Shroud

TEE attestation proof (public)

Public endpoint returning the TEE attestation proof for Shroud. Returns the GCE Confidential VM identity token and image hash so customers can verify Shroud is running inside a Confidential VM before signing contracts. Served from shroud.1claw.xyz.

get/v1/shroud/attestation

Request

  • Base URL: https://shroud.1claw.xyz
  • URL: https://shroud.1claw.xyz/v1/shroud/attestation
  • Auth: none required

Response

Attestation proof

attestedboolean required

Whether at least an identity token was obtained (true for identity, confidential, or sev_snp levels). Backward-compatible boolean; prefer attestation_level for granularity.

attestation_level'none' | 'identity' | 'confidential' | 'sev_snp' required

Granularity of TEE attestation achieved. none = dev/non-GCE; identity = GCE metadata JWT only; confidential = CC claims present; sev_snp = full SEV-SNP measurement verified against image digest.

image_hashstring required

Confidential VM image hash (compare against published Docker digest)

identity_tokenstring required

GCE metadata identity JWT (verify against Google public keys)

Changes

No recorded changes to this operation across all 1 revision of this API.