Get Attestation Report

curl --request GET \
  --url https://api.redpill.ai/v1/aci/attestation \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.redpill.ai/v1/aci/attestation', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.redpill.ai/v1/aci/attestation",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.redpill.ai/v1/aci/attestation"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.redpill.ai/v1/aci/attestation")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

GET

aci

attestation

Get Attestation Report

curl --request GET \
  --url https://api.redpill.ai/v1/aci/attestation \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.redpill.ai/v1/aci/attestation', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.redpill.ai/v1/aci/attestation",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.redpill.ai/v1/aci/attestation"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.redpill.ai/v1/aci/attestation")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

Returns the gateway’s attestation report: the hardware-backed proof of which TEE workload is serving the API, plus the public keys it signs with. Verify this report before trusting any receipt. For what each field proves, see Attestation report.

GET /v1/aci/attestation?nonce={nonce}

Request

string

A fresh random value (for example 16 bytes hex). The gateway binds it into the quote’s report_data so you can prove the report is not a replay.

Response

200 OK, application/json. The bare attestation report.

Top-level fields

Field	Type	Description
`api_version`	string	ACI version token, for example `aci/1`.
`workload_id`	string	`sha256:…` identity of the running workload.
`workload_keyset_digest`	string	`sha256:…` digest over the published keyset.
`attestation`	object	The attestation evidence and keyset (below).
`all_attestations`	array	One full attestation object per server, for multi-instance deployments.
`service_capabilities`	object	`supported_e2ee_versions` (array).

`attestation` object

Field	Type	Description
`tee_type`	string	TEE technology, for example `tdx`.
`vendor`	string	Deployment vendor tag.
`report_data`	string	Value bound into the quote. Commits to your `nonce` and the keyset.
`freshness`	object	`fetched_at` and `stale_after` (Unix seconds).
`source_provenance`	object	`repo_url`, `repo_commit`, `image_digest`, `image_provenance`.
`workload_keyset`	object	`workload_identity`, `receipt_signing_keys`, `e2ee_public_keys`, `tls_public_keys`, `keyset_epoch`.
`keyset_endorsement`	object	`algo` and `value`: signature over the keyset under the workload identity key.
`evidence`	object	`quote`, `quote_report_data`, `event_log`, `vm_config`, `key_custody`.

Example (long values truncated)

{
  "api_version": "aci/1",
  "workload_id": "sha256:3def476b72026924f9d88f7b339b2e21…",
  "workload_keyset_digest": "sha256:3eff0836cd104d8cb5f8e8ee361789cf9…",
  "attestation": {
    "tee_type": "tdx",
    "vendor": "private-ai-gateway-dev",
    "report_data": "7b7daf62d7e9e31f5d17e70d32c010bda9ead273…",
    "freshness": { "fetched_at": 1781589476, "stale_after": 1781593076 },
    "source_provenance": {
      "repo_url": "https://github.com/Dstack-TEE/private-ai-gateway.git",
      "repo_commit": "9d45c7e3d48d2f74c31cd85f1fb5c6cee1435ef3",
      "image_digest": null,
      "image_provenance": null
    },
    "workload_keyset": {
      "workload_identity": { "public_key": { "algo": "ecdsa-secp256k1", "public_key": "04d3b5…" } },
      "receipt_signing_keys": [ { "key_id": "dstack-kms-receipt-v1", "algo": "ecdsa-secp256k1", "public_key": "04211c…" } ],
      "e2ee_public_keys": [ { "key_id": "dstack-kms-e2ee-v1", "algo": "secp256k1-aes-256-gcm-hkdf-sha256", "public_key": "04943c…" } ],
      "tls_public_keys": [],
      "keyset_epoch": { "version": 1, "not_after": 18446744073709551615 }
    },
    "keyset_endorsement": { "algo": "ecdsa-secp256k1", "value": "a91bff…" },
    "evidence": { "quote": "040002008100…", "quote_report_data": "7b7daf…", "event_log": "[{…}]", "vm_config": "{…}", "key_custody": { "provider": "dstack-kms", "keys": [ … ] } }
  },
  "all_attestations": [ "…" ],
  "service_capabilities": { "supported_e2ee_versions": ["2"] }
}

Verifying the report

Verify attestation.evidence.quote against Intel DCAP collateral, and confirm its report data binds your nonce and the workload_keyset.
Verify keyset_endorsement under workload_keyset.workload_identity.
Confirm workload_id and workload_keyset_digest match the receipts you verify.
Confirm freshness.stale_after is in the future.
In production, confirm source_provenance matches the reviewed release.

The end-to-end procedure is in Verify a response.

Legacy alias

GET /v1/attestation/report is a legacy compatibility alias for this endpoint, documented under Attestation Report.

Get receipt

The signed per-response receipt.

Attestation report concept

What each field proves.

Endpoints

Verification

Legacy

Get Attestation Report

Request

Response

Top-level fields

`attestation` object

Example (long values truncated)

Verifying the report

Legacy alias

Get receipt

Attestation report concept

​Request

​Response

​Top-level fields

​attestation object

​Example (long values truncated)

​Verifying the report

​Legacy alias

​Related

Get receipt

Attestation report concept

Request

Response

Top-level fields

`attestation` object

Example (long values truncated)

Verifying the report

Legacy alias

Related