---
title: "Validate the time record hash chain"
method: GET
path: "/companies/{company}/time-entries/chain/validate"
tags: ["Time Entries"]
---

# Validate the time record hash chain

`GET /companies/{company}/time-entries/chain/validate`

## Request

- Base URL: `https://api.factuarea.com/v1`
- URL: `https://api.factuarea.com/v1/companies/{company}/time-entries/chain/validate`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

Recompute the SHA-256 hash chain (`huella`) of your time record ledger and compare it with the stored values, without changing data.
- Returns whether the chain is intact and, if not, the `id` of the first corrupted record.
- Limited to 1 request per minute per credential and company; datasets over 50,000 records return 422 `dataset_too_large`.

## Path parameters

- `company` string, uuid, required

## Headers

- `Factuarea-Version` string, date

## Response `200`

- object
  - `data` TimeRecordChainValidation, required: Result of recomputing and verifying the SHA-256 hash chain (`huella`) of your company time record ledger without mutating data. Returned by `GET /v1/companies/{company}/time-entries/chain/validate`. Fingerprints are never exposed.
    - `object` 'time_record_chain_validation', required
    - `is_valid` boolean, required: Indicates whether the hash chain is intact.
    - `total_records` integer, required: Total number of time record entries considered.
    - `validated_records` integer, required: Number of validated entries.
    - `first_invalid_record_id` string, nullable, required: UUID v7 of the first invalid entry, or `null` if the chain is intact.
    - `validation_year` integer, required: Validation year.
    - `validated_at` string, date-time, required: When the validation was run.

## Other responses

- `400`: `parameter_unknown` with `subcode` `retired_active_profile_header`: the retired `X-Active-Profile` header was sent; the company goes in the path. `parameter_invalid_format` on `Factuarea-Version`: the header is not a `YYYY-MM-DD` date. `unsupported_api_version`: the `Factuarea-Version` date is not a supported version.
- `401`: Missing or invalid API key.
- `403`: The request is authenticated but not allowed: the API key lacks the required scope (`insufficient_scope`), the plan does not include the public API or this feature (`addon_not_active`, `feature_not_available_in_plan`), or the module is not available with a test key (`module_not_available_in_sandbox`).
- `404`: The requested resource does not exist or belongs to another company. `profile_not_found`: the company in the path does not exist, is not in the API key scope or belongs to the other environment (live or test).
- `429`: Rate limit exceeded. Retry after the duration in `Retry-After`.
- `500`: Unexpected server error.

---

[API](https://skmtc.dev/factuarea/apis/factuarea-public-api.md) · [All operations](https://skmtc.dev/factuarea/apis/factuarea-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/factuarea/apis/factuarea-public-api/revisions/718e77934422?raw)