Skip to main content
GET
Read the calling organization's slice of the audit log

Authorizations

X-API-Key
string
header
required

Query Parameters

principal_ref
string | null
business_ref
string | null
jti
string | null
event_type
enum<string> | null

The kinds of event recorded in the tamper-evident audit log.

Consumption dominates by volume — it fires on every agent request to every merchant.

This diverges deliberately from the original brief's "five event types". Consent was dropped (it went unused), and the two categories that the brief treated as single types each carry genuinely different payloads, so they are split rather than discriminated inside one type:

  • registration — a counterparty publishing its disclosure profile is unrelated to a person completing identity verification;
  • revocation — one short-lived credential killed by jti. Nothing withdraws a subject's authority to mint, so this is the only shape.

Because event_type is a VARCHAR column rather than a native Postgres enum, adding or renaming a member here needs no migration.

Available options:
issuance,
consumption,
identity_registration,
counterparty_registration,
credential_revocation,
credential_mint_failed
limit
integer
default:10

Maximum number of records to return in a single page. Must be between 1 and 1000.

Required range: 1 <= x <= 1000
offset
integer | null

Number of records to skip from the beginning. Use 0 for the first page. Cannot be used with cursor.

Required range: x >= 0
cursor
string | null

Opaque pagination cursor token that identifies the position in the result set. Use the cursor from the previous response to get the next page. Cannot be used with offset.

Response

List of audit-log entries.

seq
integer
required

The entry's permanent sequence number (Merkle leaf index).

event
IssuanceEvent · object
required

A credential mint.

Mirrors the mint response (osiris.schemas.v1.credential) minus the credential string itself, which is a short-TTL projection we deliberately never store.