Sign in

v16

latestOpenAPI 3.0.0raw.githubusercontent.com2026-08-0112316797.5 KB
Confidential Compute

Validate confidential compute attestation evidence against the hardware vendors (AMD SEV-SNP, Intel TDX, NVIDIA)

post/v1/confidential-compute/attestation/validate

Request body

noncestring required

Per-request freshness challenge sent to the hardware, base64 (64 bytes, AEP-83 §5)

reportstring required

CPU attestation report (AMD SEV-SNP or Intel TDX quote), base64

tee_platform'snp' | 'tdx' | 'snp-gpu' | 'tdx-gpu' required

TEE platform that produced the evidence

cert_chainstring

CPU vendor cert chain, base64; may be empty (e.g. AMD VCEK fetched from KDS)

auxblobstring

Platform auxiliary blob (e.g. TDX collateral), base64; may be empty

Example request

{
  "report": "BQAAAAAA...",
  "cert_chain": "BQAAAAAA...",
  "auxblob": "BQAAAAAA...",
  "gpu_reports": [
    {
      "report": "BQAAAAAA..."
    }
  ]
}

Response

Per-report attestation verdicts

overall'valid' | 'invalid' | 'unverifiable' required

Rollup: valid only if every report is valid; invalid if any report is invalid; otherwise unverifiable

noncestring required

Echo of the request nonce, for client correlation