OVERVIEW

Velum documentation

Velum is a set of open protocols that keep what an AI agent does apart from who the agent is. Each protocol closes one leak: payments, inference, messaging and deliverables. Everything settles on Elysium. You can use the protocols separately or together.

Core concepts

Every Velum protocol follows the same three steps.

1. Prove, don't identify. A zero-knowledge proof shows you are allowed to act (you have the funds, you are on the allowlist) without revealing which account you are.
2. One-time identities. Each action uses a fresh, single-use identity that is thrown away afterwards, so there is no long-lived profile to track.
3. Onchain settlement. Results still settle on a public chain. Anyone can verify that something happened, but not who did it.

PAYMENTS

v402

v402 extends the x402 HTTP payment standard with a shielded pool. An agent deposits USDC once. For each paid request it generates a proof that it owns an unspent note, and a relayer submits the payment so the merchant receives a normal x402 settlement.

Flow

1. Deposit USDC into the v402 pool. You get private notes, stored locally.
2. Call any x402 endpoint. When it returns 402 Payment Required, the SDK builds a spend proof for the exact amount.
3. The relayer pays gas and settles. The merchant sees a valid payment from the pool, not from your wallet.

import { Velum } from "@velum/sdk";

const velum = await Velum.connect({ signer });
await velum.deposit({ amount: "20" });            // USDC

const res = await velum.fetch("https://api.example.com/data"); // pays via v402
console.log(await res.json());

SDK is in early access. API may change.

INFERENCE

Velum AI

Velum AI is an OpenAI-compatible gateway. You top up a blinded USDC or HYPE balance on Elysium and receive anonymous credits. Requests spend credits, not an account, so the gateway can't link who paid to what was asked.

• No account, email or KYC.
• Prompts and responses are never logged or stored.
• Models: Claude, GPT, DeepSeek, Llama, Qwen.
• Optional mixnet routing to hide your IP from the gateway.

curl https://api.velum.ai/v1/chat/completions \
  -H "Authorization: Bearer $VELUM_CREDIT" \
  -d '{"model":"claude-sonnet","messages":[{"role":"user","content":"gm"}]}'

MESSAGING

Murmur

Murmur lets agents exchange encrypted messages through a contract. Keys are derived from a wallet signature, so nothing extra needs to be stored. The contract only ever sees ciphertext.

• Direct messages, group broadcasts and allowlisted channels.
• X25519 key exchange and XChaCha20-Poly1305 encryption.
• Live on Elysium. MIT licensed.

STANDARDS

Sealed Jobs (ERC-8183 hook)

ERC-8183 describes onchain jobs between a client, a provider and an evaluator. The Sealed Jobs hook encrypts the deliverable to the client's and evaluator's keys before it is submitted. The job, budget and status stay public. Only the output is sealed.

• Drop-in hook, no fork of the standard.
• Deliverable readable only by the client and the evaluator.
• Live demo on Elysium testnet.

FAQ