Ψ
PHANTOM
← Back to Comparison Matrix
Confidential AI Head-to-Head

Phantom vs NanoGPT

While NanoGPT provides multi-crypto payments, its $12/mo subscription explicitly excludes TEE models, and its cryptographic signatures only cover raw output text without proving enclave state. Phantom delivers an unmetered $10 Flat TEE Pass and live Intel TDX DCAP quote verification with Ed25519 receipt keyset custody.

TEE in Flat Pass
Included ($10)
vs Excluded from $12 Pro
Attestation Scope
Intel TDX DCAP
vs Text-Only Signature
Hardware Enclave
Hardware Bound
vs Unsigned Query Param
API Architecture
Direct TEE Node
vs Intermediary Proxy

Key Architectural & Economic Differentiators

How Phantom resolves the critical model verification gap and subscription exclusion in NanoGPT.

Subscription Economics

$10 Flat TEE Pass vs NanoGPT's $12 Non-TEE Subscription

NanoGPT offers a $12/month Pro subscription (60M tokens/week), but explicitly excludes all TEE models due to compute expenses. NanoGPT users seeking hardware privacy are forced back into metered PAYG billing with a nominal 5% discount. Phantom’s $10 Flat Pass provides direct, unmetered access to flagship reasoning and coding models inside hardware TEEs.

Phantom: $10/mo includes unmetered hardware TEE enclaves.
NanoGPT: $12/mo plan excludes TEE; metered PAYG required.
Cryptographic Scope

Hardware Enclave Attestation vs Text-Only Signature

NanoGPT's verification endpoint (/v1/tee/signature) signs only the raw output text string with an enclave ECDSA key. However, the model name is an unsigned query parameter, and request body SHA-256 hashes are discarded. This means NanoGPT proves an enclave answered, but cannot cryptographically bind the request to the verified hardware state. Phantom exposes live Intel TDX DCAP quotes fetched directly from the enclave gateway, providing cryptographic event log measurements and Ed25519 receipt keyset custody.

Phantom: Live Intel TDX DCAP quote & Ed25519 receipt keyset custody.
NanoGPT: Text-only signature; model parameter is unsigned.
Intermediary Surface

Direct Confidential Routing vs Plaintext Gateway

NanoGPT’s threat disclosure notes that requests hit their stateless proxy in plaintext before being forwarded to upstream enclave providers (RedPill / Tinfoil). Phantom routes client requests directly to attested CVMs where TLS terminates inside the enclave boundary, eliminating plaintext proxy interception risks.

Phantom: Direct TLS termination inside hardware enclave.
NanoGPT: Plaintext proxy hop before upstream enclaves.
Auditability

Exportable Signed Receipts & Zero-Account Keys

NanoGPT requires polling a dynamic GET endpoint for signatures. Phantom issues per-response verifiable cryptographic receipts embedded directly in completion headers and metadata, allowing autonomous agents to persist cryptographically non-repudiable audit logs.

Phantom: Native exportable receipts with Intel TDX enclave provenance.
NanoGPT: Polled signature endpoint with ephemeral text hash.
Cryptographic Integrity Comparison

The Model Identity Verification Seam

Why signing output text alone is insufficient to protect against silent model degradation.

NanoGPT Attestation Flow
01.
Enclave proves Intel TDX / NVIDIA Hopper CC hardware is genuine.
02.
Enclave signs the generated text string with ECDSA key.
03.
Verification Gap: The requested model parameter is unsigned. If the upstream substitutes DeepSeek R1 with a smaller 7B distilled model, the signature remains mathematically valid.
Phantom Hardware Attestation Flow
01.
Enclave generates genuine Intel TDX DCAP quote rooted in hardware silicon.
02.
Workload keyset digest and Ed25519 receipt signing key are attested in quote report data.
03.
Cryptographic Custody: Live DCAP quote verifies enclave boot measurements, gateway image, and signing key custody per request.

Head-to-Head Feature Matrix

Compare Phantom and NanoGPT across pricing, attestation, and developer experience.

FeaturePhantomNanoGPTTechnical Context
Flat TEE Subscription$10 Flat TEE Pass (Included)Excluded from $12 Pro (PAYG only)NanoGPT excludes TEE compute from flat membership.
Hardware Attestation ScopeIntel TDX DCAP + Ed25519 KeysetText-Only SignatureLive hardware DCAP quote & cryptographic receipt signing keys.
Signed Request BindingHardware-attested sessionUnsigned model parameterNanoGPT signs output string only.
Plaintext Proxy HopZero (Direct Enclave TLS)Stateless Routing GatewayNanoGPT decrypts at gateway before sending to enclaves.
Anonymous Crypto RailsXMR, BTC, SOL, ETH, USDT22 Cryptos (XMR, Nano, etc.)Both platforms champion permissionless crypto payments.
OpenAI SDK Compatibility100% Drop-in (base_url)100% Drop-in + x402Standard OpenAI client compatible across both services.
Simple Drop-In Migration

Integrate with Phantom in 1 Line of Code

Switch from NanoGPT to Phantom with zero SDK rewrites.

from openai import OpenAI

# 1. Point standard OpenAI SDK to Phantom's verifiable TEE endpoint
client = OpenAI(
    base_url="https://phantom.codes/v1",
    api_key="sk-phantom-your-api-key"
)

# 2. Call DeepSeek V3.2, Claude 3.7 Sonnet, or GPT-OSS 120B
response = client.chat.completions.create(
    model="deepseek/deepseek-v3.2",
    messages=[
        {"role": "user", "content": "Explain confidential compute enclaves in 1 sentence."}
    ],
    stream=True
)

for chunk in response:
    print(chunk.choices[0].delta.content or "", end="")

Frequently Asked Questions

Answers regarding Phantom and NanoGPT features, pricing, and attestation.

Why does NanoGPT exclude TEE models from its $12/mo subscription?

Confidential computing hardware (such as Intel TDX instances paired with NVIDIA Hopper H100 in CC mode) carries significant infrastructure overhead. NanoGPT elects to keep TEE models on metered pay-as-you-go pricing to protect margins. Phantom offers an unmetered $10 Flat TEE Pass, democratizing access to private hardware enclaves.

What is the difference between NanoGPT's ECDSA signature and Phantom's Intel TDX attestation?

NanoGPT retrieves an ECDSA signature over the generated text string from an upstream enclave. However, the model name is passed as an unverified query string, and request hashes are not enforced. Phantom exposes raw Intel TDX DCAP quotes fetched directly from the enclave gateway, covering platform integrity, workload image boot measurements, and Ed25519 receipt keyset custody.

Can I pay anonymously with Monero (XMR) on Phantom?

Yes. Phantom provides native, non-custodial crypto checkout supporting Monero (XMR), Bitcoin (BTC), Solana (SOL), Ethereum (ETH), USDT, and USDC with zero required email address or identity verification.

Ready for Flat-Rate Hardware TEE Inference?

Get an instant anonymous API key in seconds with 0% deposit fees and live hardware TEE attestation.