Private inference — attested Apple Silicon

Run the models
nobody else
will host.

Uncensored models and community fine-tunes, served from verified Macs — where the machine's owner can't read your prompts, and you can prove it.

259 providers in the darkVerify attestation →

Two sides of the eclipse

For developers

One base_url swap.

Keep your OpenAI client. Reach the long tail — uncensored models, rare fine-tunes — that no hosted API will touch. Your prompts stay private.

# point your existing client at Umbra
client = OpenAI(
  base_url="https://api.umbra.dev/v1",
  api_key="umbra-…")
For Mac owners

Your Mac, idle 18 hours a day.

Host the models you choose — pull them with your own Hugging Face key — and earn per token. The work runs where you can't be watched, and neither can the prompts.

# install the provider, start earning
curl -fsSL umbra.dev/install | sh
umbra serve › earning · 1,179 tok/s

How the dark holds

01 / KEY

Secure Enclave

A hardware key, sealed in a chip that can't be cloned.

02 / OS

Verified boot

SIP on, signed system volume, locked down at the kernel.

03 / APPLE

Device attestation

Apple's CA signs that this is genuine, unmodified hardware.

04 / LIVE

Re-checked every 5 min

If the machine changes state, it drops out of the network.

05 / CODE

Proven binary

Only our signed code can serve. It can't read or log a prompt.

Every response traces back to real Apple hardware running code that physically can't see your prompt. You don't take our word for it — click "verify attestation" and the X.509 chain checks in your own browser.

Models with
no other home.

Hosted APIs serve a curated, filtered shortlist. The uncensored models and community fine-tunes people actually want have no API at all. Here, a provider chooses to host them — and you just call them.