---
title: "Verify the evidence chain"
method: GET
path: "/api/v1/firme/{id}/verify"
tags: ["Signatures (app routes)"]
---

# Verify the evidence chain

`GET /api/v1/firme/{id}/verify`

## Request

- Base URL: `https://api.custodo.ai`
- URL: `https://api.custodo.ai/api/v1/firme/{id}/verify`
- Auth: HTTP bearer

Every link re-derived on the server: each `prevHash` against the link before it, each `hash` against the link’s own material. `intact` is the answer a dispute needs.

## Path parameters

- `id` string, uuid, required

## Headers

- `X-Tenant-Id` string, uuid

## Response `200`

The verdict, link by link.

- object
  - `ok` true, required
  - `data` FirmeChainVerdict, required
    - `envelopeId` string, required: A UUID.
    - `intact` boolean, required: Every link follows the one before it and none was proved altered.
    - `verified` boolean, required: Intact, and every link’s content recomputed.
    - `links` object[], required
      - `id` string, required: A UUID.
      - `event` string, required
      - `at` string, required: ISO 8601, UTC.
      - `linked` boolean, required
      - `content` 'v2' | 'v1' | 'v1_reordered' | 'unverifiable' | 'mismatch', required: `v2`: sha256 over `custodo-firme-evidence/v2`, then prevHash (or GENESIS), envelopeId, signerId (or empty), event, at and the detail as canonical JSON (keys sorted at every depth), joined by newlines — recomputable from GET /events. `v1`/`v1_reordered`: an older link, proved by the server. `mismatch`: altered.

## Other responses

- `400`: The request did not validate: `error.details` names the fields.
- `401`: No API key, or one that is malformed, unknown, revoked or expired.
- `403`: The module is off for this organisation, the credential lacks the permission, or the tier does not cover it.
- `404`: Nothing with that id in this organisation.
- `429`: The API key has spent its minute, or its day. See `Retry-After`.

---

[API](https://skmtc.dev/custodo/apis/custodo-integrazioni.md) · [All operations](https://skmtc.dev/custodo/apis/custodo-integrazioni/llms.txt) · [OpenAPI document](https://skmtc.dev/custodo/apis/custodo-integrazioni/revisions/16d336d3ec2a?raw)