v3

latestOpenAPI 3.1.02026-08-0419899251.9 KB

Instances

Get Tee Instance Evidence

Get TEE evidence for a specific instance (TDX quote, GPU evidence, certificate).

Args: instance_id: Instance ID nonce: User-provided nonce (64 hex characters, 32 bytes)

Returns: TeeInstanceEvidence with quote, gpu_evidence, and certificate

Raises: 404: Instance not found 400: Invalid nonce format or instance not TEE-enabled 403: User cannot access instance 429: Rate limit exceeded 500: Server attestation failures

get/instances/{instance_id}/evidence

Path parameters

instance_idstring required

Query parameters

noncestring required

Headers

X-Chutes-Hotkeystring nullable

X-Chutes-Signaturestring nullable

X-Chutes-Noncestring nullable

Authorizationstring nullable

Response

Successful Response

quotestring required

Base64-encoded TDX quote

gpu_evidenceobject[] required

Per-GPU evidence: list of dicts (each GPU's evidence/certificate already structured; evidence fields are base64 where applicable)

instance_idstring nullable

Instance ID (present when part of a chute's evidence list)

certificatestring required

Base64-encoded DER format TLS certificate from the server

signaturestring nullable

Base64-encoded RSA-PKCS1v15-SHA256 signature of attested_body, signed with the host TLS private key. Present on attestation proxy >= 0.2.0. Verifying this against the certificate public key proves the responder holds the attested private key.

attested_bodystring nullable

Base64-encoded raw response body from the attestation proxy—the exact bytes covered by signature. Present when signature is present.