Private AI Proxy
Use any AI agent with verified private AI.
Private AI Proxy verifies the confidential AI service on your machine before a prompt leaves it, then gives Claude Code, Codex and other AI agents a local API—without handing them your key.
v0.7.0 · macOS · Windows · Linux · Open source
Works with your AI agents
Claude Code
Codex
OpenCode
Pi
Hermes Agent
OpenClaw
Oh My Pi
DeepSeek Harness
Set up in three steps
No agent reinstall and no key to paste into each tool.
Install
Download the desktop app, or install the pap CLI on macOS, Windows, or Linux.
Sign in with your Phala Cloud account
Approve the sign-in in your browser. The proxy keeps the key.
Start your agent
Turn on protection and connect Claude Code, Codex, or another agent. Then work as usual.
Privacy you can check, not just trust
Verified before a prompt leaves your machine
The proxy checks the service’s attestation and pins its TLS key; if verification fails, agent requests are refused.
Your agents never hold your key
Switch on Claude Code, Codex, OpenCode, and more. Each gets a local token; your Phala key stays with the proxy.
A signed receipt behind every request
After each response, the proxy fetches the request’s signed receipt and audits it.
See every request, token and cost
Usage lists each request’s model, tokens, cost, and protection, with totals and a chart over time.
One local API for every agent
Chat Completions, Messages, and Responses on one local endpoint, serving only models from the verified catalog.
Install Private AI Proxy
Use the desktop app, or the pap CLI on terminals and servers. Both run the same local service.
- Download for Apple Silicon
macOS
- Download for x64
Windows
Preview - Download .deb (x64)
Linux
Command line
$ curl -fsSL https://phala.com/private-ai-proxy/install.sh | shOfficial script. No Node.js or package manager needed.
Then sign in and start protection: pap profiles login work --provider phala, then pap start --profile work.
Open source and verifiable
Read the code and the protocol it implements, then check the service yourself.
Frequently asked questions
What is Private AI Proxy?
A free, open source local client for confidential AI services. It verifies the service, exposes an API on your machine, and connects supported AI agents to it without giving them your credential. The desktop app and the pap CLI manage the same per-user service.
Which AI agents does it support?
Claude Code, Codex, OpenCode, Pi, Hermes Agent, OpenClaw, Oh My Pi, and DeepSeek Harness. Connecting an agent edits only the settings the proxy owns, and disconnecting restores what was there before.
What happens if verification fails?
Connected agents stay pointed at the local API, which refuses their requests until protection is verified again. The same applies after a network loss or a restart, so requests never fall back to the original provider.
Do my agents see my Phala API key?
No. Each agent gets its own machine-local token. Your Phala credential stays with the proxy and never appears in agent configuration, command arguments, or diagnostics.
How are requests audited?
Responses stream to your agent immediately. Afterwards the proxy fetches the signed receipt for the request and audits it. Usage keeps each checked receipt, and an audit failure is recorded there; it cannot retract bytes that were already delivered.
Which platforms are supported?
macOS, Windows, and Linux on arm64 and x64. Linux needs glibc 2.35 or newer; musl distributions such as Alpine are not supported. The desktop app is also on the Mac App Store. The Windows desktop app is in preview.
What does it cost?
The app is free and open source; sign in with your Phala Cloud account.
How do I remove it cleanly?
Choose Stop All and Quit in the app first, or run pap --yes service stop and then pap stop --offline. That restores your agents’ own settings before you remove the app. The Windows uninstaller does this for you.
Give your agents verified private AI
Download Private AI Proxy, sign in with your Phala Cloud account, and keep working with the agents you already use.
