OpenAI 2026 hackathon

ArchAI - Data Broker

ArchAI is a privacy-first MCP layer that redacts secrets, packages traceable context, and routes requests across Ollama, vLLM, and OpenAI—without owning your data.

Team of 2 · 0 likes · 0 comments

View the project on Devpost

Archive position — measured, not model output

0 likes on Devpost

2,263 of the 7,850 archived projects have more likes, and 5,587 share exactly 0 — so this project's #2,700 place in the like-ranked listing is a tie-break inside that group, not a ranking.

Projects (log scale)

1
10
100
1k
10k
05,587
11,758
2284
3–4132
5–975
10+14

Likes on Devpost. ▲ marks this project's group.

Show the figures
LikesProjectsShare of archive
05,58771.2%
11,75822.4%
22843.6%
3–41321.7%
5–9751.0%
10+140.2%
Devpost like counts for all 7,850 archived projects, captured when this archive was built.

User Stories BotA demo video on every pull request

Get a demo video on every new feature

GitHub App that watches your pull requests and records a narrated, captioned demo.
Save time on demo prep and make informed decisions faster with a video walkthrough of every new feature.

Executive Summary

What the company appears to be

ArchAI is a self-reported privacy-first MCP (Model Control Protocol) layer that redacts secrets, packages traceable context, and routes requests across Ollama, vLLM, and OpenAI-compatible providers—without owning user data. It is described as a lightweight, database-free service built in Node.js using MCP over standard input/output.

What changed

The project was submitted to the OpenAI 2026 hackathon, suggesting it emerged from a short development cycle focused on solving transparency and control issues in AI application workflows.

Single most important open question

Is there any evidence of real-world usage or adoption by developers or applications using ArchAI? The description makes no claims about customers, revenue, or traction beyond its own submission to a hackathon.

Back to contents

What The Product Actually Is

The description states that ArchAI is:

  • A lightweight, database-free MCP service.
  • Built in Node.js, using MCP over standard input and output.
  • Designed to remove sensitive information (API keys, tokens, emails) from outgoing context.
  • To organize context into traceable layers: Identity, Instructions, Task, Memory, Evidence, Recent activity.
  • To enforce configurable token budgets using a formula: $\hat{T}(x)=\left\lceil\frac{|x|}{4}\right\rceil$.
  • To route requests between Ollama, vLLM, and OpenAI-compatible providers.
  • To produce metadata-only audit events, without storing user conversations.
  • To expose six tools: archai_redact, archai_context, archai_route, archai_status, archai_ask, archai_audit.
  • Compatible with any MCP-capable application without requiring internal storage adoption.

Inferred: It is a control layer, not an AI model or inference engine itself. It does not store data, but it tracks what was sent and why.

Back to contents

Positioning & Claim Evolution

The description states:

  • ArchAI positions itself as a privacy-first MCP layer.
  • It aims to create transparency in how AI clients interact with models.
  • It emphasizes user control over privacy, context, routing, and audit data.
  • It claims to not own user data, instead offering redaction, traceability, and routing.

Inferred: The positioning evolved from a hackathon prototype into a tool for developers seeking control and auditability in AI workflows. The claim is that it allows switching between local and cloud providers without changing the application contract.

Back to contents

Target Customer & ICP

The description states:

  • ArchAI is built for MCP-capable applications, which implies developers or integrators working with AI clients.
  • It targets users who want to use Ollama, vLLM, and OpenAI while maintaining control over data flow.
  • It is designed for those who want to avoid surrendering ownership of their data or database.

Inferred: The ICP (Ideal Customer Profile) likely includes:

  • Developers building AI applications using MCP.
  • Teams seeking privacy compliance, auditability, and flexibility in model runtime choices.
  • Users who are not interested in proprietary solutions but want interoperable control layers.

Not evidenced: No specific customer segments, personas, or use cases beyond the hackathon submission.

Back to contents

Business Model & Pricing Evidence

The description states:

  • ArchAI is a self-contained service, built with no database.
  • It is described as a lightweight tool for developers.
  • It does not mention any pricing model, monetization strategy, or commercial offering.

Inferred: The business model is likely not yet defined. It may be a developer tool or open-source project that could evolve into a SaaS or consulting offering later.

Not evidenced: No revenue, pricing, or monetization details.

