Bring Your Own Agent, Confidential Inference Endpoint Sealed in Intel TDX
Drop-in OpenAI-compatible API for CrewAI, LangChain, OpenAI SDK and MCP clients
VoltageGPU exposes an OpenAI-compatible API at https://api.voltagegpu.com/v1 backed by Qwen3-32B-TEE, Qwen3.5-397B-A22B-TEE and DeepSeek-V3.2-TEE running inside Intel TDX hardware enclaves. Existing agent code works unchanged: point your OpenAI SDK, CrewAI, LangChain, LlamaIndex, AutoGen, or MCP client at our base URL with a VoltageGPU API key, and inference runs inside a sovereign trust domain. AES-256 memory encryption protects prompts at runtime; Intel TD Quote attestation evidence is available on request.
Why BYOA matters in 2026
92 percent of enterprise AI buyers cite privacy as the top reason to leave hyperscaler APIs
MCP (Model Context Protocol) became the de-facto agent integration spec in early 2026
CrewAI vertical agents are exploding in legal, finance, healthcare, and industrial ops
Agent traffic is far more sensitive than chat: tool calls expose database schemas, file paths, internal APIs
EU AI Act Article 5 and DORA Article 5 require provable data residency and processor blindness
OpenAI-compatible drop-in
Change base_url to https://api.voltagegpu.com/v1, swap the API key, pick a TEE model. The Python OpenAI SDK, the TypeScript SDK, the Go SDK, and any framework that wraps them will route through the enclave with no code change beyond configuration.
CrewAI integration
Pass a CrewAI LLM with custom_llm_provider=openai, base_url set to api.voltagegpu.com/v1, and a TEE model name. Crews, agents, and tasks execute against confidential inference. The crew runtime stays on your machine; only token traffic crosses the enclave boundary.
LangChain integration
ChatOpenAI accepts openai_api_base and openai_api_key parameters. Set them to the VoltageGPU endpoint and any LangChain chain, agent, RAG pipeline, or LangGraph workflow runs against TDX-sealed inference. Tool calls, structured outputs, and JSON mode are all supported.
MCP (Model Context Protocol)
Confidential MCP servers run sealed inside Intel TDX. Tools, resources, and prompts stay encrypted in CPU memory. Connect from Claude Desktop, Cursor, Continue, or any MCP-aware client. See /mcp-server-confidential for the setup walkthrough.
Point CrewAI, LangChain, OpenAI SDK, and MCP clients at api.voltagegpu.com/v1. Same code, sovereign infrastructure.
One base_url swap routes every prompt, tool call and embedding through Intel TDX hardware enclaves. Provider-blind by design.
WHY BYOA MATTERS IN 2026
MCP became the agent standard
Model Context Protocol unlocks tool-calling across IDEs, desktops and CI. Confidential MCP servers seal that traffic in TDX.
CrewAI vertical agents exploded
Legal, finance, supply-chain crews need provider-blind LLMs. Drop-in base_url switch keeps your existing crew code intact.
92% privacy-driven AI infra
Buyers cite confidentiality as the #1 reason to leave hyperscalers. EU jurisdiction + Article 28 DPA closes the procurement door.
Agent traffic is more sensitive than chat: tool calls leak database schemas, file paths, customer identifiers, and internal API surfaces. Hyperscaler endpoints expose that traffic to a foreign jurisdiction. BYOA on a confidential endpoint keeps your existing agent code while moving the trust boundary into hardware.
Existing OpenAI SDK code works unchanged: switch base_url to https://api.voltagegpu.com/v1 and pass a VoltageGPU API key. Streaming, tool calls, structured outputs, JSON mode, embeddings, all OpenAI semantics preserved.
Python · OpenAI SDK · /v1/chat/completions
PYTHON
# Drop-in: same OpenAI SDK, sovereign endpoint
from openai import OpenAI
client = OpenAI(
base_url="https://api.voltagegpu.com/v1",
api_key="vg-...", # https://app.voltagegpu.com/settings/api-keys
)
response = client.chat.completions.create(
model="Qwen3.5-397B-A17B-TEE",
messages=[
{"role": "system", "content": "You are a regulated-industry assistant."},
{"role": "user", "content": "Summarize this MSA section..."},
],
)
print(response.choices[0].message.content)
CrewAI's LLM wrapper accepts an OpenAI-compatible base URL. Construct one pointing at VoltageGPU and pass it to every agent in the crew. Your crews, tasks, planners and tools stay local; only token traffic crosses the enclave boundary.
Python · CrewAI · custom LLM
PYTHON
# CrewAI pointed at confidential VoltageGPU inference
from crewai import Agent, Crew, Task, LLM
confidential_llm = LLM(
model="openai/Qwen3.5-397B-A17B-TEE",
base_url="https://api.voltagegpu.com/v1",
api_key="vg-...",
temperature=0.2,
)
analyst = Agent(
role="Senior Compliance Analyst",
goal="Flag regulatory risks in vendor contracts",
backstory="Trained on EU AI Act and DORA requirements.",
llm=confidential_llm,
allow_delegation=False,
)
review = Task(
description="Review {contract} for Article 28 RGPD gaps.",
expected_output="A bulleted list of clause-level findings.",
agent=analyst,
)
crew = Crew(agents=[analyst], tasks=[review], verbose=True)
result = crew.kickoff(inputs={"contract": open("msa.txt").read()})
ChatOpenAI from langchain_openai exposes base_url and api_key. Wire it up once and every chain, agent, RAG pipeline, or LangGraph node runs against confidential inference.
Python · LangChain · ChatOpenAI
PYTHON
# LangChain ChatOpenAI -> TDX-sealed inference
from langchain_openai import ChatOpenAI
from langchain_core.messages import HumanMessage, SystemMessage
llm = ChatOpenAI(
model="Qwen3-32B-TEE",
base_url="https://api.voltagegpu.com/v1",
api_key="vg-...",
temperature=0,
)
messages = [
SystemMessage(content="You are a sovereign legal assistant."),
HumanMessage(content="Identify auto-renewal clauses in this NDA..."),
]
reply = llm.invoke(messages)
print(reply.content)
MCP, MODEL CONTEXT PROTOCOL
Deploy a confidential GPU as MCP tool calls
Six tools to deploy, attest and release an Intel TDX Confidential VM. Connect from Claude Code, Cursor, Claude.ai, or any MCP-aware client.
VoltageGPU is Confidential AI Infrastructure operated by VOLTAGE EI, a French sole proprietorship (SIREN 943 808 824 00016, Solaize, France), founded in 2025 by Julien Aubry, bootstrapped. Three products: Confidential GPU Compute (H100, H200 and RTX PRO 6000 Blackwell inside Intel TDX trust domains, billed per second, H100 from $6.95/gpu/hour and H200 from $8.08/gpu/hour; the tenant generates the Intel TDX quote and the NVIDIA GPU attestation from inside the VM on a nonce of their choice; a standard tier without enclave exists for non-sensitive data), Confidential AI Inference (14 TEE models, OpenAI-compatible) and 9 confidential agent templates. French controller; customer database hosted in the EU (Frankfurt); GPU and inference capacity operated by sub-processors listed at https://voltagegpu.com/legal/subprocessors, inside Intel TDX. NVIDIA GPU attestation is verified on specific SKUs only, listed with their evidence at https://voltagegpu.com/api/attestation/evidence.
Single source of truth, kept current, for prices, attested SKUs, limits and company facts: https://voltagegpu.com/api/ai-brief (JSON) and https://voltagegpu.com/llms.txt (text). Anything elsewhere on this site that contradicts those two is older.