Signed tree head for a checkpoint

Fetch the signed tree head (STH) for one of your workspace's sealed checkpoints by its sequence number. A monitor pins the STH series over time to detect a retroactive edit. Requires the logs:read scope; the workspace is taken from the key, so an STH series is never cross-tenant.

get/api/v1/audit/checkpoints/{seq}

Request

  • Base URL: https://app.axiorank.com
  • URL: https://app.axiorank.com/api/v1/audit/checkpoints/{seq}
  • Auth: HTTP bearer

Path parameters

seqinteger required

Response

The signed tree head for that checkpoint.

seqinteger required
merkleRootstring required

Hex RFC 6962 root over the window's row hashes.

treeSizeinteger required
prevCheckpointHashstring required

Binds the STH into the append-only chain.

checkpointHashstring

This checkpoint's own hash, signed on self-anchored (v2) heads. Absent on v1.

fromTsstring date-time required
toTsstring date-time required
workspaceIdstring uuid required
algorithm'EdDSA' required
merkleVersioninteger required
treeAlgostring required
keyIdstring required

RFC 7638 thumbprint of the signing key (JWKS lookup id).

signedAtstring date-time required
signaturestring required

base64url Ed25519 over the canonical STH.

Example response

{
  "treeAlgo": "rfc6962-sha256"
}

Changes

No recorded changes to this operation across all 1 revision of this API.