---
title: "Get Tee Instance Evidence"
method: GET
path: "/instances/{instance_id}/evidence"
tags: ["Instances"]
---

# Get Tee Instance Evidence

`GET /instances/{instance_id}/evidence`

Get TEE evidence for a specific instance (TDX quote, GPU evidence, certificate).

Args:
    instance_id: Instance ID
    nonce: User-provided nonce (64 hex characters, 32 bytes)

Returns:
    TeeInstanceEvidence with quote, gpu_evidence, and certificate

Raises:
    404: Instance not found
    400: Invalid nonce format or instance not TEE-enabled
    403: User cannot access instance
    429: Rate limit exceeded
    500: Server attestation failures

## Path parameters

- `instance_id` string, required

## Query parameters

- `nonce` string, required

## Headers

- `X-Chutes-Hotkey` string, nullable
- `X-Chutes-Signature` string, nullable
- `X-Chutes-Nonce` string, nullable
- `Authorization` string, nullable

## Response `200`

Successful Response

- TeeInstanceEvidence — TEE evidence for a single instance: TDX quote, GPU evidence (per-GPU dicts), and server certificate.
  - `quote` string, required — Base64-encoded TDX quote
  - `gpu_evidence` object[], required — Per-GPU evidence: list of dicts (each GPU's evidence/certificate already structured; evidence fields are base64 where applicable)
  - `instance_id` string, nullable — Instance ID (present when part of a chute's evidence list)
  - `certificate` string, required — Base64-encoded DER format TLS certificate from the server
  - `signature` string, nullable — Base64-encoded RSA-PKCS1v15-SHA256 signature of attested_body, signed with the host TLS private key. Present on attestation proxy >= 0.2.0. Verifying this against the certificate public key proves the responder holds the attested private key.
  - `attested_body` string, nullable — Base64-encoded raw response body from the attestation proxy—the exact bytes covered by signature. Present when signature is present.

## Other responses

- `422` — Validation Error

## Changes

- **2026-08-26** `8d909638091e` — 1 info
  - endpoint added
- **2026-08-22** `05d9af05d87e` — 1 breaking
  - api path removed without deprecation
- **2026-08-04** `352418d4e3a2` — 2 info
  - added the optional property `attested_body` to the response with the `200` status
  - added the optional property `signature` to the response with the `200` status

[Change history](https://skmtc.dev/chutes/apis/fastapi/changes/instances/:instance_id/evidence/get.md)

---

[API](https://skmtc.dev/chutes/apis/fastapi.md) · [All operations](https://skmtc.dev/chutes/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/chutes/fastapi/revisions/7be1aa2fe1a0/schema)