---
title: "Get CVM attestation"
method: GET
path: "/api/v1/cvms/{cvm_id}/attestation"
tags: ["CVMs"]
---

# Get CVM attestation

`GET /api/v1/cvms/{cvm_id}/attestation`

Returns TEE attestation data including TCB info and app certificates.

## Path parameters

- `cvm_id` string, required

## Response `200`

Attestation report (may have error if CVM offline)

- CvmAttestation — Model representing CVM attestation information
  - `is_online` boolean, required
  - `is_public` boolean
  - `error` string, nullable
  - `name` string, nullable
  - `app_certificates` Certificate[], nullable
    - `subject` CertificateSubject, required
      - `common_name` string, nullable — Certificate subject common name
      - `organization` string, nullable — Organization name
      - `country` string, nullable — Country code
      - `state` string, nullable — State or province
      - `locality` string, nullable — Locality name
    - `issuer` CertificateIssuer, required
      - `common_name` string, nullable — Issuer common name
      - `organization` string, nullable — Issuer organization
      - `country` string, nullable — Issuer country code
    - `serial_number` string, required
    - `not_before` string, date-time, required
    - `not_after` string, date-time, required
    - `version` string, required
    - `fingerprint` string, required
    - `signature_algorithm` string, required
    - `sans` string[], nullable
    - `is_ca` boolean
    - `position_in_chain` integer, nullable
    - `quote` string, nullable
    - `app_id` string, nullable
    - `cert_usage` string, nullable
  - `tcb_info` TcbInfo
    - `mrtd` string, required
    - `rootfs_hash` string, nullable
    - `rtmr0` string, required
    - `rtmr1` string, required
    - `rtmr2` string, required
    - `rtmr3` string, required
    - `event_log` EventLog[], required
      - `imr` integer, required
      - `event_type` integer, required
      - `digest` string, required
      - `event` string, required
      - `event_payload` string, required
    - `app_compose` string, required
  - `compose_file` string, nullable

## Other responses

- `401` — Authentication required
- `403` — CVM not in workspace
- `404` — CVM not found
- `422` — Validation Error

---

[API](https://skmtc.net/phala/apis/phala-cloud-api.md) · [All operations](https://skmtc.net/phala/apis/phala-cloud-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/phala/phala-cloud-api/versions/83c6ae62e860/schema)