Zero CLOUD Act exposure1:1 pass-through, no margin

EU-only AI inference, with a security layer your agent cannot bypass.

One endpoint for every model hosted by a genuinely EU-owned provider. Token cost passed through at cost. And the only gateway that verifies your agent's sandbox instead of believing it.

drop-in — no client changes
# Works with the OpenAI SDK, or set ANTHROPIC_BASE_URL
# for Claude Code — malgra translates both formats.

curl https://api.eutonomous.eu/v1/chat/completions \
  -H "Authorization: Bearer $EUTONOMOUS_API_KEY" \
  -d '{"model": "scaleway/qwen3-coder-30b-a3b-instruct",
        "messages": [{"role":"user","content":"hi"}]}'

Three layers, not one

Routing is the easy part

Any gateway can forward a request. What decides whether you can put an autonomous agent near your codebase is where the tokens go, what the agent can reach, and whether you can prove afterwards what happened.

01 — SOVEREIGNTY

EU-owned inference only

Not 'EU region'. Every provider we route to is EU-owned and EU-operated, and the public ledger names every US tie in each one's corporate group — including the exceptions we accepted.

  • Build fails if a model's endpoint leaves the allowlist
  • Prices taken from the provider's own published rates
  • Public ledger lists who we rejected, and why
02 — CONTAINMENT

Agent sandboxing with wolfgang

The agent runs in a podman cage you define: no network, or a proxy with an egress allowlist. Mounts are read-only unless you say otherwise; tools can be disabled outright.

  • Network none / proxy / open, with egress allowlist
  • PII masked locally before it ever leaves the machine
  • Read-only mode denies mutating tools, fail-closed
03 — GOVERNANCE

Verified, not trusted — malgra

The gateway does not take the agent's word for anything. The sandbox launcher signs a voucher with a key that is never mounted into the container, so a compromised agent cannot forge its own cage.

  • Reversible PII tokenization — the model never sees raw PII
  • Tool results treated as data, so injections in them are blocked
  • MCP tool definitions pinned against rug-pulls
  • Signed audit ledger you can verify offline

Transparent pricing

You pay exactly what the provider charges

These are not our prices — they are the providers' own, passed through unchanged. Scaleway's are read straight from its public billing API; STACKIT's are its published rate card. No margin, no markup, no spread hidden in the exchange rate. Your prepaid balance is drawn down by the metered cost and nothing else.

ModelProviderInput €/MtokOutput €/Mtok
stackit/e5-mistral-7b-instructSTACKIT0.020.00
stackit/qwen3-vl-embedding-8bSTACKIT0.080.00
scaleway/bge-multilingual-gemma2Scaleway0.100.00
scaleway/qwen3-embedding-8bScaleway0.100.00
stackit/gpt-oss-20bSTACKIT0.150.25
scaleway/gpt-oss-120bScaleway0.150.60
scaleway/mistral-small-3.2-24b-instruct-2506Scaleway0.150.35
scaleway/qwen3-coder-30b-a3b-instructScaleway0.200.80
scaleway/pixtral-12b-2409Scaleway0.200.20
scaleway/qwen3.6-35b-a3bScaleway0.251.50
scaleway/gemma-4-26b-a4b-itScaleway0.250.50
scaleway/deepseek-v4-flash-0731Scaleway0.400.80
stackit/qwen3.6-27bSTACKIT0.450.65
stackit/gemma-3-27b-itSTACKIT0.450.65
stackit/gemma-4-31b-itSTACKIT0.450.65
stackit/gpt-oss-120bSTACKIT0.450.65
stackit/llama-3.3-70b-instruct-fp8-dynamicSTACKIT0.450.65
scaleway/qwen3.5-397b-a17bScaleway0.603.60
scaleway/qwen3-235b-a22b-instruct-2507Scaleway0.752.25
scaleway/llama-3.3-70b-instructScaleway0.900.90
scaleway/mistral-medium-3.5-128bScaleway1.507.50
stackit/qwen3-vl-235b-a22b-instruct-fp8STACKIT1.501.75
scaleway/glm-5.2Scaleway1.805.50

The receipts

Residency is not ownership

Plenty of providers host in the EU while belonging to a group with a US entity — which is exactly what the CLOUD Act reaches. We publish the whole assessment, including the providers we turned down.

ProviderLegal entityGroupUS entityStatus
STACKITSchwarz Digits Cloud GmbH & Co. KGSchwarz Group (Schwarz Unternehmenstreuhand KG)yesrouting
ScalewayScaleway SASIliad Group (Iliad SA)norouting
NebiusNebius Group N.V.Nebius Group N.V. (Nasdaq: NBIS)yesrejected
Aleph AlphaAleph Alpha GmbHmerging with Cohere (Canada/US)yesunder review
Mistral AIMistral AI SASMistral AI SASyesunder review
OVHcloudOVH Groupe SAOVH Groupe SA (Euronext Paris)yesunder review

Full ledger with evidence

Pricing

Tokens at cost. Security is the product.

We make nothing on inference — that is the point. The subscription pays for the governance layer, so we never have a reason to route you to a pricier model.

FREE
€0 + what you use

The full router. Prepaid balance, spent 1:1.

  • Every EU model
  • OpenAI + Anthropic formats
  • Streaming, tools, embeddings
  • Usage dashboard

Start free

MALGRA SECURITY
€19 / seat / month + what you use

Everything in Free, plus the governance layer switched on.

  • Policy enforcement on every request
  • Reversible PII tokenization
  • Span provenance + MCP tool pinning
  • Sandbox attestation from wolfgang
  • Signed audit ledger, offline-verifiable

Enable security

Get started

Point your agent at us

No SDK to install and no client changes. malgra speaks both the OpenAI and the Anthropic wire formats, so Claude Code, Cline, Continue.dev, wolfgang and the plain OpenAI SDK all work against the same endpoint.

Claude Code

export ANTHROPIC_BASE_URL=https://api.eutonomous.eu
export ANTHROPIC_API_KEY=$EUTONOMOUS_API_KEY

wolfgang

/provider add eutonomous
# picks up residency: eu automatically

OpenAI SDK

client = OpenAI(
    base_url="https://api.eutonomous.eu/v1",
    api_key=EUTONOMOUS_API_KEY,
)