Documentation / API Reference

API Reference

REST API endpoints for enclave launch, monitoring, attestation retrieval, and lifecycle management. Base URL: https://api.almure.org/v1

POST /enclave/launch Launch a new enclave

Creates and initialises a new enclave with the specified workload and policy. Returns immediately with an enclave ID; use the status endpoint to poll for RUNNING state.

Request body

POST /enclave/launch

{
  "image_ref":       "sha256:3a8f2c1d9e4b7a06f5d38c12e91b4a7f",
  "memory_mb":       2048,
  "attestation_policy": "measurement-bound",
  "min_isvsvn":      3
}

// 201 Created response
{
  "enclave_id":  "enc_7k3mxp92qz",
  "status":      "INITIALISING",
  "created_at":  "2025-11-14T09:47:22Z"
}

GET /enclave/{id}/status Poll enclave state

Returns the current state of the enclave. States: INITIALISING → MEASURING → RUNNING → COMPLETED → TERMINATED.

GET /enclave/enc_7k3mxp92qz/status

// 200 OK
{
  "enclave_id":    "enc_7k3mxp92qz",
  "status":        "RUNNING",
  "mrenclave":     "3a8f2c1d9e4b7a06f5d38c12e91b4a7f2e8d6c4b1a9e3f7d2c5b8a4e6f1d9c2b",
  "memory_mb":     2048
}

POST /enclave/{id}/attest Retrieve attestation report

Retrieves the hardware-signed attestation report for a RUNNING enclave. Optionally include a nonce in the request body to bind it to the report_data field, preventing replay.

POST /enclave/enc_7k3mxp92qz/attest

// Request
{ "nonce": "a9f3c2e1b7d4..." }

// 200 OK
{
  "mrenclave":   "3a8f2c1d9e4b7a06...",
  "mrsigner":    "c7e4b2f1a8d3906e...",
  "isvsvn":      3,
  "report_data": "7f3a9c2e1b5d8f4a...",
  "quote":       "<base64-encoded DCAP quote>"
}

DELETE /enclave/{id} Terminate enclave

Terminates the enclave and securely erases all enclave memory. Sealed keys remain available for future executions with the same measurement. Returns 204 No Content on success.

DELETE /enclave/enc_7k3mxp92qz

// 204 No Content
[almure] Enclave enc_7k3mxp92qz terminated
[almure] Memory pages securely erased
[almure] Sealed key metadata preserved for future use