# Tinfoil Documentation

- [Introduction](https://docs.tinfoil.sh/introduction.md): Tinfoil is a private AI platform that enables you to build and deploy AI applications with end-to-end privacy guarantees using secure hardware enclaves. Use Tinfoil Inference, our OpenAI-compatible API, or Tinfoil Containers to build AI-powered applications. All security claims and attestations are…
- [Feature status](https://docs.tinfoil.sh/resources/feature-status.md): Which features are part of the V3 attestation beta.
- [Quickstart](https://docs.tinfoil.sh/quickstart.md): Make your first inference request with Tinfoil in minutes.
- [Getting a Tinfoil API key](https://docs.tinfoil.sh/get-api-key.md): Step-by-step guide for generating a Tinfoil API key
- [Creating an organization](https://docs.tinfoil.sh/create-organization.md): Step-by-step guide for creating and managing a Tinfoil organization
- [Overview](https://docs.tinfoil.sh/models/overview.md): Browse all AI models available on Tinfoil's secure inference platform.
- [Chat models](https://docs.tinfoil.sh/models/chat.md): Chat models available on Tinfoil, using the OpenAI chat completions API.
- [Vision models](https://docs.tinfoil.sh/models/vision.md): Vision models available on Tinfoil for image analysis, OCR, and screenshot-to-code generation.
- [Audio models](https://docs.tinfoil.sh/models/audio.md): Audio models available on Tinfoil for speech-to-text transcription, audio understanding, and text-to-speech.
- [Embedding models](https://docs.tinfoil.sh/models/embedding.md): Embedding models available on Tinfoil for semantic search, similarity, and clustering.
- [Decision models](https://docs.tinfoil.sh/models/decisions.md): Decision models available on Tinfoil for classification and rubric scoring with calibrated probabilities.
- [Safety models](https://docs.tinfoil.sh/models/safety.md): Safety and content moderation models available on Tinfoil for policy enforcement, guardrails, and Trust & Safety workflows.
- [Overview](https://docs.tinfoil.sh/sdk/overview.md): Overview of Tinfoil SDKs and their use cases
- [Python](https://docs.tinfoil.sh/sdk/python-sdk.md): Python SDK for Tinfoil's secure AI inference API
- [JavaScript](https://docs.tinfoil.sh/sdk/javascript-sdk.md): JavaScript SDK for Tinfoil's secure AI inference API
- [Go](https://docs.tinfoil.sh/sdk/go-sdk.md): Go SDK for Tinfoil's secure AI inference API
- [Rust](https://docs.tinfoil.sh/sdk/rust-sdk.md): Rust SDK for Tinfoil's secure AI inference API
- [Swift](https://docs.tinfoil.sh/sdk/swift-sdk.md): Swift SDK for Tinfoil's secure AI inference API
- [CLI](https://docs.tinfoil.sh/sdk/cli-sdk.md): Command-line interface for verifying Tinfoil enclave attestations and making verified HTTP requests
- [Direct API Access](https://docs.tinfoil.sh/sdk/direct-api-access.md): Access the Tinfoil inference endpoint directly via HTTPS (not recommended for production).
- [Prompt caching](https://docs.tinfoil.sh/sdk/prompt-caching.md): Reuse prompt prefixes across requests with automatic cache scoping in the Tinfoil SDKs.
- [Error handling](https://docs.tinfoil.sh/sdk/error-handling.md): How to handle errors in the Tinfoil SDKs
- [Tinfoil Chat overview](https://docs.tinfoil.sh/chat/overview.md): An AI assistant you can bring your real work to — research, documents, personal questions — without anyone else reading along. Available on web and iOS.
- [Cloud sync & encryption](https://docs.tinfoil.sh/chat/cloud-sync.md): How Tinfoil Chat encrypts everything you sync with a key only you control, and how to set up sync with passkeys or a manual key backup.
- [Chat features](https://docs.tinfoil.sh/chat/features.md): Document uploads, projects, encrypted search, deep research, and importing conversations from other AI apps — all end-to-end encrypted.
- [Chat settings](https://docs.tinfoil.sh/chat/settings.md): Configure web search, Generative UI, reasoning, personalization, prompts, language, and other Tinfoil Chat behavior on web and iOS.
- [Data controls & deletion](https://docs.tinfoil.sh/chat/data-controls.md): Local-only chats, temporary chats, exporting your data, and how deletion works in Tinfoil Chat.
- [Tinfoil Proxy CLI](https://docs.tinfoil.sh/local-proxy/cli.md): Standalone command-line proxy that verifies enclave attestations and forwards OpenAI-compatible traffic to a Tinfoil enclave.
