Attestation

Fetch a GCP Confidential Space attestation token

get

Returns a signed JWT issued by GCP Confidential Space, proving that the enclave is running a specific Docker image inside a hardware-verified Trusted Execution Environment (AMD SEV-SNP).

The nonce you supply is embedded in the JWT's eat_nonce claim, binding the token to your request and preventing replay attacks.

Also returns verificationPublicKey — an EC P-256 public key generated by the enclave at startup. The key is embedded in the JWT's aud claim, so its presence in the Google-signed JWT proves it was generated inside the TEE. Use it to verify x-hinkal-response-signature headers on enclave-api responses.

Use this endpoint to verify that the code you can read in the Hinkal-API-Enclave repository is exactly what is running on the server.

Query parameters

noncestring · uuidRequired

A UUID you generate. Embedded in the JWT eat_nonce claim to bind the token to your request.

Example: 826E33CE-C772-4DB0-86F0-84E60E509429

Responses

200

Attestation token successfully fetched from the TEE server

application/json

400

Missing required query parameter nonce

application/json

500

Failed to fetch attestation token from TEE server

application/json

get/attestation

GET /attestation?nonce=826E33CE-C772-4DB0-86F0-84E60E509429 HTTP/1.1
Host: api.hinkal.io
Accept: */*

{
  "jwt": "eyJhbGciOiJSUzI1NiIsImtpZCI6Ii...",
  "imageDigest": "sha256:01c6cb76481dd3601c5cdbd899d95c95a75e5874998360187219819b511767c4",
  "verificationPublicKey": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE...\n-----END PUBLIC KEY-----\n",
  "nonce": "826E33CE-C772-4DB0-86F0-84E60E509429"
}