Program Implementation Flow
Writing programs for the MagicBlock TEE is similar to writing a standard Solana program, with the addition of a Permission Program used to manage privacy controls.- Create a Permission Group: Perform a CPI into the Permission Program to create a group. You can define any number of groups, each with distinct members and permissions.
- Create Permissions: Add permissions to the created group. Currently, a permission implies read access, with potential future distinction between read/write.
- Access: Clients authenticate their identity to access permissioned ER state. If successful, an access token is issued and used for queries.
Private Ephemeral Rollup (devnet) endpoint:
https://devnet-tee.magicblock.app?token= {authToken}. Replace {authToken} with your authorization token obtained
from the TEE RPC to send requests.Authorization
Permission groups and access
Client Implementation
Attestation, challenge, and access
Privacy Use Case
Build private, verifiable applications

