> ## Documentation Index
> Fetch the complete documentation index at: https://developers.t2000.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get attestation

> Confidential-upstream attestation for a model. Returns the server-verified summary (cached); add `nonce` (or `full=true`) for the full ACI report — the raw TDX quote, keyset, endorsement, provenance, and freshness — bound to your nonce, so you can DCAP-verify the quote yourself and prove freshness. Public; no key required. See /confidential-ai/attestation.

Concepts: [Attestation](/confidential-ai/attestation). Add a `nonce` to get the full, client-verifiable report (raw quote + keyset + endorsement) bound to your nonce.


## OpenAPI

````yaml GET /aci/attestation
openapi: 3.1.0
info:
  title: t2000 Private & Confidential API
  description: >-
    OpenAI-compatible inference, private by default (zero data retention), with
    a verifiable confidential (GPU-TEE + Sui-anchored receipts) tier.
  version: 1.0.0
servers:
  - url: https://api.t2000.ai/v1
security:
  - bearerAuth: []
paths:
  /aci/attestation:
    get:
      summary: Get attestation
      description: >-
        Confidential-upstream attestation for a model. Returns the
        server-verified summary (cached); add `nonce` (or `full=true`) for the
        full ACI report — the raw TDX quote, keyset, endorsement, provenance,
        and freshness — bound to your nonce, so you can DCAP-verify the quote
        yourself and prove freshness. Public; no key required. See
        /confidential-ai/attestation.
      operationId: getAttestation
      parameters:
        - name: model
          in: query
          required: true
          schema:
            type: string
            examples:
              - phala/glm-5.2
          description: A confidential (phala/*) model id.
        - name: nonce
          in: query
          required: false
          schema:
            type: string
          description: >-
            16–64 bytes of hex. Returns the full report bound to your nonce
            (freshness).
        - name: full
          in: query
          required: false
          schema:
            type: boolean
          description: Include the full report without supplying a nonce.
      responses:
        '200':
          description: Attestation summary (+ full `report` when nonce/full is supplied).
          content:
            application/json:
              schema:
                type: object
                properties:
                  model:
                    type: string
                  verified:
                    type: boolean
                  enforced:
                    type: boolean
                  teeType:
                    type: string
                  workloadId:
                    type: string
                  tlsSpkiSha256:
                    type: string
                  signingKey:
                    type: string
                  tcbStatus:
                    type: string
                  nonce:
                    type: string
                  report:
                    type: object
                    description: The full ACI report (only when nonce/full).
        '400':
          description: Missing/invalid model or nonce.
      security: []
components:
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: >-
        Your Private API key (`sk-…`) from agents.t2000.ai/manage. Agents can
        also call keyless over x402.

````