· 06/09/2025 ·

Intel® Transparent Supply Chain REST API Reference

Representational State Transfer (REST) APIs are service endpoints that allow you to use HTTPS to access nearly all the functionality provided by Intel Transparent Supply Chain. A few operations, such as creating a new API key, can only be performed in the portal. All the REST APIs require an API key for authorization.

The REST APIs are organized by service and functional area.

  • Attestation — APIs used for attestation of devices.
  • Management — APIs used for managing your Intel Transparent Supply Chain assets, such as retrieving/creating/updating managed device serial numbers.

Sample API call

To use this sample API call you need to have the following prerequisites:

  • An Intel Transparent Supply Chain account with an API key.
  • A valid dpd.xml file that you want to submit for attestation. A dpd.xml file is an XML document that contains the device provisioning data (DPD) for a device. This file is used to attest the device's identity and integrity within the Intel Transparent Supply Chain system.The file should be in the same directory as the script or you can provide the path to the file as an argument.

Sample URL

The following are a sample URLs for the Intel Transparent Supply Chain attestation API. Replace <add your attestation URL here> with the actual URL provided by Intel for your account.

Sample attestation URL

Use the following URLs for submitting the dpd.xml file for attestation:

US pilot API URL

https://api.pilot.trustauthority.intel.com/

US production API URL

https://api.trustauthority.intel.com/

EU production API URL

https://api.eu.trustauthority.intel.eu/

Sample cURL command

The following sample cURL command demonstrates how to submit a dpd.xml file for attestation using the Intel Transparent Supply Chain REST API. Replace the placeholders with your actual API key and attestation URL before executing the command.

set -euo pipefail

TSC_TENANT_ADMIN_ATTESTATION_API_KEY="<add the attestation attestation API key here>"
ATTESTATION_URL="<add your attestation URL here>"
# Specify the path to your dpd.xml file as an argument, or ensure it is located in the current directory.
XML_FILE="${1:-./dpd.xml}"
if [[ ! -f "$XML_FILE" ]]; then
  echo "Error: XML file '$XML_FILE' does not exist."
  exit 1
fi

#base64 encode the XML file
DPD_XML_B64=$(base64 -w 0 "$XML_FILE")

#Construct the JSON payload
JSON_PAYLOAD=$(jq -n --arg dpd_xml "$DPD_XML_B64" '{"dpd-xml": $dpd_xml}')

curl -v -X POST "$ATTESTATION_URL" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -H "x-api-key: ${TSC_TENANT_ADMIN_ATTESTATION_API_KEY}" \
  -H "Accept-encoding: gzip, deflate, br" \
  -H "content-Length: ${#JSON_PAYLOAD}" \
  --data-binary $"${JSON_PAYLOAD}" \