---
title: "Issue an offline-verifiable receipt for an audit row"
method: GET
path: "/api/v1/audit/receipt/{auditLogId}"
---

# Issue an offline-verifiable receipt for an audit row

`GET /api/v1/audit/receipt/{auditLogId}`

## Request

- Base URL: `https://app.axiorank.com`
- URL: `https://app.axiorank.com/api/v1/audit/receipt/{auditLogId}`
- Auth: HTTP bearer

Issue a self-contained receipt for one of your workspace's audit rows: inclusion proof + signed tree head + signed provenance, verifiable offline with `@axiorank/audit-verify`. Requires the `logs:read` scope; the workspace is taken from the key. Returns an envelope with `status` (ok, pending_seal, purged, unavailable) and, when ok, the `receipt`.

## Path parameters

- `auditLogId` string, uuid, required

## Response `200`

The receipt envelope.

- object
  - `status` 'ok' | 'pending_seal' | 'purged' | 'unavailable', required
  - `receipt` AuditReceipt: A self-contained, offline-verifiable proof for one audit row.
    - `version` 1, required
    - `auditLogId` string, uuid, required
    - `workspaceId` string, uuid, required
    - `rowHash` string, required: Hex SHA-256 over the row's immutable fields.
    - `leafHash` string, required
    - `leafIndex` integer, required
    - `treeSize` integer, required
    - `inclusionPath` object[], required
      - `dir` 'L' | 'R', required
      - `hash` string, required
    - `signedTreeHead` SignedTreeHead, required: An Ed25519-signed Merkle tree head over a sealed checkpoint window.
      - `seq` integer, required
      - `merkleRoot` string, required: Hex RFC 6962 root over the window's row hashes.
      - `treeSize` integer, required
      - `prevCheckpointHash` string, required: Binds the STH into the append-only chain.
      - `checkpointHash` string: This checkpoint's own hash, signed on self-anchored (v2) heads. Absent on v1.
      - `fromTs` string, date-time, required
      - `toTs` string, date-time, required
      - `workspaceId` string, uuid, required
      - `algorithm` 'EdDSA', required
      - `merkleVersion` integer, required
      - `treeAlgo` string, required
      - `keyId` string, required: RFC 7638 thumbprint of the signing key (JWKS lookup id).
      - `signedAt` string, date-time, required
      - `signature` string, required: base64url Ed25519 over the canonical STH.
    - `provenance` object: The Ed25519-signed delegation-provenance token (who authorized the action).

## Other responses

- `401`: Missing or invalid API key.

---

[API](https://skmtc.dev/axiorank/apis/axiorank-gateway-api.md) · [All operations](https://skmtc.dev/axiorank/apis/axiorank-gateway-api/llms.txt) · [OpenAPI document](https://skmtc.dev/axiorank/apis/axiorank-gateway-api/revisions/d8a7a33656e4?raw)