Six things you do with Sable.
One API, one balance, one receipt format — organised by what you are actually doing. Every feature below carries its real status, because a list where everything looks shipped tells you nothing.
59 features · 45 live on the production deployment today
Works on the production deployment today.
Built and tested, but the deployment must configure it first — a provider, key, flag or allowlist.
Shipped, but deliberately not open to everyone yet.
Not built. Described so the direction is legible, never in the present tense.
Run
Inference and code execution through one OpenAI-compatible surface, metered at the gateway.
Ask Sable
LiveA keyless assistant grounded in what Sable actually ships.
Chat completions
LiveThe drop-in OpenAI-compatible endpoint. Change the base URL, keep your code.
Responses API
LiveOpenAI's newer request shape, on the same metering and receipts.
Messages API
LiveAnthropic's wire format, so Claude Code works against one env var.
Embeddings
LiveVector embeddings on the same sealed-envelope path as chat.
Models
LiveOne stable id per model, with the engine that served disclosed on the receipt.
Sandboxes
LiveMetered code execution billed per vCPU-second, with a signed receipt for the run.
Sandbox sessions
Config-gatedA warm sandbox an agent can exec into repeatedly instead of paying cold start each call.
Config-gatedStudio
Config-gatedGenerate images and video in the portal, each with provenance attached.
Config-gatedImages
Config-gatedOpenAI-compatible image generation, metered per image.
Nodes
PreviewThe published wire contract a serving node speaks, and the fleet currently enrolled.
Region pinning
Config-gatedPin a request to a region — honoured only where the deployment actually declares one.
Config-gatedBuild
The pieces an autonomous agent needs to exist: hosted code, memory, state, tools, evaluation.
Hosted agents
LiveDeploy agent code and Sable runs it on a schedule, under its own bounded key.
Memory
LiveMetered knowledge bases: chunk, embed, store sealed, search.
Agent runtime
LiveDurable sealed key-value state and an agent-to-agent mailbox.
Evals
LiveDefine a suite, run it against a model, and get told when a pass rate regresses.
MCP server
LiveSable's own tools over MCP, so an MCP client can meter and verify what it did.
MCP Gateway
LivePut a third-party MCP server behind Sable's budgets, policies and receipts.
LiveServices
LivePublish what your agent can do, and let another agent call and pay for it.
LivePayment rail
LiveNon-custodial invoices: the payer pays the payee on-chain, Sable signs the settlement.
Govern
Budgets, scopes, mandates and rules that bind in the request path — not on a dashboard afterwards.
API keys
LiveSpend caps that refresh on a window, model allowlists, expiry, and a circuit breaker.
Delegation
LiveAn agent mints a bounded sub-key for a sub-agent mid-run — never looser than its parent.
Mandates
LiveA signed, bounded authorization to spend, paired with proof of what was actually spent.
Guardrails
Config-gatedSecret, injection and blocklist checks in the request path, stamped on the receipt.
Config-gatedWebhooks
LiveHMAC-signed events with durable delivery — including one per signed receipt.
Observability
Config-gatedPrometheus metrics and OTLP traces, exported to the collector you already run.
Config-gatedPaying with USDT
LiveTop up a prepaid balance on-chain; compute draws it down. No invoices, no card.
Billing
LiveThe append-only credit ledger behind every balance, and what each unit costs.
LiveSubscription
Config-gatedA plan buys limits, retention and capabilities. It never buys cheaper compute or privacy.
Config-gatedProve
Every metered call returns a signed receipt anyone can verify, and receipts chain into runs.
Receipts
LiveEvery metered call returns a signed, content-free receipt anyone can verify.
Runs
LiveReceipts from one agent session, chained by hash into a run you can prove end to end.
Audit packs
LiveA signed, tamper-evident export of a whole run — every receipt, the head hash, the span.
Compliance mapping
LiveWhich artifact answers which control — and what Sable does not certify.
LiveAgent Passport
LiveA public credential built from an account's own provable history. Facts, not a trust score.
Proof
LiveThe signer address, live attestation registers, and a paste-anything receipt verifier.
LivePublic anchoring
Config-gatedBatch commitments published on-chain, so a hash chain has a public timestamp.
Config-gatedSeal
Prompts, completions and submitted code are never persisted. Privacy is the default, not a plan.
The privacy contract
LivePrompts, completions and submitted code are never written to disk or logs. No such column.
LivePrivacy tiers
LiveStandard, confidential and sovereign — and exactly what each one does and does not promise.
LiveThe privacy ladder
LiveAnonymized, double-blind, confidential — three rungs, each labelled with what it really hides.
LiveOutbound scrubbing
LiveRedact secret and PII shapes from a prompt in-frame, before it reaches any vendor.
LiveGhost
LiveA short-lived scoped key whose metadata is purged when the session is destroyed.
Hold
A private registry for real-world assets: sealed at rest, hash-chained, publicly settleable.
Attestation
Config-gatedCheck a declared asset figure and keep the signed evidence, versioned and never rewritten.
Config-gatedVault
LiveA private registry for real-world assets: sealed at rest, hash-chained, publicly settleable.
View keys
LiveGrant an auditor exactly the fields you authorize, with no Sable account of their own.
LivePrivate NAV
Config-gatedPublish the net asset value without publishing the book behind it.
Config-gatedPrivate Benchmark
LiveCompare performance against a cohort without handing over the portfolio.
LiveA status describes availability, not a guarantee. Live means the endpoint works today, not that a tier's stronger promise applies to it: standard is not confidential, an attributed receipt names who served a request rather than proving the work was correct, and no third-party operators serve traffic — Sable is not a marketplace. The tiers page and the trust page state each limit in full.
Start where you are.
If you have never called it, the quickstart is five minutes. If you are already calling it, the portal has the receipts.