// COMPARE
phantom vs
openrouter.
Both aggregate models behind one OpenAI-compatible key. One asks for your name. The other doesn't.
| OpenRouter | Phantom | |
|---|---|---|
| Account | required | none |
| required | none | |
| KYC | required for fiat top-up | none |
| Payment | card, crypto (limited) | XMR, BTC, ETH, USDT, USDC, LTC, SOL, DOGE |
| IP logging | yes (rate limits, abuse) | none |
| Prompt logging | off by default, opt-in for discounts | not possible (TEE) on TEE tier; not logged on proxy tier |
| TEE attestation | no | yes, per-response on TEE tier |
| Model catalog | ~200, mostly proxy | ~70 curated, ~20 TEE-attested |
| Key recovery | account login | payment ID re-fetch |
| Markup over wholesale | none (vendor list price) | +30% TEE tier, +50% proxy tier |
| Refunds | account credit | none |
// WHEN PHANTOM
when phantom wins.
- You don't want an account anywhere. OpenRouter needs one. Phantom needs none. No email, no name, no recovery dependency on an inbox.
- You want hardware attestation per request. OpenRouter ships your prompt to the cheapest backend that hosts the model. Phantom's TEE tier exposes the Intel TDX quote + NVIDIA Confidential Computing attestation at
/v1/inference-attestfor every response. - You want crypto with privacy. XMR is opaque on-chain and Phantom holds no return address. OpenRouter accepts some crypto but the account ties it back to an identity.
- You want zero IP retention. Phantom discards every access log at the edge.
// WHEN OPENROUTER
when openrouter wins.
- You want the widest possible catalog. 200+ models, including obscure community fine-tunes. Phantom curates harder.
- You don't care about anonymity. If your threat model accepts vendor accounts and IP logs, you pay less. No markup.
- You want the lowest price. Phantom adds 30% on the TEE tier and 50% on the proxy tier. That's the cost of the anonymity layer.
// HONEST DISCLAIMER
what phantom is not.
Phantom is not a TEE-attested API. Only the upstream inference is TEE-attested. The proxy holds plaintext in RAM while it forwards the request. The closed-weight proxy tier (Claude, GPT, Gemini, Grok) reaches frontier vendors through a TDX gateway: anonymous to the vendor, but the vendor reads the prompt. If you need cryptographic privacy end-to-end, no proxy can give it.
Source on Codeberg. PGP at /pgp.txt. Drop-in at https://phantom.codes/v1. Start with the $10 bundle. buy credit ↗