Use this file to discover all available pages before exploring further.
TL;DR
Download Tinfoil Proxy for macOS, Linux, or Windows from the latest release (see Install below).
Launch the app — the proxy starts automatically and lives in your menu bar.
Point any OpenAI-compatible tool at http://127.0.0.1:3301/v1. The session is attested before the first byte of upstream traffic leaves your machine, and re-verified whenever the enclave rotates its TLS certificate.
Tinfoil Proxy is the same verified proxy as the CLI binary wrapped in a menu-bar app. At session start it verifies a Tinfoil router enclave against the public attestation transparency log; for the rest of the session every upstream connection is TLS-pinned to the attested public-key fingerprint, and the underlying Go client re-runs attestation if the enclave presents a new certificate.
Download the matching .pkg for your Mac from the latest release — Tinfoil-Proxy-arm64.pkg for Apple Silicon, Tinfoil-Proxy-x64.pkg for Intel — and double-click to install, or run:
# Apple Silicon (swap arm64 for x64 on Intel)curl -fsSL -o /tmp/Tinfoil-Proxy.pkg \ https://github.com/tinfoilsh/tinfoil-proxy/releases/latest/download/Tinfoil-Proxy-arm64.pkgsudo installer -pkg /tmp/Tinfoil-Proxy.pkg -target /open -a "Tinfoil Proxy"
Grab the .deb (tinfoil-proxy_amd64.deb) from the latest release:
Then launch Tinfoil Proxy from your applications menu. On GNOME (the default on Ubuntu) the tray icon needs the AppIndicator extension; KDE, Cinnamon, and XFCE work out of the box.
Download Tinfoil-Proxy-Setup.exe from the latest release and run the installer.
After installing, open the app once to launch it into the menu bar. If you want Tinfoil Proxy to start automatically next time you log in, toggle Open at Login from the popup or the tray menu.
Point your OpenAI-compatible tool at the local endpoint Tinfoil Proxy exposes:
Base URL: http://127.0.0.1:3301/v1
On startup the proxy auto-discovers a Tinfoil router enclave, verifies its attestation, and forwards subsequent requests to it. The enclave’s attested public-key fingerprint is pinned for the rest of the session, and the underlying Go client re-runs attestation if the enclave rotates its TLS certificate. You can copy the URL from the menu-bar popup.
Tinfoil Proxy is the menu-bar wrapper around the same tinfoil-proxy binary; both serve http://127.0.0.1:3301/v1 and do the same attestation. Pick whichever fits your workflow:
