The API serves NGARi's own 1.5B model (ngari-ft-distilled:stable, Apache 2.0) on our edge hardware (NVIDIA Jetson AGX Orin). We store nothing. No prompt or response is ever written to disk. Every request is metered against your prepaid balance and recorded as a signed attestation you can verify.
POST https://ngari.ai/api/chat
Pass your key as a Bearer token. Keys start with ngr_ and are shown only once at creation. We store only a hash — lost keys cannot be recovered (create a new one).
Authorization: Bearer ngr_your_key_here
curl https://ngari.ai/api/chat \
-H "Authorization: Bearer ngr_…" \
-H "Content-Type: application/json" \
-d '{"messages":[{"role":"user","content":"Explain sovereign AI in two sentences."}]}'
The response is an SSE stream: a first event carries {"model":…}, then {"delta":"…"} chunks, then [DONE].
| Operation | Endpoint |
|---|---|
| Create key (email = billing identity) | POST /api/keys {"email":"you@…"} |
| Balance + usage | GET /api/keys/me (Bearer) |
| Signed attestation receipts | GET /api/keys/attestations (Bearer) |
| Pack | Credits | Tokens | Link |
|---|---|---|---|
| $5 | 2,500 | 2.5M | buy.stripe.com/28EaEXfOu1hI7MP0eIbMQ1z |
| $20 | 10,000 | 10M | buy.stripe.com/cNiaEX31If8yffhd1ubMQ1A |
| $100 | 50,000 | 50M | buy.stripe.com/6oU5kD6dUbWm5EH9PibMQ1B |
1 credit = 1,000 tokens · $2.00 per 1M tokens. Credits are charged on actual usage (an up-front budget is reserved per request and the unused remainder refunded automatically). Credits never expire. Unused credits are refundable within 14 days of purchase — email [email protected].
Purchases settle to your key by email: buy credits with the same email you used to create your key, and the balance appears within ~5 minutes.
Each paid request writes an HMAC-signed record to the NGARi sovereignty meter: model, timestamp, device ID, mode (on-device), and token count. GET /api/keys/attestations returns your recent receipts. This is the proof that your inference ran on sovereign edge hardware and that nothing was retained.
It is a capped beta on a single edge device — no SLA. It is not air-gapped end-to-end (traffic transits Cloudflare), it is not end-to-end encrypted, and it cannot claim "your data never touches our servers" (inference runs here). What it does guarantee, contractually and architecturally: zero retention of prompts and responses, and verifiable receipts. For true on-premise sovereignty, the model ships on the NGARi ONE.
No unlawful activity, no resale of raw inference as a competing service, no reverse-engineering of the model. See the Terms.