Get Session

curl --request GET \
  --url https://api.redpill.ai/v1/aci/sessions/{session_id} \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.redpill.ai/v1/aci/sessions/{session_id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.redpill.ai/v1/aci/sessions/{session_id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.redpill.ai/v1/aci/sessions/{session_id}"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.redpill.ai/v1/aci/sessions/{session_id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

GET

aci

sessions

{session_id}

Get Session

curl --request GET \
  --url https://api.redpill.ai/v1/aci/sessions/{session_id} \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.redpill.ai/v1/aci/sessions/{session_id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.redpill.ai/v1/aci/sessions/{session_id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.redpill.ai/v1/aci/sessions/{session_id}"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.redpill.ai/v1/aci/sessions/{session_id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

Returns an attested session: the immutable, content-addressed record of the verified TEE channel a confidential request was bound to. A receipt’s upstream.verified.session_id references it, so you can trace any confidential response back to the exact verified security context, with its typed claims and channel binding.

GET /v1/aci/sessions/{session_id}
GET /v1/aci/sessions?provider={provider}&model={model}

Get one session

string

required

The as_… id from a receipt’s upstream.verified.session_id.

Response

Field	Type	Description
`api_version`	string	ACI version token.
`session_id`	string	`as_<sha256>` content hash of the verified material.
`provider`	string	The upstream config name this channel belongs to.
`endpoint`	string	The verified upstream origin.
`verifier_id`	string	The verifier that produced this result.
`established_at`	number	When the material was verified (Unix seconds).
`expires_at`	number	Retention deadline (Unix seconds).
`identity`	object	Verified upstream identity keys (for example a signing address).
`channel_binding`	array	The enforceable binding(s): a TLS SPKI digest or an E2EE public key.
`claims`	object	Typed claims (below).
`evidence`	object	Byte-preserving evidence the verifier checked (`digest` + data URI).

Typed claims

Each claim carries a status (Asserted / Refuted / Unknown), a source (HardwareProven / VerifierDerived / ProviderAsserted / OperatorAsserted), and a reason. The claim set: tee_attested, tcb_up_to_date, os_known_good, serving_software_known_good, gpu_attested, model_weights_provenance, plus provider-specific entries in extra. See Reading TCB and claims.

{
  "api_version": "aci/1",
  "session_id": "as_3681736b33b9b8191216968e37e350bfa1e4fd8d5d192bbebf4c17c0d4edf344",
  "provider": "near-ai",
  "endpoint": "https://cloud-api.near.ai",
  "verifier_id": "private-ai-verifier/near-ai-gateway/v1",
  "established_at": 1781588840,
  "expires_at": 1781589140,
  "channel_binding": [ { "type": "tls_spki_sha256", "value": "…" } ],
  "claims": {
    "tee_attested": { "status": "Asserted", "source": "HardwareProven", "reason": "verified TDX quote" },
    "tcb_up_to_date": { "status": "Asserted", "source": "HardwareProven" },
    "gpu_attested": { "status": "Unknown" }
  },
  "evidence": { "digest": "sha256:…", "data": "data:application/json;base64,…" }
}

List a provider’s sessions

GET /v1/aci/sessions?provider={provider}&model={model} returns the attested sessions a provider currently has. Use it as a preflight survey: inspect the verified identity, channel binding, and claims for a model before sending a prompt.

curl "https://api.redpill.ai/v1/aci/sessions?provider=near-ai" \
  -H "Authorization: Bearer $API_KEY"

Returns a JSON array of session records in the shape above.

Why content-addressed

session_id is a hash of the verified material. Re-verifying an unchanged endpoint resolves to the same id, and any change (a rotated TLS certificate, a new measurement, a changed claim) produces a new id. The session a receipt points to is exactly the one the gateway committed to.

Endpoints

Verification

Legacy

Get Session

Get one session

Response

Typed claims

List a provider’s sessions

Why content-addressed

Attested sessions concept

Get receipt

​Get one session

​Response

​Typed claims

​List a provider’s sessions

​Why content-addressed

​Related

Attested sessions concept

Get receipt

Get one session

Response

Typed claims

List a provider’s sessions

Why content-addressed

Related