Skip to main content

CLI

Verify enclave attestations, audit TLS certificates, and proxy HTTP requests GitHub: tinfoil-cli

​
Overview

The Tinfoil CLI verifies enclave attestations, audits TLS certificates, makes verified HTTP requests, and can run a local proxy for Tinfoil enclaves.

​
Installation

​
Pre-built Binaries

Download the latest release for your OS from the Releases page.

​
Install Script

You can install tinfoil CLI using our install script. This script automatically detects your operating system and architecture, downloads the correct binary, and installs it to /usr/local/bin. 
curl -fsSL https://github.com/tinfoilsh/tinfoil-cli/raw/main/install.sh | sh
If you receive permission errors (for example, if you’re not running as root), you may need to run the command with sudo.

​
Build from Source

  1. Ensure you have Go installed.
  2. Clone the repository:
git clone https://github.com/tinfoilsh/tinfoil-cli.git
cd tinfoil-cli
  1. Build the binary:
go build -o tinfoil

​
Command Reference

Usage:
  tinfoil [command]

Available Commands:
  attestation Attestation commands
  completion  Generate the autocompletion script for the specified shell
  help        Help about any command
  http        Make verified HTTP requests
  proxy       Run a local HTTP proxy

Flags:
  -h, --help          Help for tinfoil
  -e, --host string   Enclave hostname
  -r, --repo string   Enclave config repo
  -t, --trace         Trace output
  -v, --verbose       Verbose output

Use "tinfoil [command] --help" for more information about a command.

​
Proxy

Use tinfoil proxy to start a local HTTP proxy that verifies connections and forwards them to the specified enclave: 
tinfoil proxy \
  -r tinfoilsh/confidential-model-router \
  -e inference.tinfoil.sh \
  -p 8080

​
Command Options

  • -p, --port: Port to listen on. Defaults to 8080.
  • -b, --bind: Address to bind to. Defaults to 127.0.0.1.
  • -e, --host: The hostname of the enclave.
  • -r, --repo: The enclave config repo.
  • --log-format: Logger output format (text or json). Defaults to text.
By default, the proxy binds to 127.0.0.1 (localhost only). To expose the proxy on all interfaces, use -b 0.0.0.0.

​
HTTP Requests

The http command makes verified HTTP requests to Tinfoil enclaves with attestation verification.

​
GET Request

tinfoil http get https://inference.tinfoil.sh/health \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router

​
POST Request

tinfoil http post https://inference.tinfoil.sh/v1/chat/completions \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router \
  -b '{"model": "deepseek-r1-0528", "messages": [{"role": "user", "content": "Hello"}]}'

​
Streaming

Use the -s flag to stream the response line by line: 
tinfoil http post https://inference.tinfoil.sh/v1/chat/completions \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router \
  -s \
  -b '{"model": "deepseek-r1-0528", "stream": true, "messages": [{"role": "user", "content": "Hello"}]}'

​
Command Options

  • -b, --body: HTTP POST body
  • -s, --stream: Stream response output (POST only)

​
Attestation Verification

​
Verify Attestation

Use the attestation verify command to manually verify that an enclave is running the expected code. The output will be a series of INFO logs describing each verification step. Sample successful output: 
$ tinfoil attestation verify \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router
INFO[0000] Fetching latest release for tinfoilsh/confidential-model-router
INFO[0000] Fetching sigstore bundle from tinfoilsh/confidential-model-router for digest f2f48557c8b0c1b268f8d8673f380242ad8c4983fe9004c02a8688a89f94f333
INFO[0001] Fetching trust root
INFO[0001] Verifying code measurements
INFO[0001] Fetching attestation doc from inference.tinfoil.sh
INFO[0001] Verifying enclave measurements
INFO[0001] Public key fingerprint: 5f6c24f54ed862c404a558aa3fa85b686b77263ceeda86131e7acd90e8af5db2
INFO[0001] Measurements match

​
JSON Output

You can also record the verification to a machine-readable audit log: 
tinfoil attestation verify \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router \
  -j > verification.json
Or use the -l flag to specify the output file directly: 
tinfoil attestation verify \
  -e inference.tinfoil.sh \
  -r tinfoilsh/confidential-model-router \
  -j -l verification.json
The audit log record includes the timestamp, enclave host, code and enclave measurement fingerprints, and the verification status.

​
Command Options

  • -j, --json: Output in JSON format
  • -l, --log-file: Path to write the JSON log
  • -e, --host: The hostname of the enclave. If omitted, auto-selects the default router.
  • -r, --repo: The enclave config repo. If omitted, skips code measurement verification.

​
Docker

A docker image is available at ghcr.io/tinfoilsh/tinfoil-cli.