#Your first private chat.
There is no sign-up form, no card and nothing to install. Any Solana wallet works: Phantom, Solflare, Backpack, OKX, MetaMask and others. On a phone, the app opens itself inside your wallet’s browser.
- Connect and sign. One line of text, no transaction.
- Add credits in USDC, from $5. That is about 11,100 messages to Claude Haiku 5.5.
- Ask. Pick any model; switch whenever you like.
(a) Connect a wallet. One signature is the whole sign-in; Neuron learns an address and nothing about who holds it.
(b) Add credits in USDC, from $5. $5 is about 11,100 messages to Claude Haiku 5.5. The payment is split on chain as it lands.
(c) Ask anything, of any model. The words go to the model and back to you under a shared key; nothing is written down.
#A signature, not an account.
The app asks your wallet to sign the text below. The server checks the signature against your address, refuses anything older than ten minutes, and hands back a session that carries your address and an expiry seven days out, sealed with a server secret. Signing moves no funds.
Sign in to Neuron
Wallet: 7xKX…q2Pd
Issued: 2026-10-25T14:02:11.000Z
This signs no transaction and moves no funds.#What leaves your browser.
Every request is rebuilt from three things only: the messages, the model, and the model’s own settings. Your wallet, any metadata and your IP never travel with it.
It goes out through OpenRouter with routing locked to providers that keep no data (zero data retention). If a model has none at that moment, the request fails instead of falling back to one that does. Type below and watch both sides.
Listing 1. An account-based AI app
{ "account": "usr_88120", "email": "you@mail.com", "ip": "84.21.140.7", "device": "iPhone 16 · Seoul", "card": "visa •••• 4242", "history": "kept", "prompt": "is it bad that i lied on my resume about one year"}
Tied to you, stored, searchable later.
Listing 2. What Neuron sends to the model
{ "model": "anthropic/claude-sonnet-5.5", "messages": [{ "role": "user", "content": "is it bad that i lied on my resume about one year" }], "provider": { "zdr": true }}
Under one key every Neuron user shares. The provider sees words, not a person.
Kept afterwards, one line like this14:02 UTC · anthropic/claude-sonnet-5.5 · 392 tokens · 0.21 credits
#One key for everyone.
Every Neuron user reaches the model under the same key. To the provider that is one customer sending many requests. It can count them; it cannot tell whose is whose.
#What we keep.
Two things, both needed to bill you, and nothing else.
Kept
- Your wallet address and its credit balance
- Each purchase’s transaction signature
- Per request: time, app or API (and which key), model, token counts, cost
Never kept
- Your prompts and the answers
- Tool calls, search queries, images you send or make
- Your IP address
#History on your device.
By default a conversation lives only in the open tab. If you choose to keep history, your wallet signs one more fixed line, and your browser turns that signature into a key that never leaves it:
The key cannot be exported; the conversations are stored encrypted in this browser.
Wallet signatures of this kind are deterministic, so the same wallet rebuilds the same key on another device. Nothing about your history reaches our server. Conversations can be renamed, exported as Markdown, or deleted from the sidebar.
#Memory in the chat.
Turn on Memory under the message box and the chat keeps what you ask it to, locked with a key only your wallet can make. Start a message with “remember” and that sentence is locked in your browser before it is sent to be kept.
remember that my sister Hana lives in Busan and runs a bakery
… a week later, on another device …
What does Hana do?Every later question first opens your memory in the tab, picks the few entries that match it, and sends only those to the model, as a short note beside your words. The rest stays on the device, and nothing ever reaches our server unlocked.
- Two signatures to turn it on. One makes the memory key, one gives this browser a token to reach your memory. Neither is a transaction.
- Any device. The same wallet makes the same key, so a phone opens what a laptop kept.
- 1.0 MB free for every wallet, thousands of memories. See, open and forget them, issue agent tokens and buy more space at /memory.
#Any agent, one command.
Claude Code, Cursor, Claude Desktop or any MCP client gets the same memory through neuron-mcp, a small server that runs on your machine. Make your key and a token at /memory; the page prints the command with all four values filled in.
claude mcp add neuron \
-e NEURON_API=https://neuronmemory.app \
-e NEURON_WALLET=<your address> \
-e NEURON_KEY=ek1_… \
-e NEURON_TOKEN=et1_… \
-- npx -y https://neuronmemory.app/neuron-mcp.tgz| Tool | What it does |
|---|---|
| remember | Keeps one fact, with optional tags. Locked on your machine, then sent |
| recall | Searches everything remembered, on your machine. Without a query, the latest |
| forget | An open memory is deleted. A sealed one stays in its capsule and is never recalled again |
| memories | Count, space used, and where the sealed chain ends |
| resurrect | Rebuilds everything from the newest capsule back to the first, over IPFS alone |
The key is shown on that page and nowhere else; treat it like a password. Optional settings: NEURON_PAYER and NEURON_MAX_USDC_PER_DAY (an agent that pays for its own space, below), NEURON_GATEWAYS (IPFS gateways to fall back on), NEURON_HOME (where sealed capsules are cached).
