---
title: "Get activity log integrity chain"
method: GET
path: "/v1/audit/integrity"
tags: ["audit"]
---

# Get activity log integrity chain

`GET /v1/audit/integrity`

## Request

- Base URL: `https://api.brixsignage.com`
- URL: `https://api.brixsignage.com/v1/audit/integrity`
- Auth: HTTP bearer

Returns the tamper-evidence chain for the workspace's activity log: a digest to record for later comparison, and the daily checkpoints behind it. Each complete UTC day of events is combined into one checkpoint linked to the day before. The current, still-open day is deliberately not yet included, since a checkpoint over data still being written would have to be recalculated.

## Query parameters

- `limit` integer

## Response `200`

Success.

- object
  - `data` object, required
    - `latestDigest` string, nullable, required: The value to record. Null before the first day is covered.
    - `coveredThrough` string, nullable, required: ISO-8601 timestamp (UTC).
    - `canonicalVersion` string, required: The newest row encoding the hashes use (`3`). Each checkpoint names its own in `leafVersion`.
    - `note` string, required
    - `checkpoints` object[], required
      - `seq` integer, required
      - `periodStart` string, required: ISO-8601 timestamp (UTC).
      - `periodEnd` string, required: ISO-8601 timestamp (UTC).
      - `rowCount` integer, required
      - `firstEventId` string, nullable, required
      - `lastEventId` string, nullable, required
      - `merkleRoot` string, required
      - `leafVersion` string, nullable, required: The row encoding this checkpoint's root was taken over. `3`: every field escaped (backslash as `\\`, U+001F as `\u`) and joined on U+001F, `via` last. Null: a checkpoint written before version 3, whose rows are joined unescaped, each starting with its own version (`1` with no `via`, `2` with `via` last).
      - `prevDigest` string, required: The previous checkpoint's digest, or `genesis`.
      - `digest` string, required

## Other responses

- `401`: Missing, expired or revoked bearer token.
- `403`: The token lacks the permission this operation needs (see `x-brix-permission`).
- `5XX`: Server error. The body carries a `requestId` to quote to support.

---

[API](https://skmtc.dev/brixsignage/apis/brix-api.md) · [All operations](https://skmtc.dev/brixsignage/apis/brix-api/llms.txt) · [OpenAPI document](https://skmtc.dev/brixsignage/apis/brix-api/revisions/02fd3665dc7d?raw)