Models

One endpoint serves the whole catalog, from open-weight models to proprietary ones like GPT and Claude.

Browse the catalog

Every available model by provider.

List from the API

GET /v1/models with pricing, context windows, and capabilities.

Model ids

Each model has a provider/model id, such as openai/gpt-5 or z-ai/glm-5.2. Pass it as the model field in a request. The same model may be offered under more than one id. Embedding models have their own catalog, GET /v1/embeddings/models.

Confidential and standard models

A confidential model runs inside a TEE on a provider whose enclave the gateway verifies before forwarding your prompt, fail-closed. A standard model runs on a third-party provider that is not attested. Both are served through the attested gateway; only a confidential model extends that protection to the model itself. In the catalog, is_tee: true marks a model that can be served confidentially:

curl -s https://api.redpill.ai/v1/models | jq -r '.data[] | select(.is_tee == true) | .id'

To confine an application to confidential models, use the TEE-only endpoint https://tee.redpill.ai as the base URL.

Confirm a confidential response

is_tee says a model can be served confidentially. The receipt proves that a specific response was. Read the x-receipt-id header and inspect the upstream.verified event:

curl -s "https://api.redpill.ai/v1/aci/receipts/$RECEIPT_ID" \
  -H "Authorization: Bearer $REDPILL_AI_API_KEY" \
  | jq '.event_log[] | select(.type=="upstream.verified") | {model_id, result, required, session_id}'

	Confidential	Standard
`result`	`verified`	`failed`
`required`	`true`	`false`
`session_id`	present	absent

The cited session names the provider and its verified claims. See Verified upstreams.

Confidentiality is not retention

is_tee constrains who can read memory while the model runs. It says nothing about whether the provider stores the prompt afterwards. For that property, filter with GET /v1/models?zdr=true and send provider: {"zdr": true}. See Zero data retention.

Choosing a model

Models differ in context length, accepted inputs, price, and supported parameters and features. Each model object in GET /v1/models carries these fields, so match a model to your application before you call it.

Get started

Use in agents

Build with the API

Features

How it works

Verify and control

Providers and trust

RedPill Chat

Browse the catalog

List from the API

Model ids

Confidential and standard models

Confirm a confidential response

Confidentiality is not retention

Choosing a model

Confidential providers

Verify a response

Browse the catalog

List from the API

​Model ids

​Confidential and standard models

​Confirm a confidential response

​Confidentiality is not retention

​Choosing a model

​Related

Confidential providers

Verify a response

Model ids

Confidential and standard models

Confirm a confidential response

Confidentiality is not retention

Choosing a model

Related