Confidential Compute

Validate confidential compute attestation evidence against the hardware vendors (AMD SEV-SNP, Intel TDX, NVIDIA)

Changed on
post/v1/confidential-compute/attestation/validate

Request

  • Base URL
    https://console-api-sandbox.akash.network
  • URL
    https://console-api-sandbox.akash.network/v1/confidential-compute/attestation/validate
  • Auth
    • HTTP bearer
    • or API key in header x-api-key

Headers

x-organization-idstring

Id or slug of the organization the request runs in. Defaults to the organization used last, or the caller's personal one. Answers 403 organization_forbidden when the caller is not a member, and 400 organization_mismatch when it names another organization than the API key's.

x-project-idstring uuid

Id of a project of the active organization to limit the request to. Answers 403 project_forbidden when the caller cannot reach the project, or the API key is limited to another one.

Request body

noncestring required

Per-request freshness challenge sent to the hardware, base64 (64 bytes, AEP-83 §5)

reportstring required

CPU attestation report (AMD SEV-SNP or Intel TDX quote), base64

tee_platform'snp' | 'tdx' | 'snp-gpu' | 'tdx-gpu' required

TEE platform that produced the evidence

cert_chainstring

CPU vendor cert chain, base64; may be empty (e.g. AMD VCEK fetched from KDS)

auxblobstring

Platform auxiliary blob (e.g. TDX collateral), base64; may be empty

Example request

{
  "report": "BQAAAAAA...",
  "cert_chain": "BQAAAAAA...",
  "auxblob": "BQAAAAAA...",
  "gpu_reports": [
    {
      "report": "BQAAAAAA..."
    }
  ]
}

Response

Per-report attestation verdicts

overall'valid' | 'invalid' | 'unverifiable' required

Rollup: valid only if every report is valid; invalid if any report is invalid; otherwise unverifiable

noncestring required

Echo of the request nonce, for client correlation

Changes