CLI

View on GitHub

tinfoilsh/tinfoil-cli

Overview

The Tinfoil CLI verifies enclave attestations, audits TLS certificates, and makes verified HTTP requests against Tinfoil enclaves. For a local OpenAI-compatible proxy, see the Local Proxy section.

Installation

Pre-built Binaries

Download the latest release for your OS from the Releases page.

Install Script

You can install tinfoil CLI using our install script. This script automatically detects your operating system and architecture, downloads the correct binary, and installs it to /usr/local/bin.

curl -fsSL https://github.com/tinfoilsh/tinfoil-cli/raw/main/install.sh | sh

If you receive permission errors (for example, if you’re not running as root), you may need to run the command with sudo.

Build from Source

Ensure you have Go installed.
Clone the repository:

git clone https://github.com/tinfoilsh/tinfoil-cli.git
cd tinfoil-cli

Build the binary:

go build -o tinfoil

Command Reference

Usage:
  tinfoil [command]

Available Commands:
  attestation Attestation commands
  completion  Generate the autocompletion script for the specified shell
  help        Help about any command
  http        Make verified HTTP requests

Flags:
  -h, --help          Help for tinfoil
  -e, --host string   Enclave hostname
  -r, --repo string   Enclave config repo
  -t, --trace         Trace output
  -v, --verbose       Verbose output

Use "tinfoil [command] --help" for more information about a command.

HTTP Requests

The http command makes verified HTTP requests to Tinfoil enclaves with attestation verification.

GET Request

tinfoil http get https://inference.tinfoil.sh/health \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router

POST Request

tinfoil http post https://inference.tinfoil.sh/v1/chat/completions \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router \
  -H "Authorization: Bearer $TINFOIL_API_KEY" \
  -H "Content-Type: application/json" \
  -b '{"model": "<MODEL_NAME>", "messages": [{"role": "user", "content": "Hello"}]}'

Streaming

Use the -s flag to stream the response line by line:

tinfoil http post https://inference.tinfoil.sh/v1/chat/completions \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router \
  -H "Authorization: Bearer $TINFOIL_API_KEY" \
  -H "Content-Type: application/json" \
  -s \
  -b '{"model": "<MODEL_NAME>", "stream": true, "messages": [{"role": "user", "content": "Hello"}]}'

Command Options

-b, --body: HTTP POST body
-H, --header: HTTP request header, in Name: Value format. May be repeated
-s, --stream: Stream response output (POST only)

Attestation Verification

Verify Attestation

Use the attestation verify command to manually verify that an enclave is running the expected code. The output will be a series of INFO logs describing each verification step. Sample successful output:

$ tinfoil attestation verify \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router
INFO[0000] Fetching latest release for tinfoilsh/confidential-model-router
INFO[0000] Fetching sigstore bundle from tinfoilsh/confidential-model-router for digest f2f48557c8b0c1b268f8d8673f380242ad8c4983fe9004c02a8688a89f94f333
INFO[0001] Fetching trust root
INFO[0001] Verifying code measurements
INFO[0001] Fetching attestation doc from inference.tinfoil.sh
INFO[0001] Verifying enclave measurements
INFO[0001] Public key fingerprint: 5f6c24f54ed862c404a558aa3fa85b686b77263ceeda86131e7acd90e8af5db2
INFO[0001] Measurements match

JSON Output

You can also record the verification to a machine-readable audit log:

tinfoil attestation verify \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router \
  -j > verification.json

Or use the -l flag to specify the output file directly:

tinfoil attestation verify \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router \
  -j -l verification.json

The audit log record includes the timestamp, enclave host, code and enclave measurement fingerprints, and the verification status.

Command Options

-j, --json: Output in JSON format
-l, --log-file: Path to write the JSON log
-e, --host: The hostname of the enclave. If omitted, auto-selects the default router.
-r, --repo: The enclave config repo. If omitted, skips code measurement verification.

Docker

A docker image is available at ghcr.io/tinfoilsh/tinfoil-cli.

Getting Started

Model catalog

Tinfoil SDKs

Local Proxy

Tinfoil Containers

Guides

Verification & Attestation

Tutorials

Admin API

Resources

View on GitHub

Overview

Installation

Pre-built Binaries

Install Script

Build from Source

Command Reference

HTTP Requests

GET Request

POST Request

Streaming

Command Options

Attestation Verification

Verify Attestation

JSON Output

Command Options

Docker

View on GitHub

​Overview

​Installation

​Pre-built Binaries

​Install Script

​Build from Source

​Command Reference

​HTTP Requests

​GET Request

​POST Request

​Streaming

​Command Options

​Attestation Verification

​Verify Attestation

​JSON Output

​Command Options

​Docker

Overview

Installation

Pre-built Binaries

Install Script

Build from Source

Command Reference

HTTP Requests

GET Request

POST Request

Streaming

Command Options

Attestation Verification

Verify Attestation

JSON Output

Command Options

Docker