Get Session
curl --request GET \
--url https://api.example.com/aci/sessions/{session_id}import requests
url = "https://api.example.com/aci/sessions/{session_id}"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://api.example.com/aci/sessions/{session_id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.example.com/aci/sessions/{session_id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.example.com/aci/sessions/{session_id}"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.example.com/aci/sessions/{session_id}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.example.com/aci/sessions/{session_id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_bodyAPI Reference
Get Session
Fetch the immutable attested-session record behind a confidential response.
GET
/
aci
/
sessions
/
{session_id}
Get Session
curl --request GET \
--url https://api.example.com/aci/sessions/{session_id}import requests
url = "https://api.example.com/aci/sessions/{session_id}"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://api.example.com/aci/sessions/{session_id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.example.com/aci/sessions/{session_id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.example.com/aci/sessions/{session_id}"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.example.com/aci/sessions/{session_id}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.example.com/aci/sessions/{session_id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_bodyEndpoints
GET https://inference.phala.com/v1/aci/sessions/{session_id}
GET https://inference.phala.com/v1/aci/sessions?provider={provider}&model={model}
upstream.verified.session_id references the session used for that response.
Get One Session
string
required
The
as_... id from a receipt’s upstream.verified.session_id.curl "https://inference.phala.com/v1/aci/sessions/$SESSION_ID" \
-H "Authorization: Bearer <API_KEY>"
Response
| Field | Type | Description |
|---|---|---|
api_version | string | ACI version token. |
session_id | string | as_<sha256> content hash of the verified material. |
provider | string | Upstream provider or route name. |
endpoint | string | Verified upstream origin. |
verifier_id | string | Verifier that produced the result. |
established_at | number | Verification time as Unix seconds. |
expires_at | number | Retention deadline as Unix seconds. |
identity | object | Verified upstream identity keys when available. |
channel_binding | array | Enforced binding, such as a TLS SPKI digest or E2EE (end-to-end encryption) public key. |
claims | object | Typed claims about the upstream TEE. |
evidence | object | Byte-preserving evidence checked by the verifier. |
{
"api_version": "aci/1",
"session_id": "as_3681736b33b9b8191216968e37e350bfa1e4fd8d5d192bbebf4c17c0d4edf344",
"provider": "phala",
"endpoint": "https://inference.phala.com",
"verifier_id": "private-ai-verifier/phala-gateway/v1",
"established_at": 1781588840,
"expires_at": 1781589140,
"channel_binding": [{ "type": "tls_spki_sha256", "value": "..." }],
"claims": {
"tee_attested": { "status": "Asserted", "source": "HardwareProven", "reason": "verified TDX quote" },
"tcb_up_to_date": { "status": "Asserted", "source": "HardwareProven" },
"gpu_attested": { "status": "Unknown" }
},
"evidence": { "digest": "sha256:...", "data": "data:application/json;base64,..." }
}
List Sessions
Use the query form to inspect current sessions for a provider or model before sending prompts:curl "https://inference.phala.com/v1/aci/sessions?provider=phala" \
-H "Authorization: Bearer <API_KEY>"
Typed Claims
Each claim carries astatus, a source, and a reason when available.
| Source | Meaning |
|---|---|
HardwareProven | Comes from the verified TEE quote or collateral. |
VerifierDerived | Computed by the verifier from verified evidence. |
ProviderAsserted | Published by the provider, not independently proven. |
OperatorAsserted | Declared by the gateway operator. |
tee_attested, tcb_up_to_date, os_known_good, serving_software_known_good, gpu_attested, and model_weights_provenance. A claim that is not established is Unknown, not a silent pass.
Related
Get Receipt
Verify a Response
Was this page helpful?

