Skip to main content

Program Implementation Flow

Writing programs for the MagicBlock TEE is similar to writing a standard Solana program, with the addition of a Permission Program used to manage privacy controls.
  • Create a Permission Group: Perform a CPI into the Permission Program to create a group. You can define any number of groups, each with distinct members and permissions.
  • Create Permissions: Add permissions to the created group. Currently, a permission implies read access, with potential future distinction between read/write.
  • Access: Clients authenticate their identity to access permissioned ER state. If successful, an access token is issued and used for queries.
Group-based abstractions allow modifying permissions for sets of users in a single transaction. The permissioning state is maintained on Solana L1.
Private Ephemeral Rollup (devnet) endpoint: https://devnet-tee.magicblock.app?token= {authToken}. Replace {authToken} with your authorization token obtained from the TEE RPC to send requests.

Authorization

Permission groups and access

Client Implementation

Attestation, challenge, and access

Privacy Use Case

Build private, verifiable applications