Vendor: Cyan Eclipse Technologies · Platforms: MCP over stdio + HTTP/JSON (hosted relay, staging)
Certification scope
PASS-CONDITIONAL (hosted/staging) — Verity delta re-bench 2, 2026-10-27 (llm-connectors-20261027/bench-anthropic.md): adapter 0.1.2 on core 0.1.2; ANTH-D1–D4 all CLEARED. PASS-CONDITIONAL is not CERTIFIED — certified is false, and nothing beyond this verdict at hosted/staging scope is claimed. Hosted deployment is bench-passed at hosted/staging and is NOT yet public-live. Surviving conditions are LIVE-GATE items only: (1) per-model cache-read multiplier refresh from Anthropic's published pricing before live enrolment; (2) unbroken-cache confirmation against a recorded real response shape at the live gate.
What it does
- BYOK custody on the Cyan Eclipse Connect LLM core (core 0.1.2, PASS (hosted/staging)): your own provider API key is held only by the relay, encrypted (AES-256-GCM under a master key, via the core vault), under a signed, scoped, revocable grant — model allowlist, spend cap, expiry — and the agent never touches the key
- Every call is pre-checked against the grant and sealed into a content-free Herald-signed receipt; receipts are independently verifiable off-host from the published JWKS surface
- Instant kill switch: delete the key and kill every grant instantly; deleting a key cascade-revokes its grants; receipts are retained (they are content-free)
- Anthropic Messages API transport with x-api-key auth injection; thinking tokens priced once inside output; cache write/read accounting carried in the sealed receipt so a third party recomputes cache rows to the cent; price table anthropic-prices/2026-10-27
- Disclosure (SPEC §11.4(i)): you remain the provider's customer and are liable for your own account activity and bills; provider token costs are billed by the provider directly to you
- Disclosure (SPEC §11.4(ii)): the relay holds your key encrypted; the key is deletable and every grant is killable instantly
- Disclosure (SPEC §11.4(iii)): content logging is OFF by default; it can be turned on only per grant by you, never by an agent, and receipts themselves contain no prompt or response content, ever
- Disclosure (SPEC §11.4(iv), Anthropic): API keys only — subscription OAuth tokens and session credentials are refused at enrolment by design (KEY_TYPE_REFUSED); nothing here claims or implies this product is official, a partner product, or endorsed by Anthropic
Tools
llm_callllm_modelsllm_balancellm_receiptsllm_receipt_verify
Problems it addresses
- I need my agent to call the Anthropic Messages API without ever holding my Anthropic API key
- I need Anthropic calls bounded by a model allowlist, a spend cap, and an expiry — with a sealed receipt for every call
- I must keep subscription credentials out of any relay — API keys only, refused by design otherwise
Not tested
- Any live Anthropic call — bench ran against recorded fixtures/mocks only; no live provider smoke at this scope
- Public-live hosted enrolment — the LIVE-GATE items (per-model cache-read multiplier refresh; unbroken-cache confirmation) are outstanding until live enrolment opens
Evaluation-intake listing
This listing records the tool's place in the Bazaar's evaluation
and monitoring pipeline, with the evidence gathered so far printed above — verdict, scope,
and not-tested items included. It is not sold on this site, and its presence in the catalog
is not a claim beyond that evidence. The service behind every verdict is the bench:
what a bench run buys →