TempRouter

SolRouter runs private AI inference inside Intel TDX enclaves on Solana, gated by API keys. We wanted to remove the API key friction entirely and make it pay-per-use on Tempo: no accounts, no provisioning, just pay per chunk in stablecoin. That meant rebuilding the payment and access layer around MPP, natively on Tempo.

What it does

tempRouter is a payable confidential compute endpoint. An agent verifies the Intel TDX enclave is genuine (Intel DCAP), encrypts its payload to the enclave's hardware key, pays per response-chunk via MPP on Tempo, and decrypts locally. The relay is blind, it forwards ciphertext, holds no key. Failed attestation = zero vouchers signed.

How we built it

Hono + mppx server as a blind relay in front of a Phala Intel TDX enclave. Payments are native Tempo sessions (pathUSD on Moderato testnet). Everything, settlement, transactions, payment channels, runs on Tempo. Shipped as SDK, CLI, MCP server, and agent skill with full OpenAPI discovery.

Challenges we faced

Making it fully Tempo-native was the main battle. Transactions, session settlement, payment channels, all had to work cleanly on Tempo infrastructure. We hit a brutal SSE metering bug where mid-stream voucher POSTs were misclassified as billable content, double-charging the channel and crashing streams. Traced it to @hono/node-server passing empty POST bodies as non-null, fixed by normalizing requests before mppx processing.

What we learned

Pay-per-use beats API keys for autonomous agents. TEE + Tempo micropayments is a general primitive, not just for prompts, but any sensitive computation that needs verifiable confidentiality.

Built With

• hono
• mppx
• tee
• tempo
• typescript