Rensei docs
API ReferenceAudit

List tamper-evident audit events

Returns hash-chain audit events for the authenticated org. Events include a `prevHash` / `entryHash` linkage for integrity verification. Accepts optional filters by `entityId` and/or `entityType`.

GET
/api/audit

Authorization

headerAuthorizationBearer <rsk_live_*>

Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.

Query Parameters

limit?integer
Range1 <= value <= 200
Default50
offset?integer
Range0 <= value
Default0
entityId?string
entityType?string
q?string

Case-insensitive literal substring in event type, entity type or entity ID. Actor and payload are excluded.

from?string

Inclusive start date or timestamp.

to?string

Inclusive end date or timestamp; dates include the whole UTC day.

Response Body

Audit events.

application/json
  1. response
events*array<>
Example Request
curl -X GET 'https://app.rensei.ai/api/audit'
Example Response
{  "events": [    {      "id": "string",      "workspaceId": "string",      "sequenceNumber": 0,      "eventType": "string",      "actorId": "string",      "actorType": "string",      "entityType": "string",      "entityId": "string",      "payload": {},      "prevHash": "string",      "entryHash": "string",      "occurredAt": "2019-08-24T14:15:22Z"    }  ]}

Account-free signed audit-entry verification sample.

Fully unauthenticated worked example for independently verifying a signed audit entry. The response includes the signed entry, canonicalization material, Ed25519 verification data, JWKS discovery URL, and public catalog URL.

Retrieve an exact retained privileged-verification artifact.

Returns the retained canonical JSON bytes addressed by the complete org, invocation, claim, kind, and SHA-256 identity. The caller must authenticate into the addressed org and, for project-scoped credentials, the invocation project. The response is the unmodified authority bytes with `Digest`, strong SHA-256 `ETag`, and immutable private caching. Cross-org, cross-project, and absent artifacts are concealed as 404.