Now in private beta

One workspace across seventeen providers, on API keys you already own. Free tiers first, automatic failover when one throttles, and chats stored wherever you decide.

Bring your own keyFree tiers firstZero-knowledge vault
sarmalink
visitor@sarmalink:~$ chat "draft a sharp two-line follow-up email"

how it works

No subscription, no trial, no paywall. One free-tier key in, and sarmalink handles routing, failover and storage.

01

Sign in and set a passphrase

GitHub or magic-link email. Then you set a passphrase that derives the key that encrypts your data. We never see it.

# set a vault passphrase

••••••••••••

deriving key PBKDF2 · 600,000 iterations

key never leaves this browser

02

Paste one free provider key

Groq is the easiest. Grab a free key, paste it once. It is encrypted in your browser before anything reaches our database.

# paste one free provider key

gsk_••••••••••••••••3f9a

sealing in-browser AES-256-GCM

ciphertext: 9f2c4e…d81a07 server never sees plaintext

03

Chat with automatic failover

Smart, Fast, Reasoner, Live, Coder, Vision. If one provider is rate-limited, the next picks up. Your conversations are sealed end to end.

# mode: smart · automatic failover

GRQGroq429 rate-limited
SNSambaNova200 streaming
CBCerebrasstanding by

one continuous answer, sealed end to end

providers

Five free tiers wired today — Groq, SambaNova, Cerebras, Gemini and OpenRouter — with twelve more supported on your own key.

GRQGroqCBCerebrasOROpenRouterDSDeepSeekKMMoonshot KimiMSMistralANTAnthropicTGTogether AINVTNovita AI
SNSambaNovaGEMGoogle GeminiNVNVIDIA NIMQWAlibaba QwenGLZhipu GLMOAIOpenAIXAIxAI GrokFWFireworks AI
5free-tier providers wired
6modes, one auto-router
14,400free Groq requests a day
600,000PBKDF2 iterations

six modes

Six modes, each mapped to a best-in-class free model — or let the auto-router decide.

Smart

DeepSeek V3.2 685B MoE

Professional emails, deep analysis, long-form reasoning.

Reasoner

DeepSeek R1

Chain-of-thought made visible for GDPR-shaped questions.

Live

Gemini 2.5 Flash

Fast, broad-knowledge answers from Google’s Flash model.

Fast

Groq GPT-OSS 20B

41ms first token, built for quick lookups.

Coder

DeepSeek V3.2 + Qwen 3 Coder

Debug, refactor, and write tests with a code-tuned engine.

Vision

Llama-4 Scout

Llama-4 Scout via Groq. Image upload is on the roadmap.

features

No invented metrics, no coming-soon promises. This is what sarmalink does today.

Automatic failover

If your first provider is rate-limited or down, the next one in the ladder takes over mid-request. You see one continuous answer.

Six modes

Smart, Fast, Reasoner, Live, Coder, Vision. Each maps to a tuned engine and the providers it prefers.

Zero-knowledge vault

Your provider keys are encrypted with a passphrase only you hold. The server stores ciphertext, never plaintext.

Encrypted conversations

Every chat is sealed with your passphrase before it leaves your browser. We cannot read them, even if we wanted to.

Persisted chats

Conversations carry across devices. Sign in, unlock your vault, and your history is right where you left it.

Stop mid-stream

Cancel a long answer with one click. The next message starts a fresh context.

Dark and light

Theme switches with one click and follows your system preference by default.

One-click wipe

Delete a single conversation, export everything as JSON, or remove your account entirely from settings.

The deal

Your keys.Your models.Your chats.Nobody else’s.

Keys and conversations are sealed in your browser before they ever leave it. The server holds ciphertext it cannot open.

the security promise

AES-256-GCM in your browser, a key derived from your passphrase through 600,000 rounds of PBKDF2. We hold ciphertext we cannot open.

  • Your keys are encrypted at rest with AES-256-GCM, using a key derived from a passphrase only you hold.
  • We never log your plaintext keys. They are decrypted in memory only inside the request handler that uses them.
  • You can delete every key from your account with one button. The delete is irreversible and audited.
  • Every chat request to a provider is signed end-to-end and logged with provider, latency, and model, never with payload.

Read the security model

A full technical write-up of encryption, logging, and deletes.

Read the security model

Start in 90 seconds

Sign in with a magic link, set your passphrase, paste your keys, and chat.

Get started

faq