Provider attestation — GET /v1/providers/attestation

The attestation endpoint returns cryptographic attestation data for every provider currently connected to the network. No authentication is required — this data is intentionally public so that any third party can independently verify the hardware and security posture of the providers that are serving inference requests. For hardware-attested providers, the response includes the full Apple Managed Device Attestation (MDA) certificate chain. You can verify this chain against Apple’s Enterprise Attestation Root CA to confirm that Apple has certified the device properties independently of Darkbloom.

Authentication

Not required. This endpoint is public.

Response

object[]

Array of attestation records, one per connected provider.

Show provider attestation fields

string

Internal provider identifier.

string

The verified trust level for this provider.

"self_signed" — Secure Enclave signature and periodic challenge-response verified. The coordinator confirms the device is running an unmodified binary with SIP and Secure Boot active.
"hardware" — All of the above, plus Apple MDM cross-verification and an Apple MDA certificate chain signed by Apple’s Enterprise Attestation Root CA.

string

Current provider status. "online" when the provider is accepting requests.

string

Apple Silicon chip name as reported during attestation, e.g. "Apple M3 Max".

string

Mac hardware model identifier, e.g. "Mac14,6".

string

Device serial number from the Secure Enclave attestation.

integer

Unified memory size in GB.

integer

GPU core count.

string[]

Model IDs this provider is currently serving.

boolean

Whether the Secure Enclave is present and was used during attestation.

boolean

Whether System Integrity Protection was verified as enabled at attestation time.

boolean

Whether Secure Boot was verified as enabled.

boolean

Whether Authenticated Root (sealed system volume) was verified as enabled.

string

The provider’s Secure Enclave P-256 public key in base64. Use this to verify the x-se-signature and x-response-hash values from inference responses, confirming that the response was produced by this specific device.

boolean

Whether Apple MDM SecurityInfo cross-checked this device’s hardware integrity (SIP, Secure Boot, FileVault).

boolean

Whether the ACME device-attest-01 challenge proved the Secure Enclave key belongs to a genuine Apple device.

boolean

Whether Apple Managed Device Attestation was verified with a certificate chain from Apple’s Enterprise Attestation Root CA.

string[]

DER-encoded certificates in the MDA chain, each base64-encoded. Present only for mda_verified: true providers. Decode each entry from base64 to DER, then verify the chain against Apple’s Enterprise Attestation Root CA (see below).

string

Device serial number from the MDA certificate. Should match serial_number.

string

Device UDID from the MDA certificate.

string

macOS version reported in the MDA certificate.

string

Secure Enclave OS version reported in the MDA certificate.

string

URL to Apple’s Certificate Authority page where you can download the Enterprise Attestation Root CA.

string

Name of the CA to verify against: "Apple Enterprise Attestation Root CA".

string

Human-readable instructions for verifying the MDA certificate chain.

Independent verification

To verify a hardware-attested provider using the MDA certificate chain:

Fetch the attestation data from GET /v1/providers/attestation.
For each provider with mda_verified: true, take the mda_cert_chain_b64 array.
Decode each element from base64 to its raw DER bytes.
Download the Apple Enterprise Attestation Root CA from apple.com/certificateauthority.
Verify the DER chain against the root CA using any standard X.509 library.

If verification passes, Apple has independently confirmed that the device is a genuine Apple device with the attested hardware properties.

Example

cURL

curl https://api.darkbloom.dev/v1/providers/attestation

Example response

{
  "providers": [
    {
      "provider_id": "prov_a1b2c3d4",
      "trust_level": "hardware",
      "status": "online",
      "chip_name": "Apple M3 Max",
      "hardware_model": "Mac14,6",
      "serial_number": "FVFXYZ123456",
      "memory_gb": 128,
      "gpu_cores": 40,
      "models": ["qwen3.5-27b-claude-opus-8bit"],
      "secure_enclave": true,
      "sip_enabled": true,
      "secure_boot_enabled": true,
      "authenticated_root_enabled": true,
      "se_public_key": "BHv9k2...base64...",
      "mdm_verified": true,
      "acme_verified": true,
      "mda_verified": true,
      "mda_cert_chain_b64": [
        "MIIBxTCCAW...base64...",
        "MIICSzCCAd...base64..."
      ],
      "mda_serial": "FVFXYZ123456",
      "mda_udid": "00001234-000A1234B1234567",
      "mda_os_version": "14.5",
      "mda_sepos_version": "20.100.5"
    },
    {
      "provider_id": "prov_e5f6g7h8",
      "trust_level": "self_signed",
      "status": "online",
      "chip_name": "Apple M2",
      "hardware_model": "Mac13,2",
      "serial_number": "C02XY1234567",
      "memory_gb": 32,
      "gpu_cores": 19,
      "models": ["mlx-community/gemma-4-26b-a4b-it-8bit"],
      "secure_enclave": true,
      "sip_enabled": true,
      "secure_boot_enabled": true,
      "authenticated_root_enabled": true,
      "se_public_key": "BKm3p7...base64...",
      "mdm_verified": false,
      "acme_verified": false,
      "mda_verified": false
    }
  ],
  "apple_root_ca_url": "https://www.apple.com/certificateauthority/",
  "apple_enterprise_root_ca": "Apple Enterprise Attestation Root CA",
  "verification_instructions": "Download each provider's mda_cert_chain_b64, decode from base64 to DER, then verify the certificate chain against Apple's Enterprise Attestation Root CA. If verification passes, Apple has confirmed this is a real Apple device with the attested properties."
}

Inference

Account

Network

Provider attestation — GET /v1/providers/attestation

Authentication

Response

Independent verification

Example

Example response

​Authentication

​Response

​Independent verification

​Example

​Example response

Authentication

Response

Independent verification

Example

Example response