- [Tinfoil Proxy app](https://docs.tinfoil.sh/local-proxy/app.md): Run Tinfoil Proxy in your menu bar so every AI request from your computer gets a verified connection to a Tinfoil secure enclave.
- [Overview](https://docs.tinfoil.sh/containers/overview.md): Run your containers in Tinfoil's secure enclaves with our privacy guarantees
- [Your first instance](https://docs.tinfoil.sh/containers/quickstart.md): Publish a measured release, create an instance, and send your first verified request.
- [Configuration reference](https://docs.tinfoil.sh/containers/configuration.md): The tinfoil-config.yml file declares everything that runs inside your enclave: containers, resources, models, and routing. Tinfoil measures it and publishes the measurement so clients can verify exactly what is deployed.
- [Networking & routing](https://docs.tinfoil.sh/containers/config-networking.md): Control container egress with named networks and expose ports and paths through the shim.
- [Runtime & security](https://docs.tinfoil.sh/containers/config-runtime.md): Security defaults applied to every container, plus healthchecks and restart policies that govern the container lifecycle.
- [Example configs](https://docs.tinfoil.sh/containers/config-examples.md): Complete tinfoil-config.yml examples, from a minimal API server to a GPU inference server and multi-container setups.
- [Building your own image](https://docs.tinfoil.sh/containers/building-images.md): Build and publish a Docker image for your own source code, then reference it from tinfoil-config.yml.
- [Model weights](https://docs.tinfoil.sh/containers/models.md): Prepare Hugging Face model weights for a Tinfoil Container.
- [Private images](https://docs.tinfoil.sh/containers/private-images.md): How attestation works with private source code, and how to configure authentication for private container registries.
- [Secrets & environment variables](https://docs.tinfoil.sh/containers/secrets-and-env-vars.md): Manage environment variables and secrets for your Containers.
- [Private secrets](https://docs.tinfoil.sh/containers/private-secrets.md): Deliver secrets to your Containers that Tinfoil never sees, released by a keyserver you run.
- [Attested keys](https://docs.tinfoil.sh/containers/attested-keys.md): Generate keys inside a secure enclave, grant them to containers, and verify their public keys through attestation.
- [Encrypted persistent volumes](https://docs.tinfoil.sh/containers/encrypted-volumes.md): Create and attach persistent disks, manage their lifecycle, and keep their contents encrypted under a key you hold.
- [Automatic volume unlock](https://docs.tinfoil.sh/containers/volume-auto-unlock.md): Prepare persistent-volume keys in your AWS account and authorize boot-time release through your own keyserver.
- [Custom domains](https://docs.tinfoil.sh/containers/custom-domains.md): Configure and verify custom domains for your Tinfoil Containers.
- [Making requests](https://docs.tinfoil.sh/containers/connecting.md): Use Tinfoil's SecureClient SDKs or the CLI to make attested requests to your container.
- [Attestation from containers](https://docs.tinfoil.sh/containers/attestation.md): Request fresh enclave attestation from inside a container.
- [Container projects](https://docs.tinfoil.sh/containers/projects.md): A project groups the instances that share one config repository.
- [Instance lifecycle](https://docs.tinfoil.sh/containers/lifecycle.md): How an instance moves between Running and Stopped, and the actions that move it.
- [Updating](https://docs.tinfoil.sh/containers/updates.md): Update a running instance, roll back, cancel, and recover from failures.
- [Debug mode](https://docs.tinfoil.sh/containers/debug-mode.md): Deploy debug instances of your Tinfoil Containers with SSH access for troubleshooting.
- [Holding an update for review](https://docs.tinfoil.sh/containers/hold-for-review.md): Keep the current version serving while you try the new one at its review URL, then promote it.
- [Managing instances from the CLI](https://docs.tinfoil.sh/containers/cli.md): Use the Tinfoil CLI to manage the full instance lifecycle without opening the dashboard.
- [Attested SSH](https://docs.tinfoil.sh/containers/attested-ssh.md): Verify an enclave's SSH host key, install a local profile, and connect with native SSH and SCP.
- [Persistent storage with the buckets sidecar](https://docs.tinfoil.sh/containers/persistent-storage.md): Store end-user data in S3 from a Tinfoil Container without exposing plaintext outside the enclave.
- [Resource limits & quotas](https://docs.tinfoil.sh/containers/limits.md): Understand the resource limits and naming constraints for Tinfoil Containers.
- [Production checklist](https://docs.tinfoil.sh/containers/production-checklist.md): A checklist for running Tinfoil Containers in production.
- [Troubleshooting](https://docs.tinfoil.sh/containers/troubleshooting.md): Common issues and solutions when deploying and running Tinfoil Containers.
- [Getting started](https://docs.tinfoil.sh/bunkers/quickstart.md): Create a Bunker, choose who holds its keys, and connect to it.
