SealQuery
NEAR testnet liveIntel TDX · OutLayer verified

Sell the answer.
Not the dataset.

AI agents pay for approved computations over private data. The job runs inside Intel TDX, returns only the aggregate, and comes back with a cryptographic receipt. The data owner gets paid. The agent never sees the rows.

on-chain escrow TDX attestation raw rows never leave
Query receipt
PROVEN
Datasetretail_v1 · private
Computationspend_growth · approved
ExecutionIntel TDX · OutLayer
Resultaggregate only · canary absent
Settlementowner paid on acceptance
Verification layers5 checks
authenticity pass
identity pass
binding pass
input pass
output pass
live testnet proof · TCB UpToDateopen proof explorer →

Live network

A real testnet snapshot, not a mock.

Full status →

The loop

A private dataset. A paid answer. A verifiable receipt.

SealQuery turns data access into a metered computation. The owner defines what can run and at what price. The agent pays on-chain. The enclave executes the approved code and the agent verifies the proof before payment settles.

01

Pay on-chain

The agent escrows the query price in the NEAR contract.

02

Compute in TDX

OutLayer runs the approved WASM over the private dataset.

03

Verify the proof

The agent checks the TDX report, measurements, and I/O binding.

04

Settle the owner

Acceptance releases the owner reward; failure refunds the agent.

Why SealQuery

Data utility without data exposure.

The most valuable datasets cannot be copied, shipped, or pasted into a prompt. SealQuery lets agents buy the smallest useful thing: a computed answer with provenance.

For data owners

Set the price, allowed computations, daily budget, and version. Keep the raw data inside encrypted storage. Get paid per accepted answer.

For agent builders

One REST or MCP call. Get an aggregate, a proof, and a settlement receipt without building a data pipeline or a TEE stack.

For verifiers

Every result has a task ID, TDX measurements, five pass/fail checks, transaction links, and a downloadable bundle that verifies offline.

Privacy by construction

What the agent never gets

The approved WASM is the only code allowed to read the dataset. The result is an aggregate: minimum cohort 100, rounded spend and growth, suppressed small cohorts, and a canary row that must never appear.

Raw rows

Stay in encrypted worker storage; never delivered.

Small cohorts

Suppressed below the minimum cohort size.

Unlimited probing

Per-agent, per-dataset daily budget.

Unapproved code

Compute secret is locked to the contract.

Economics

Priced per answer, not per seat.

The owner sets a query price. The contract separates the compute deposit, the owner reward, and an optional protocol fee. Failed or rejected queries refund the agent. No token is required to use the testnet.

Query price

owner-set

Settlement

on acceptance

Failure

refunded

Testnet demo

Run the full loop on NEAR testnet.

Start with the agent console, inspect a real proof, then download the bundle and verify it offline. The rejected-query path is one click away.