how it works
No subscription, no trial, no paywall. One free-tier key in, and sarmalink handles routing, failover and storage.
Sign in and set a passphrase
GitHub or magic-link email. Then you set a passphrase that derives the key that encrypts your data. We never see it.
# set a vault passphrase
→ deriving key PBKDF2 · 600,000 iterations
✓ key never leaves this browser
Paste one free provider key
Groq is the easiest. Grab a free key, paste it once. It is encrypted in your browser before anything reaches our database.
# paste one free provider key
→ sealing in-browser AES-256-GCM
ciphertext: 9f2c4e…d81a07 ✓ server never sees plaintext
Chat with automatic failover
Smart, Fast, Reasoner, Live, Coder, Vision. If one provider is rate-limited, the next picks up. Your conversations are sealed end to end.
# mode: smart · automatic failover
✓ one continuous answer, sealed end to end
how it works
No subscription, no trial, no paywall. One free-tier key in, and sarmalink handles routing, failover and storage.
STEP 01
Sign in and set a passphrase
GitHub or magic-link email. Then you set a passphrase that derives the key that encrypts your data. We never see it.
STEP 02
Paste one free provider key
Groq is the easiest. Grab a free key, paste it once. It is encrypted in your browser before anything reaches our database.
STEP 03
Chat with automatic failover
Smart, Fast, Reasoner, Live, Coder, Vision. If one provider is rate-limited, the next picks up. Your conversations are sealed end to end.
# set a vault passphrase
→ deriving key PBKDF2 · 600,000 iterations
✓ key never leaves this browser
providers
Five free tiers wired today — Groq, SambaNova, Cerebras, Gemini and OpenRouter — with twelve more supported on your own key.
six modes
Six modes, each mapped to a best-in-class free model — or let the auto-router decide.
Smart
DeepSeek V3.2 685B MoE
Professional emails, deep analysis, long-form reasoning.
Reasoner
DeepSeek R1
Chain-of-thought made visible for GDPR-shaped questions.
Live
Gemini 2.5 Flash
Fast, broad-knowledge answers from Google’s Flash model.
Fast
Groq GPT-OSS 20B
41ms first token, built for quick lookups.
Coder
DeepSeek V3.2 + Qwen 3 Coder
Debug, refactor, and write tests with a code-tuned engine.
Vision
Llama-4 Scout
Llama-4 Scout via Groq. Image upload is on the roadmap.
features
No invented metrics, no coming-soon promises. This is what sarmalink does today.
Automatic failover
If your first provider is rate-limited or down, the next one in the ladder takes over mid-request. You see one continuous answer.
Six modes
Smart, Fast, Reasoner, Live, Coder, Vision. Each maps to a tuned engine and the providers it prefers.
Zero-knowledge vault
Your provider keys are encrypted with a passphrase only you hold. The server stores ciphertext, never plaintext.
Encrypted conversations
Every chat is sealed with your passphrase before it leaves your browser. We cannot read them, even if we wanted to.
Persisted chats
Conversations carry across devices. Sign in, unlock your vault, and your history is right where you left it.
Stop mid-stream
Cancel a long answer with one click. The next message starts a fresh context.
Dark and light
Theme switches with one click and follows your system preference by default.
One-click wipe
Delete a single conversation, export everything as JSON, or remove your account entirely from settings.
The deal
Your keys.Your models.Your chats.Nobody else’s.
Keys and conversations are sealed in your browser before they ever leave it. The server holds ciphertext it cannot open.
the security promise
AES-256-GCM in your browser, a key derived from your passphrase through 600,000 rounds of PBKDF2. We hold ciphertext we cannot open.
- Your keys are encrypted at rest with AES-256-GCM, using a key derived from a passphrase only you hold.
- We never log your plaintext keys. They are decrypted in memory only inside the request handler that uses them.
- You can delete every key from your account with one button. The delete is irreversible and audited.
- Every chat request to a provider is signed end-to-end and logged with provider, latency, and model, never with payload.
Read the security model
A full technical write-up of encryption, logging, and deletes.
Read the security modelStart in 90 seconds
Sign in with a magic link, set your passphrase, paste your keys, and chat.
Get startedfaq