Back to contents

Technical & Delivery Signals

The description states:

  • ArchAI is implemented in Node.js, using MCP over standard input/output.
  • It requires no database, background telemetry, or inbound network port.
  • Context is divided into ordered layers: Identity, Instructions, Task, Memory, Evidence, Recent activity.
  • It uses a formula to estimate token cost: $\hat{T}(x)=\left\lceil\frac{|x|}{4}\right\rceil$.
  • It selects context layers based on a token budget constraint.
  • It exposes six MCP tools for redaction, routing, status, and audit.
  • It supports metadata-only audit events, without storing conversations.

Inferred: The technical architecture is lightweight, interoperable, and privacy-focused. It avoids traditional data storage or complex infrastructure dependencies.

Not evidenced: No information on scalability, performance, or production readiness.

Back to contents

Traction & Maturity Signals

The description states:

  • ArchAI was built for the OpenAI 2026 hackathon.
  • It is described as a self-contained service, not yet a product with customers or revenue.
  • The authors emphasize that it was built quickly and tested in a constrained environment.

Inferred: This is a prototype or early-stage tool, likely not yet adopted by users or integrated into production workflows.

Not evidenced: No customer data, usage metrics, or adoption signals beyond the hackathon submission.

Back to contents

Competitive Context

The description states:

  • ArchAI aims to solve issues around privacy, provenance, token management, and routing.
  • It is positioned as a control layer for AI applications using MCP.
  • It supports local runtimes (Ollama, vLLM) alongside cloud providers (OpenAI).

Inferred: The competitive space includes:

  • Other MCP-compatible tools or middleware.
  • Privacy-focused AI control layers or data governance tools.
  • Tools that enable switching between local and cloud inference engines.

Not evidenced: No direct competitors named, no market size, or competitive positioning data.

Back to contents

Open Questions & Risks

The description states:

  • ArchAI is a hackathon submission, not yet a mature product.
  • It does not store user conversations, but it does report what was removed and hashes payloads.
  • It uses pattern-based redaction, which the authors note is not a substitute for full security review.

Inferred:

  • Risk: Limited real-world testing or production use.
  • Risk: Pattern-based redaction may not be sufficient for high-security environments.
  • Risk: No database or persistence layer may limit auditability or long-term tracking in complex workflows.
  • Open question: The project is not yet commercialized, and no evidence of traction or monetization.

Back to contents

Questions the description leaves open

  1. What is the current status of ArchAI beyond the hackathon? Is it being used by any developers or applications?
  2. How does ArchAI handle edge cases in redaction, especially with complex or obfuscated data?
  3. Are there plans to support additional providers or model formats beyond Ollama, vLLM, and OpenAI?
  4. What is the intended monetization strategy for ArchAI? Is it open-source or SaaS?
  5. How does ArchAI integrate with existing MCP clients in production environments?
  6. Has the team considered performance implications of token budgeting at scale?

Back to contents

Overall Assessment

The description states:

  • ArchAI is a self-reported hackathon project.
  • It is described as a lightweight, privacy-focused tool for developers using MCP.
  • No evidence of revenue, customers, or traction beyond its own submission.

Inferred: At this stage, ArchAI is a conceptual prototype, not yet a commercial product. It may have potential in the AI control layer space, but there is no evidence of viability or demand.

Not evidenced: No financials, market data, or customer feedback to support an investment or partnership decision. The project is not ready for due diligence beyond its own self-reporting.

Back to contents

User Stories BotA demo video on every pull request

Get a demo video on every new feature

GitHub App that watches your pull requests and records a narrated, captioned demo.
Save time on demo prep and make informed decisions faster with a video walkthrough of every new feature.

Source

Submitted to the OpenAI 2026 hackathon on Devpost. Project home on Devpost. Back to the full gallery on Devpost.

This competitive analysis was produced by top-founders.com (opens in a new tab)

Generated by a language model from this project's public Devpost page — its tagline, the author's own write-up and any built-with tags listed there — as captured in August 2026. Short quotations are the author's words. It is an opinion on the idea as a business, not on the people behind it, and it reflects the description as published then. If the project has moved on, request a correction below. The analysis is not independent research and contains no verified traction, revenue or customer data.

An independent guide by KFG International LLC — not affiliated with, endorsed by, or connected to Devpost or OpenAI.

Are you the author of this project? Request removal or a correction (support@kfginternational.com). Requests from authors are acted on within 48 hours, and in any case within seven days. Privacy notice.