#The key and the lock.
Your wallet signs a fixed line that says it moves no funds. The signature becomes a 256-bit key on your device, and each memory is locked with it before it leaves:
A fresh 12-byte nonce for every memory. The address and the memory's id are bound in, so a memory moved to another wallet or id fails to open.
| Who | Sees |
|---|---|
| You | Everything, on your devices |
| Neuron’s server | Locked bytes, their time and size, which wallet they belong to, which token sent them |
| Anyone | That a wallet has a capsule for a day, how many memories it holds, and its address |
- Forgetting. A memory not sealed yet is deleted. A sealed one is kept, as promised, and marked forgotten so recall leaves it out.
- Losing the wallet. The memories cannot be opened, by you or by us. There is no reset.
- Size. One memory holds at most 16 KB.
#Sealed every night.
In the first minutes after 00:00 UTC, every open memory from the day before joins its wallet’s capsule for that day, and each capsule names the one before it. The day, the count and the previous address are plain; the entries are locked. The file is named by a hash of the wallet, never the address.
{
"v": 1,
"day": 20753,
"prev": "bafy…/3c1e9a….json",
"count": 3,
"entries": [{ "id": "…", "at": 1793059200, "iv": "…", "data": "…" }]
}All of a day’s capsules go into one directory, packed as one CAR under one IPFS address. Each finished day the keeper posts a Checkpoint to the Neuron program with the root of every wallet’s newest capsule, so anyone can check where a chain ends without asking us:
Sorted pairs hashed up to the root; GET /api/memory/proof gives the path. Posting starts with the program at launch.
Resurrection: from the newest capsule, follow prev back to the first. Any IPFS gateway serves the capsules and your key opens them; nothing else is needed.
#Three copies, checked.
Every sealed day goes to three independent places: IPFS pinning services (Filebase and Pinata today) and the Neuron node, this server’s own IPFS node. Each copy is fetched through its provider’s own gateway every day and its bytes hashed against the address; a copy that fails three checks in a row is rebuilt from a healthy one.
Each day's checks form one Merkle tree, and its root goes into the same Checkpoint.
Space is priced so it is paid for good: three copies’ first year up front and the rest into a pool whose floor yield pays the rent every year after. One USDC buys about 50.1 MB today; a memory is a few hundred bytes.
#Agents that pay.
An agent whose memory wallet is out of space pays for more itself, inside the request that needed it, in USDC.
- 402. POST /api/memory answers 402 with x402 terms: the scheme neuron-purchase, the USDC amount, the program, the wallet the space is for and a one-time reference.
- Build. The agent asks POST /api/x402/tx for that exact purchase, paid by its own wallet, and signs it.
- Pay and keep. It repeats the request with X-PAYMENT. The server checks the transaction is that one purchase, sends it, counts it from the program’s own event, keeps the memory, and says so in X-PAYMENT-RESPONSE.
{
"x402Version": 1,
"accepts": [{
"scheme": "neuron-purchase",
"network": "solana",
"maxAmountRequired": "1000000",
"payTo": "<program>",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"maxTimeoutSeconds": 900,
"extra": { "beneficiary": "<memory wallet>", "reference": "<32 hex>", "build": "https://neuronmemory.app/api/x402/tx" }
}]
}With neuron-mcp, set NEURON_PAYER (a Solana keypair holding some USDC and a little SOL) and NEURON_MAX_USDC_PER_DAY (default 1) and it does all of this when remember runs out of space. A reference is used once and expires after 15 minutes. It is the same purchase as any other, so the same split applies. x402 opens with the program at launch.
#Two rooms.
| Crowded room | Sealed room | |
|---|---|---|
| Models | Claude, GPT, Gemini, Grok and the rest of the frontier | Open models: DeepSeek, Qwen, gpt-oss and others |
| Where it runs | At the model maker’s provider, under one Neuron key | Inside a hardware enclave (Intel TDX, confidential GPUs) |
| What you can check | The provider’s word: zero retention endpoints only | A public, signed attestation report per model |
| Status | 261 models live | Opens when the enclave provider is connected |
#Prices, in the open.
