Service

Tee Verifier

Verify hardware attestation from YOUR enclaves: AWS Nitro Enclaves documents and AMD SEV-SNP reports, checked against pinned AWS and AMD roots (signature, chain, chip and TCB binding, freshness, PCR/measurement policy). Signed results. CAIN's own servers are not hardware-attested.

Worked example

curl -X POST https://cainstudio.online/tee-verifier/v1/nitro/verify \
  -H "X-API-Key: $CAIN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"attestation_document_b64": "...", "expected_nonce_hex": "...", "expected_pcrs": {}, "max_age_seconds": 300, "historical": false}'