Hey everyone! Long-time Nostr user/developer as well as lurking on SN. I wanted to share something I've spent a lot of time building.
None of the "private" or "anonymous" platforms that let you access LLMs were really that private or anon. Nor did they have that many features beyond a basic chat. So, I built it with Nymbot. The service is incredibly private, can be completely anonymous, and has robust features matching or exceeding other offerings. Just a shortlist:
- No account email, phone number or password: a Nostr key made on your device is your identity, your history and your balance. Or, you can use your existing Nostr identity.
- End-to-end encrypted: every question and answer travels as a gift-wrapped Nostr event, readable only by you and Nymbot.
- Quantum-resistant: ML-KEM is combined with the classical key exchange, so traffic captured today can't be read later.
- Anonymous mode: move a chat onto a throwaway key and spend credits moved across as blind vouchers, so a reply can't be traced back to you.
- Paid in Bitcoin: no subscription and no card. You buy credits over Lightning and pay per reply: base 10 sats for a standard reply, 100 for a frontier model.
- Free daily replies: a free allowance of standard replies each day, before you buy anything. Actually free, no data-mining.
- Every frontier model: Claude, GPT, Gemini, Grok, Kimi, Qwen and MiniMax. You can pin one per chat, or let Nymbot pick a model for each message.
- Compare models: ask two models the same question side by side.
- Works in your repo: connect GitHub, GitLab or Gitea. Nymbot reads and searches your code and, with writes turned on, commits, branches and opens pull requests, asking you first each time.
- Run code: Python and JavaScript run free on your own device, and optional paid server runs handle anything bigger. This works in shared chats too.
- Artifacts and live preview: HTML and other code in a reply can be previewed in a locked-down frame.
- Image and video: more than twenty generator mdoels. You can also edit a photo you attach, or ask what's in a picture.
- Web search and deep research: web access adds context for answers and for sourced research with a Pro model.
- Documents: attach large PDFs and Nymbot searches them, citing the pages it used.
- Teams: split a big task across 2 to 4 parallel workers.
- Connectors: plug in MCP tool servers per chat.
- Memory: standing facts about you, carried between chats, that you can read and delete.
- Personas, bots and workspaces: custom instructions, bots you write yourself, and ready-made chat setups.
- Scheduled prompts: have Nymbot ask something on a schedule and notify you.
- Voice: dictation, and replies read aloud in the reply's language.
- Encrypted share links: share a read-only chat whose key stays in the link, with an optional post to Nostr.
- Many conversations: unlimited chats with folders, tags, pins, archive, search, forks and export.
- Sync everywhere: encrypted settings and chats follow your key across devices. Your identity and balance are shared with Nymchat.
- Key backup: back up your key with a passkey, or with a PIN through Apple or Google.
- Gifts and transfers: send credits as a gift link, or move your balance to another key.
- Every platform: a web app you can install, plus Android and iOS apps.
Nymbot was born out of my other app, an encrypted messenger and geohash mesh chat, called Nymchat. I decided to roll Nymbot into its own service/platform/app, and really glad I did.
Would love any feedback, supportive or critical, as I am open to learning what's awesome or what might suck so I can improve it. Thanks!
and then
Who runs this
Nymbot?I built and operate it, and it is also open source: https://github.com/Spl0itable/Nymbot
Right but then what's private about it if I just have an encrypted session with a person that chose
spl0itableas their GH username?There are no guardrails or logs kept and even if there were, there is no way to link to a real identity or even the pubkey, especially if you choose the anonymous mode option, as detailed in the OP.
I implore you to check the source code. None of the model operators will even know who has sent the message beyond it originating from my own API, to which I also cannot know who it originated from.
In the fiat mines, I work in CyberSec and I've worked with metasploit on a regular basis, which is what my username was inspired by.
Then above:
Where is the memory kept?
I must be going completely retarded. You work in "cybersec" and you solicit:
I'm totally missing something here, right?
Memories are saved on the device first, and they're also part of the encrypted account sync (which is using Nostr's NIP-44 in addition to ML-KEM encapsulation). Other platforms such as Maple or PPQ, etc are also middlemen. Any platform that is gateway to 3rd party providers inherently acts as a middleman. How they handle the transfer of that data is what is important. And that's why being transparent and open source is crucial.
I'm a little confused on your fixation with my GH username and/or career as an ad hominem, when you can verify all claims provably from the Nymbot source code. The repo even includes the server code used to run the bot itself.
Check my other repos/projects as well. I have a long history building for Nostr and am not some flyby, overnight scammer or whatever it seems you're alluding to?
Alright. I'm not saying you're a scammer, I'm saying you're making claims that are incoherent and I was suspicious that your narrative doesn't hold. To the end of holding that narrative, you may want to take a deep look at what you send to Cloudflare unencrypted. For "pro" users specifically.
Absolutely, everything that should be encrypted is and transported via HTTPS.
Can it be configured to work with VS Code as Claude Code plugin? How will price compare to Pro subscription? Aren't nostr messages too slow for this?
Building out an API for users is something planned, which could potentially support an IDE with a plugin. I'll definitely look into that, thanks.
Regarding the Nostr messages, in what way do you mean by slow? The message transport over relays or the encrypted message itself being large so its transfer it slower?
I just observed Nostr messaging not very reliable in general, compared to direct API connections. Can't you give a regular IP/domain name, and the users who need anonymity just use a VPN?
Ah, gotcha. Yes, I have my own gripes about poor implementation of NIP-17 for DMs in other apps and then it's made it even worse with the outbox model. So, I feel you with regards to unreliable messaging from that perspective.
Nymbot is using the relays only as backups, and passing the encrypted messages directly through the server, so it doesn't face the same unreliable messaging as another Nostr app normally might.