One credit is one cent and never expires. A request costs the provider’s own price for its tokens, read live, plus 12%. A typical message, 1,500 tokens in and 500 out, costs
Prices are in dollars per million tokens.
| Model | Lab | In / 1M | Out / 1M | Per $1 |
|---|---|---|---|---|
| Claude Haiku 5.5 | Anthropic | $0.112 | $0.560 | 2,232 |
| Gemini 3.8 Flash | $0.420 | $2.10 | 595 | |
| DeepSeek V4.1 Flash 1017 | DeepSeek | $0.113 | $0.168 | 3,941 |
| Kimi K3 | Moonshot | $0.201 | $10.01 | 188 |
| Claude Sonnet 5.5 | Anthropic | $2.24 | $11.20 | 111 |
| GPT-5.5 | OpenAI | $5.60 | $33.60 | 39 |
| Gemini 4 Argon | $2.24 | $11.20 | 111 | |
| Grok 4.7 | xAI | $2.24 | $6.72 | 148 |
| GLM 5.3 | Z.ai | $0.0783 | $1.57 | 1,109 |
| Claude Opus 5.5 | Anthropic | $4.48 | $22.40 | 55 |
Read at 04:24 UTC. A wallet may send 60 requests a minute and four at once.
#Web search.
Turn on Search under the message box and the model may look things up before answering, with the provider’s own search where it has one. Sources are listed under the answer.
#Make one, or send one.
Make one: pick an image model (Gemini’s image models have zero retention routes) and describe the picture. It comes back in the chat and is kept only if history is on, encrypted like the rest.
Send one: attach an image to ask a model that can see. It is shrunk in your browser, travels inside the request, and is never stored by our server.
#The API.
Neuron speaks the OpenAI chat format at https://neuronmemory.app/api/v1. Make a key in the app under Billing → API keys. It starts with hk_, is shown once, and spends your wallet’s credits.
curl https://neuronmemory.app/api/v1/chat/completions \
-H "Authorization: Bearer hk_..." \
-H "Content-Type: application/json" \
-d '{"model": "anthropic/claude-haiku-5.5", "messages": [{"role": "user", "content": "Say something quiet."}]}'| Endpoint | What it does |
|---|---|
| POST /chat/completions | The OpenAI body, streamed or not: messages (text and images, tool calls), model, sampling settings, tools, reasoning, web search and image output. Anything else is dropped |
| GET /models | Every model with its room, its price in credits per million tokens, and whether it sees or makes images |
| GET /attestation?model= | The enclave’s signed report for sealed room models, no key needed |
Memory endpoints
| Endpoint | What it does |
|---|---|
| POST /api/agents | Issues a token for one agent: wallet, at (seconds), signature (base58, over the agent-token text for action issue), label. Shown once; only its hash is kept |
| GET /api/agents · DELETE /api/agents/<prefix> | Lists or revokes a wallet’s agent tokens, with a fresh signature for list or revoke |
| POST /api/memory | Adds one locked memory { id, at, iv, data } with Authorization: Bearer et1_…. Out of space, the answer is 402 with x402 terms |
| GET /api/memory | Everything needed to rebuild the memory on a device, still locked: open entries, sealed capsules newest first, forgotten ids, space left |
| DELETE /api/memory/<id> | Forgets one memory |
| GET /api/memory/head?wallet= | Public: where a wallet’s chain ends and how long it is, never what is in it |
| GET /api/memory/proof?wallet=&day= | Public: the wallet’s newest capsule as of a posted day, its leaf, and the hashes up to the root on chain |
| GET /api/space?wallet= · POST /api/space/buy | A wallet’s space (free, bought, holder bonus, used, left), and an unsigned purchase of more |
| POST /api/x402/tx | The purchase a 402 asked for, unsigned, for the paying agent’s wallet |
| POST /api/tx | A signed transaction sent through this server. Only the program’s purchase, stake, withdraw and claim pass |
| GET /api/checkpoints | The days this server posted to the program, newest first |
Errors
| HTTP | Code | When |
|---|---|---|
| 401 | authentication_error | No key or session, or the key is unknown |
| 401 | key_disabled | The key is paused |
| 402 | insufficient_balance | Not enough credit for what the request could cost |
| 402 | key_limit_reached | The key reached its spending limit |
| 403 | model_not_allowed | The key may not use that model |
| 404 | model_not_private | The model has no zero retention route right now |
| 429 | rate_limit_error | More than 60 requests a minute, or 4 at once, for one wallet |
| 502 | upstream_error | The model did not answer; nothing was charged |
| 503 | sealed_unavailable | The sealed room is not connected yet |
#Every purchase, split.
