Sign in
Instances

Get Tee Instance Evidence

Get TEE evidence for a specific instance (TDX quote, GPU evidence, certificate).

Args: instance_id: Instance ID nonce: User-provided nonce (64 hex characters, 32 bytes)

Returns: TeeInstanceEvidence with quote, gpu_evidence, and certificate

Raises: 404: Instance not found 400: Invalid nonce format or instance not TEE-enabled 403: User cannot access instance 429: Rate limit exceeded 500: Server attestation failures

get/instances/{instance_id}/evidence

Path parameters

instance_idstring required

Query parameters

noncestring required

Headers

X-Chutes-Hotkeystring nullable
X-Chutes-Signaturestring nullable
X-Chutes-Noncestring nullable
Authorizationstring nullable

Response

Successful Response

quotestring required

Base64-encoded TDX quote

gpu_evidenceobject[] required

Per-GPU evidence: list of dicts (each GPU's evidence/certificate already structured; evidence fields are base64 where applicable)

instance_idstring nullable

Instance ID (present when part of a chute's evidence list)

certificatestring required

Base64-encoded DER format TLS certificate from the server

signaturestring nullable

Base64-encoded RSA-PKCS1v15-SHA256 signature of attested_body, signed with the host TLS private key. Present on attestation proxy >= 0.2.0. Verifying this against the certificate public key proves the responder holds the attested private key.

attested_bodystring nullable

Base64-encoded raw response body from the attestation proxy—the exact bytes covered by signature. Present when signature is present.

Changes

Changed in 3 of the 11 revisions of this API.13

  • 8d909638091e1See the full diff
    • ○

      endpoint added

      endpoint-added

  • 05d9af05d87e1See the full diff
    • ▲

      api path removed without deprecation

      api-path-removed-without-deprecation

    This revision also has 97 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

  • 352418d4e3a22See the full diff
    • ○

      added the optional property to the response with the status

      response-optional-property-added

    • ○

      added the optional property to the response with the status

      response-optional-property-added