List tamper-evident audit events
Returns hash-chain audit events for the authenticated org. Events include a `prevHash` / `entryHash` linkage for integrity verification. Accepts optional filters by `entityId` and/or `entityType`.
Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.
In: header
Query Parameters
501 <= value <= 20000 <= valueResponse Body
application/json
application/json
curl -X GET "https://example.com/api/audit"{
"events": [
{
"id": "string",
"workspaceId": "string",
"sequenceNumber": 0,
"eventType": "string",
"actorId": "string",
"actorType": "string",
"entityType": "string",
"entityId": "string",
"payload": {},
"prevHash": "string",
"entryHash": "string",
"occurredAt": "2019-08-24T14:15:22Z"
}
]
}{
"error": "Session not found"
}Account-free signed audit-entry verification sample.
Fully unauthenticated worked example for independently verifying a signed audit entry. The response includes the signed entry, canonicalization material, Ed25519 verification data, JWKS discovery URL, and public catalog URL.
List agent cards visible to the caller (system + org + optional project).
Returns agent cards resolved by scope (system + the caller org + an optional project scope). `format=full` returns rich `cards`; the default `format=autocomplete` returns lightweight `options`. Bearer-reachable for human principals (user token or browser session) - rsk_* API keys and BYOA OAuth-agent tokens are rejected 403; never surfaces another org's cards. This is also the read backing the tenant Marketplace screen (format=full, scope=all).