- [Bunker features](https://docs.tinfoil.sh/bunkers/features.md): Run coding agents, open a web terminal, connect services through your Perimeter, and use a remote desktop.
- [Perimeters and access control](https://docs.tinfoil.sh/bunkers/perimeters.md): Manage your Bunker's connectivity and access level with Perimeters
- [Security and threat model](https://docs.tinfoil.sh/bunkers/security.md): What a Bunker protects, what it does not, and where each guarantee comes from.
- [Reasoning effort](https://docs.tinfoil.sh/guides/reasoning.md): Control how much a reasoning model thinks before answering using the reasoning_effort parameter.
- [Web search](https://docs.tinfoil.sh/guides/web-search.md): Let AI models search the web with optional PII and prompt-injection protection.
- [MCP web-search server](https://docs.tinfoil.sh/guides/mcp-websearch.md): Call Tinfoil's confidential websearch MCP server directly over attested HTTP.
- [Privacy filter](https://docs.tinfoil.sh/guides/privacy-filter.md): Detect and redact PII with OpenAI Privacy Filter inside an attested enclave.
- [Proxy encrypted requests through your backend](https://docs.tinfoil.sh/guides/proxy-server.md): Keep your API key server-side while preserving end-to-end encryption between clients and the inference enclave.
- [Document processing](https://docs.tinfoil.sh/guides/document-processing.md): Learn how to use Tinfoil for secure and private document processing.
- [Image processing](https://docs.tinfoil.sh/guides/image-processing.md): Learn how to use Tinfoil for image processing with multimodal models.
- [Tool calling](https://docs.tinfoil.sh/guides/tool-calling.md): Learn how to use function calling capabilities with Tinfoil's AI models for dynamic integrations.
- [Structured outputs](https://docs.tinfoil.sh/guides/structured-outputs.md): Learn how to use structured outputs with JSON schema validation for reliable data extraction and API integration.
- [Decision outputs](https://docs.tinfoil.sh/guides/decision-outputs.md): Learn when and how to use decision models: Ask typed questions about an input and get calibrated probabilities back.
- [Verification center UI](https://docs.tinfoil.sh/guides/verification-center.md): Add Tinfoil's verification center to your application to display real-time enclave verification status to users.
- [Processing audio](https://docs.tinfoil.sh/guides/processing-audio.md): Speech-to-text, realtime streaming transcription, and text-to-speech.
- [Add customer-managed keys with passkeys](https://docs.tinfoil.sh/guides/passkey-kit.md): Protect user encryption keys with passkeys so your server only ever stores encrypted key material.
- [A primer on secure enclaves](https://docs.tinfoil.sh/verification/secure-enclave-primer.md): Understand the basics of how confidential computing enabled by secure enclaves provides verifiably private computations in the cloud.
- [How verification works in Tinfoil](https://docs.tinfoil.sh/verification/verification-in-tinfoil.md): A technical overview of how Tinfoil guarantees code auditability, supply chain security, and data confidentiality with client-side verification.
- [Backend infrastructure](https://docs.tinfoil.sh/verification/attestation-architecture.md): This page provides a description of the different components that make up our backend infrastructure. It also describes how Tinfoil guarantees code auditability and data confidentiality using these components.
- [CVM image: TCB and reproducible builds](https://docs.tinfoil.sh/verification/cvm-image.md): What is inside the confidential VM image that runs every Tinfoil enclave, how its trusted computing base is kept small, and how to rebuild it yourself and compare against the published release.
- [Attestation document specifications](https://docs.tinfoil.sh/verification/predicate.md)
- [Encrypted HTTP Body Protocol](https://docs.tinfoil.sh/resources/ehbp.md): Understanding EHBP: the protocol that encrypts HTTP bodies end-to-end while preserving routing metadata.
- [Using coding agents with Tinfoil hosted models](https://docs.tinfoil.sh/tutorials/coding-agents.md): Using Tinfoil Inference with any OpenAI-compatible coding agent and connection-time attestation verification.
- [Using Tinfoil with LangChain](https://docs.tinfoil.sh/tutorials/langchain.md): Use LangChain with Tinfoil.
- [Getting a Tinfoil admin key](https://docs.tinfoil.sh/admin/get-admin-key.md): Step-by-step guide for generating Tinfoil Admin API key for administrative operations
- [Admin API documentation](https://docs.tinfoil.sh/admin/admin-api.md): Guide to API key, billing, and container routes available to personal and organization admin API keys
- [Changelog](https://docs.tinfoil.sh/resources/changelog.md): This page documents significant changes to the Tinfoil API, SDKs, and documentation.
- [Status](https://docs.tinfoil.sh/resources/status.md): Check Tinfoil service status and subscribe to incident updates.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.