| Endpoints | Chat | Chat Completions only. /v1/responses, /v1/messages, /v1/messages/count_tokens, and MCP reject Encrypted headers. |
| Streaming | The reply arrives whole and is decrypted before it is shown. | stream: true returns the provider’s encrypted deltas as a passthrough, and your client reassembles and decrypts. |
| Reasoning | Where the model supports it. The summary arrives encrypted and is decrypted with the reply. | Accepted when the route advertises visible reasoning support. The reasoning summary comes back as ciphertext too. |
| Function tools | Not available in the app. It uses encrypted tool results internally for web grounding. | With nito-encrypted-encrypt-all-fields: 1, on backends that support it. Tool names, descriptions, JSON-schema parameters, tool_choice names, tool-call names and arguments, and tool results are all ciphertext. Your client decrypts the call, runs the tool, encrypts the result, and sends the next request. Only function tools are accepted in this mode. |
| Web search and fetch | Stay selectable where the model advertises them. A browser-side helper prepares the web context before the request is encrypted. | Rejected on the Encrypted request. Do your own retrieval and put the results in the prompt before encrypting. |
| Files and images | Documents are parsed to text in the browser. Client is the default, Server warns that the server sees the file before encryption, and Auto is hidden. Raw image uploads are not sent. | Content arrays and raw image, file, or document parts are rejected. Send text. |
| Fusion | Each participant answer is decrypted locally. Synthesize in Encrypted runs the synthesis through the Encrypted path as an explicit step. | Browser App only. |
| Nito Auto | | auto-low, auto-medium, and auto-high accept the :encrypted suffix. |
| Prompt caching | | Rejected. |
| Uncensored flag | | uncensored=true with an :encrypted model is rejected. |
| Chat history | A chat holding Encrypted turns accepts only Encrypted rows, and the summary model follows the chat’s route through the Encrypted path. | |
