Signature
curl --request GET \
--url https://api.example.com/signature/{id}import requests
url = "https://api.example.com/signature/{id}"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://api.example.com/signature/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.example.com/signature/{id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.example.com/signature/{id}"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.example.com/signature/{id}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.example.com/signature/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_bodyAPI Reference
Signature
Use the legacy receipt wrapper for older Confidential AI clients.
GET
/
signature
/
{id}
Signature
curl --request GET \
--url https://api.example.com/signature/{id}import requests
url = "https://api.example.com/signature/{id}"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://api.example.com/signature/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.example.com/signature/{id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.example.com/signature/{id}"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.example.com/signature/{id}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.example.com/signature/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_bodyGET /v1/signature/{id} is a legacy compatibility endpoint. It returns the same proof as the canonical Get Receipt endpoint, but wrapped in the older text, signature, and signing_address envelope.
New integrations should use GET /v1/aci/receipts/{id}.
Endpoint
GET https://inference.phala.com/v1/signature/{id}
Parameters
string
required
Receipt id (
rcpt-...) or response id from POST /v1/chat/completions.Example
curl "https://inference.phala.com/v1/signature/$RECEIPT_OR_RESPONSE_ID" \
-H "Authorization: Bearer <API_KEY>"
Response
| Field | Description |
|---|---|
api_version | ACI version token, for example aci/1. |
signing_algo | Signature algorithm, for example ecdsa. |
signing_address | Address that signed text. |
text | "<request body hash>:<response hash>". |
signature | Signature over text. |
receipt | Full receipt object, identical to the canonical /v1/aci/receipts/{id} response. |
{
"api_version": "aci/1",
"signing_algo": "ecdsa",
"signing_address": "0xffb22d95...",
"text": "111d08a5...:07703fb4...",
"signature": "0xd0cd266a...",
"receipt": {
"receipt_id": "rcpt-...",
"event_log": ["..."],
"signature": "..."
}
}
Verification
For new clients, verify thereceipt object directly:
- Fetch a fresh Attestation Report.
- Confirm
receipt.workload_idandreceipt.workload_keyset_digestmatch the report. - Verify
receipt.signatureunder areceipt_signing_keysentry from the attested keyset. - Confirm the request and response hashes in
receipt.event_logmatch the bytes you sent and received.
signature over text, then bind signing_address back to a fresh attestation report.
Related
Get Receipt
Verify a Response
Was this page helpful?

