Self-host blindai
v0.6.3AI privacy solution with hardware-enforced secure enclaves
- Stars
- 513
- CPU
- Intel SGX+FLC capable CPU (SGX2 recommended)
- Ports
- 9923 (unattested server port (HTTP) for initial client verification), 9924 (attested server port for verified enclave communication)
- Requires
- Docker, Intel PCCS (Provisioning Certification Caching Service), Intel SGX AESM service, Intel SGX drivers
mithrilsecuritysas/blindai-serverWhat is blindai?
BlindAI is an open-source AI privacy solution from Mithril Security that enables confidential AI inference using hardware-enforced Trusted Execution Environments (Intel SGX and AWS Nitro Enclaves). It has two components: BlindAI API, a Python client for querying popular models hosted by Mithril Security, and BlindAI Core, which lets you self-host a server to deploy your own models securely. The server runs inside an SGX enclave, ensuring that neither the hosting provider nor any third party can access user data or model weights. BlindAI Core can be deployed on Azure DCsv3 VMs or on-premise Intel SGX+FLC hardware via Docker. The project provides a Python client SDK (pip install blindai) and a Rust-based server. Note: the README warns that BlindAI is not actively maintained and should not be used for sensitive data without contacting the maintainers.
Should you self-host blindai?
blindai scores 44/100 on selfhost.directory (how scoring works) and ranks #80 of 125 in AI. It has 513 GitHub stars.
There was no stable release in the past 12 months, so check the repository's recent activity before you rely on it.
Setup is advanced: plan for several services and some ongoing maintenance. An official Docker image is available. It is Apache-2.0-licensed and written mostly in Rust.
Its closest alternative on selfhost.directory is ComfyUI (93/100, 143 714 stars). It scores higher overall, so compare the two before you pick. See blindai vs ComfyUI side by side.
Features
- Confidential AI Inference
- Independent Security AuditAudit does not cover client SDK, BlindAI API, or Nitro enclaves
- Model Upload/Delete
- Multiple Enclave Support
- ONNX Model Support
- Pre-hosted Models (BlindAI API)Project not actively maintained; hosted API may be unavailable
- Python client SDK
- Remote Attestation
- Self-hosted Model Deployment
blindai README
FAQ
Has BlindAI been security audited?
Yes, a beta version of BlindAI Core was independently audited by Quarkslab SAS, though the audit does not cover the client SDK, BlindAI API, or Nitro enclaves.
What ports does BlindAI use?
BlindAI uses port 9923 (unattested, HTTP) for initial client verification and port 9924 (attested) for verified enclave communication.
What is the difference between BlindAI API and BlindAI Core?
BlindAI API is a Python client for querying popular models hosted by Mithril Security. BlindAI Core lets you self-host a server to deploy your own models with full privacy guarantees.
More in Privacy
BlinkoSelf-hosted AI note-taking app using RAG for intelligent search. Supports Markdown, native desktop apps on macOS/Windows/Android/Linux, PostgreSQL storage.
blockyFast and lightweight DNS proxy as ad-blocker for local network with many features
c15tOpen-source cookie consent tool for React, Next.js, Vue and vanilla-JS sites: in-bundle GDPR banners, vendor script gating, self-hosted backend for consent records.
cashu.meCashu.me is a self-hosted, open-source PWA wallet for the Cashu ecash protocol. Send/receive Bitcoin via Lightning using blinded bearer ecash tokens stored locally.
CloakBrowser-ManagerSelf-hosted anti-detect browser for unlimited isolated profiles with unique fingerprints. Open-source GUI (MIT) powered by CloakBrowser stealth Chromium.
cloudilloOpen-source self-hosted Google Workspace alternative with real-time docs, sheets, presentations. DNS-based identity lets you migrate providers without losing network.
Convert to it!Open-source, self-hosted file converter that crosses media boundaries (video to document, and more), running privately in your browser.
CookieCloudOpen-source cookie sync for self-hosted servers: a Chrome/Edge extension plus a Docker server that keeps cookies and LocalStorage in step using end-to-end encryption.
CounterscaleOpen-source, self-hosted web analytics that runs entirely on Cloudflare Workers and Analytics Engine, with a password-protected dashboard and long-term R2 exports.
crocSelf-hosted, open-source croc sends files and folders between any two machines with PAKE end-to-end encryption, resumable transfers, and your own relay via Docker.
DashBeamOpen-source P2P file transfer tool with self-hosted relay and discovery servers; direct device-to-device over QUIC + TLS 1.3, on desktop, Android, CLI and web.
DatabunkerSecure Vault for Customer PII/PHI/PCI/KYC Records

0 comments