes off
    Relays bytes it can't read
  3. Attested hardwareSees a pooled key
    Reads the prompt inside the hardware only
Both modes take who you are off at the Mothpoint. Sealed also keeps the prompt unreadable until it reaches attested hardware.

Anonymized, live on every model

Your identity comes off at the Mothpoint, as What is removed lists. The model's host can read the prompt and the reply under its own policy, and it sees them arrive from Moth with no way to tell who sent them.

Every model in the catalog has privacy set to anonymized today. It suits work where the question is ordinary and the asker is the sensitive part.

Sealed, coming after launch

Sealed is for work where the question itself is the secret. A few open-weight models will run in attested hardware, and your client will check that hardware's attestation and encrypt the request to it before sending a word. Moth relays your messages encrypted, without being able to read them, and so does the host. Settings such as max_tokens and stream stay readable, since the hold is sized from them.

  • The attestation is checked before anything is sent, and a route that fails it gets nothing.
  • There is no fallback, so if no route passes, the request fails rather than going to an unsealed one.
  • Billing never reads the content. It uses the usage the hardware reports, and a call whose usage can't be read is charged its whole hold.

Sealed models are listed apart from the catalog, with privacy set to sealed, and their endpoints will be documented here when Sealed opens.

What neither mode does

  • Neither can hide what a prompt gives away by itself, such as a name or an address written into it.
  • We add no content filter of our own, and in Anonymized mode the host's own policies still apply.
  • Moth keeps no copy of a prompt or a reply in either mode.