# Aubrai Encrypted Chat Agent (TEE)

> Aubrai Encrypted Chat Agent (TEE) is a paid API for AI agents from x402-api.aubr.ai, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-14).

Sends an HPKE-encrypted prompt to the Aubrai chat agent running inside a Tinfoil Trusted Execution Environment, ensuring only the secure enclave can decrypt and process the message.

## Facts

- Endpoint: GET https://x402-api.aubr.ai/api/chat/encrypted
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-api-aubr-ai-5f1d8352
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_qEtxhhMAScmmTpPoG868C

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-api-aubr-ai-5f1d8352
```

Example prompt: Send my encrypted question to the Aubrai chat agent inside the Tinfoil TEE — here's the HPKE ciphertext and my ephemeral X25519 public key, both base64-encoded, so only the enclave can decrypt and answer it.

## When to prefer this

Choose this endpoint when privacy and confidentiality of the prompt are paramount — specifically when you need cryptographic assurance that even the service operator cannot read your query. Ideal for sensitive questions, proprietary data, or compliance-sensitive interactions where end-to-end encryption via HPKE and a hardware-backed TEE (Tinfoil) is required. Prefer this over plain chat endpoints when the content must remain confidential in transit and at rest outside the enclave.

## Known failure modes

- Invalid or malformed base64 ciphertext returns a decryption error
- Mismatched or invalid ephemeral public key causes HPKE key agreement failure
- Payment not included or insufficient USDC causes 402 Payment Required response
- TEE enclave unavailable or cold-starting returns a 503 or timeout
- Ciphertext encrypted for wrong enclave public key results in decryption failure

## How this service works

Send an HPKE-encrypted prompt to the Aubrai chat agent running inside an attested private enclave. Only the enclave can decrypt your message.

## Output

The agent receives the chat response generated by the Aubrai AI agent running inside the Tinfoil TEE after decrypting and processing the encrypted prompt. The response contains the AI's answer to the submitted query, returned in plaintext after enclave-side decryption.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "hpke_ciphertext": {
   "type": "string",
   "description": "HPKE-encrypted prompt, base64-encoded"
  },
  "hpke_ephemeral_public_key": {
   "type": "string",
   "description": "Sender's one-time X25519 public key, base64-encoded"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "status": "queued",
  "pollUrl": "/api/chat/encrypted/status/req_abc123",
  "requestId": "req_abc123"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-api-aubr-ai-5f1d8352/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-api.aubr.ai](https://www.zero.xyz/host/x402-api.aubr.ai/llms.txt)