Verify it yourself
Every privacy claim on this site points at code, and these are the ones you can check from your own browser or terminal in a minute.
From your browser
Only one host. Open mitoshi.xyz with DevTools → Network and use the app. Every request goes
to mitoshi.xyz: calls about you are POST /relay/ohttp with content-type: message/ohttp-req, live prices are
WebSockets on /relay/live/*, list pictures are GET /relay/img, and fonts and scripts come from the same origin.
Sealed bodies. Click any /relay/ohttp request: its payload is ciphertext, not JSON.
What a copy trader sees. Every private wallet has a "What the public sees" view, read live from the venue's own public data over Oblivious HTTP.
From a terminal
The gateway's key as the gateway serves it, and as the app pins it. They must match, or the relay could read your requests:
curl -s https://mitoshi-gateway.vercel.app/ohttp-keys | base64grep GATEWAY_KEY_CONFIG packages/net/src/constants.tsBoth print ACkBACAV5em/Jd6iTp3ZtsO+Q8c6/nXzvtWg04Rq5UUC675KYwAEAAEAAQ== (checked 2026-10-23).
The page headers: a CSP with script hashes and no unsafe-inline for scripts, and no-transform, so Cloudflare can't
add a script on the way:
curl -sI https://mitoshi.xyz/ | grep -iE 'content-security-policy|cache-control'The gateway refuses anything that doesn't come through the relay:
curl -s -o /dev/null -w '%{http_code}\n' -X POST https://mitoshi-gateway.vercel.app/ohttpIt prints 401. The allowlist, every host and path the gateway will call for you, is
services/gateway/src/constants.ts.
What is verified
Dated, from the README's evidence table except where marked; the testnet transactions were checked again for these docs.
| What | Evidence |
|---|---|
| The browser wallet builds, proves and broadcasts Ironwood spends (NU7 testnet) | Three transactions at blocks 4,529,708, 4,529,789 and 4,529,846: see Testnet proof, with a script to check them |
| No third-party request from the page | On mitoshi.xyz the resource list holds one host; every user call is POST /relay/ohttp |
| Live public data on every venue | Polymarket, Polymarket Perps, Hyperliquid and Jupiter, all through the relay (seen on the live site while making these docs) |
| Gateway egress | Ireland (Vercel dub1), for every visitor |
| Polymarket over OHTTP | Market lookups, pUSD reads, a bridge quote (60 USDC → 59.987 pUSD), and the builder signer returning signed relayer headers |
| Confidential swaps on NEAR | A dry 1Click quote over OHTTP accepted in confidential mode: 0.01 ZEC → 11.86 USDC on HyperCore, about 465 s |
| Unit tests | 40 passing: engine 25, rails 8, venues 7 (4 Polymarket Perps signing, 3 Solana transactions; counted from the code) |
Not yet run on mainnet
The full round trip on each venue (fund a fresh wallet, trade, close, come home) has not run on mainnet yet. Until it has, no live trade is claimed here.
The tests:
pnpm install && pnpm testThis site
docs.mitoshi.xyz follows the same rules: fonts served from this site, no analytics, no remote images, a CSP with
per-page script hashes, and no-transform. Its Network panel holds one host, docs.mitoshi.xyz.