Phala Cloud Documentation — Confidential AI on TEE

Attestation Report

curl --request GET \
  --url https://api.example.com/aci/attestation

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/aci/attestation",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/aci/attestation"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.example.com/aci/attestation")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

GET

aci

attestation

Attestation Report

curl --request GET \
  --url https://api.example.com/aci/attestation

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/aci/attestation",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/aci/attestation"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.example.com/aci/attestation")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

Endpoint

GET https://inference.phala.com/v1/aci/attestation?nonce={nonce}

This endpoint returns the ACI gateway’s attestation report. The report proves which TEE workload serves the API and publishes the public keyset used for receipts and end-to-end encryption.

Always pass a fresh random nonce when verifying an attestation report. The gateway binds the nonce into the quote’s report data so old reports cannot be replayed as fresh evidence.

Parameters

string

required

Fresh random value, for example 16 or 32 bytes encoded as hex.

Example

NONCE=$(openssl rand -hex 32)

curl "https://inference.phala.com/v1/aci/attestation?nonce=$NONCE" \
  -H "Authorization: Bearer <API_KEY>"

import secrets
import requests

nonce = secrets.token_hex(32)

response = requests.get(
    "https://inference.phala.com/v1/aci/attestation",
    params={"nonce": nonce},
    headers={"Authorization": "Bearer <API_KEY>"},
)

report = response.json()

Response

200 OK, application/json. The response is the bare attestation report.

Top-level fields

Field	Type	Description
`api_version`	string	ACI version token, for example `aci/1`.
`workload_id`	string	`sha256:...` identity of the running gateway workload.
`workload_keyset_digest`	string	`sha256:...` digest over the published keyset.
`attestation`	object	TEE evidence, source provenance, and keyset data.
`all_attestations`	array	Full attestation objects for each server in a multi-instance deployment.
`service_capabilities`	object	Runtime capabilities such as supported E2EE versions.

`attestation` object

Field	Type	Description
`tee_type`	string	TEE technology, for example `tdx`.
`vendor`	string	Deployment vendor tag.
`report_data`	string	Value bound into the quote. It commits to your nonce and the keyset.
`freshness`	object	`fetched_at` and `stale_after` timestamps.
`source_provenance`	object	Source repo, commit, image digest, and image provenance when available.
`workload_keyset`	object	Workload identity, receipt signing keys, E2EE public keys, TLS public keys, and keyset epoch.
`keyset_endorsement`	object	Signature over the keyset under the workload identity key.
`evidence`	object	TDX quote, quote report data, event log, VM config, and key custody details.

{
  "api_version": "aci/1",
  "workload_id": "sha256:3def476b...",
  "workload_keyset_digest": "sha256:3eff0836...",
  "attestation": {
    "tee_type": "tdx",
    "vendor": "phala-confidential-ai",
    "report_data": "7b7daf62...",
    "freshness": {
      "fetched_at": 1781589476,
      "stale_after": 1781593076
    },
    "source_provenance": {
      "repo_url": "https://github.com/Dstack-TEE/private-ai-gateway.git",
      "repo_commit": "9d45c7e3d48d2f74c31cd85f1fb5c6cee1435ef3",
      "image_digest": null,
      "image_provenance": null
    },
    "workload_keyset": {
      "workload_identity": { "public_key": { "algo": "ecdsa-secp256k1", "public_key": "04d3b5..." } },
      "receipt_signing_keys": [
        { "key_id": "dstack-kms-receipt-v1", "algo": "ecdsa-secp256k1", "public_key": "04211c..." }
      ],
      "e2ee_public_keys": [
        { "key_id": "dstack-kms-e2ee-v1", "algo": "secp256k1-aes-256-gcm-hkdf-sha256", "public_key": "04943c..." }
      ],
      "tls_public_keys": [],
      "keyset_epoch": { "version": 1, "not_after": 18446744073709551615 }
    },
    "keyset_endorsement": { "algo": "ecdsa-secp256k1", "value": "a91bff..." },
    "evidence": {
      "quote": "040002008100...",
      "quote_report_data": "7b7daf...",
      "event_log": "[{...}]",
      "vm_config": "{...}",
      "key_custody": { "provider": "dstack-kms", "keys": [] }
    }
  },
  "all_attestations": [],
  "service_capabilities": { "supported_e2ee_versions": ["2"] }
}

Verification Flow

Verify attestation.evidence.quote against Intel DCAP collateral.
Confirm the quote report data binds your nonce and the workload_keyset.
Verify keyset_endorsement under workload_keyset.workload_identity.
Confirm workload_id and workload_keyset_digest match the receipts you verify.
Confirm freshness.stale_after is in the future.
For production policy, confirm source_provenance matches the release you trust.

The end-to-end walkthrough is in Verify a Response.

Legacy Alias

GET /v1/attestation/report remains available as a compatibility alias for earlier clients. It returns the same gateway attestation, wrapped for older response shapes with top-level signer fields.

Get Receipt

Fetch the signed per-response receipt.

Verify Attestation

Learn what each attestation field proves.

​Endpoint

​Parameters

​Example

​Response

​Top-level fields

​attestation object

​Verification Flow

​Legacy Alias

​Related

Get Receipt

Verify Attestation

Endpoint

Parameters

Example

Response

Top-level fields

`attestation` object

Verification Flow

Legacy Alias

Related