---
title: "Look up AAT token metadata by JTI (x402-paid)"
method: GET
path: "/v1/audit/{jti}"
tags: ["audit"]
---

# Look up AAT token metadata by JTI (x402-paid)

`GET /v1/audit/{jti}`

## Request

- Base URL: `https://agentlair.dev`
- URL: `https://agentlair.dev/v1/audit/{jti}`
- Auth: none required

Returns metadata for an Agent Authentication Token by its JTI. Public endpoint — no API key required. Anonymous callers pay 0.001 USDC via x402 (payment IS authentication). Returns issued_at, expires_at, audience, scopes, and revocation status.

## Path parameters

- `jti` string, required

## Response `200`

Token metadata

- object
  - `jti` string, required
  - `issued_at` string, date-time, required
  - `expires_at` string, date-time, required
  - `audience` string
  - `scopes` string[]
  - `status` 'active' | 'expired' | 'revoked', required
  - `revoked_at` string, date-time, nullable
  - `revocation_reason` string, nullable
  - `audit_log_url` string

## Other responses

- `400`: Invalid JTI format
- `402`: Payment required — 0.001 USDC via x402. Include X-PAYMENT header with a valid payment to proceed.
- `404`: Token not found (not issued or already expired and purged)

---

[API](https://skmtc.dev/agentlair/apis/agentlair-api.md) · [All operations](https://skmtc.dev/agentlair/apis/agentlair-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agentlair/apis/agentlair-api/revisions/fac95ff4995d?raw)