Chat credits and memory space are both bought by paying the Neuron program on Solana in USDC, by people in the app and by agents over x402 alike. The program divides each payment before the transaction ends:
#Staking, paid in USDC.
Stake $NEURON and you are paid your share of every purchase in USDC, in the same transaction that pays for it:
Kept exact with a running reward per staked token and its remainder, so no fraction of a cent is lost (Batog, Boca and Johnson, 2018).
paid to you, r$100USDC a month
paid to all stakers$10KUSDC a month
bought and burned$10Kof NEURON a month
- Paid at once. Your share lands with each purchase; claim whenever you like.
- Locked 24 hours. Staking or adding to a stake locks it for a day, so no one can borrow tokens, collect and leave in one block.
- Counted as received. A stake counts what the vault actually received, so a token with a transfer fee cannot inflate it.
Stake and claim in the app at app/stake.
#What holders get.
- USDC from every purchase. Staked $NEURON receives 10% of every purchase, chat credits, memory space and agents paying over x402, split by stake.
- Buyback and burn. 10% of every purchase buys $NEURON on the open market and burns it.
- Memory space. A wallet holding or staking 1,000,000 $NEURON gets 1.00 GB more memory, room for millions of memories, from a snapshot taken once a week.
An example, not a forecast: if people and agents spend $20,000 in a month, stakers share $2,000 in USDC and $2,000 of $NEURON is bought and burned. A wallet with 1% of all staked $NEURON gets $20 that month. The holder numbers are proposed and set at launch.
#Buyback and burn.
The buyback part of every purchase goes to a single wallet whose only job is to buy $NEURON on its market and burn it. Both transactions are public, and the burned total is read from the token’s supply below.
#What the admin can do.
Only the program’s upgrade authority can set it up. After that, the admin key has exactly these powers, and nothing pauses staking, moves staked tokens or takes rewards.
| Instruction | Who | What it changes |
|---|---|---|
| purchase | Anyone | Pays USDC and splits it as above |
| stake · withdraw · claim | The staker | Only their own stake and rewards |
| distribute | Anyone | Adds USDC for current stakers |
| set_params | Admin | The split and the minimum; stakers plus buyback at most 50% |
| set_destinations | Admin | The treasury and buyback wallets |
| propose · accept admin | Admin, then the new admin | Moves the admin in two steps |
| set_keeper | Admin | Which key may post each day’s Checkpoint |
| attest | The keeper | Posts one day’s roots (copy checks, capsule heads); moves no funds |
Program: CtTn5A2GD4RebP3AdGNyBGPM6LSSsBpx51bVWETuAD5r, deployed at launch.
#Live numbers.
Starts at launch
| So far | |
|---|---|
| Purchases, credits and space | — |
| USDC spent | — |
| USDC paid to stakers | — |
| NEURON staked | — |
| Stakers | — |
| NEURON burned | — |
| Yearly rate to stakers | — |
The yearly rate is last week’s USDC to stakers scaled to a year, over what is staked at today’s price. It moves with every purchase and is not a promise.
#Who sees what.
| Who | Sees | Does not see |
|---|---|---|
| Neuron | Your address, balance, and per request: time, model, tokens, cost | Your words or the answers, beyond relaying them |
| The model’s provider | The words, any recalled memories sent with them, and the answer, while it answers | Who sent them; one Neuron user from another |
| The search provider | A query the model wrote, when Search is on | Who it is for |
| Anyone on chain | That a wallet bought credits or space, how much and when | Anything about what you asked or kept |
| Anyone on IPFS | That a wallet has a capsule for a day and how many memories it holds | What they say, without the wallet |
| Someone with your device | Kept history, only if they can also sign with your wallet | History, without the wallet |
#Limits, stated plainly.
- Zero retention is a promise. That providers keep nothing rests on their terms and on the routing above. The sealed room is how open models move from promise to proof.
- Our server relays your words. It sees them in passing and is trusted to keep nothing, as described here.
- A wallet is a name. The chain links an address to its purchases and to where its USDC came from. A fresh wallet used only for Neuron keeps those apart.
- Recall sends what matches. With Memory on, the entries that match a question go to the model with it. Keep in memory only what you would say to the model anyway.
- The wallet is the key. Lose it and no one can open the memory, us included. Anyone who can sign with it can.
- Words can name you. A message that identifies its writer still does, whoever carries it.
- Answers can be wrong. Neuron changes who keeps the conversation, not what the model knows. Nothing here is financial, medical or legal advice.
#What comes next.
- The sealed room: open models inside hardware enclaves, with a public signed report for each.
- A stakers’ allowance: free messages every week for staked $NEURON.
- Studio: video and audio under the same rules.
- Desktop: the same room and the same memory, with tools.
