Evidence

Redeem a signed raw-evidence URL (no auth)

Unauthenticated by design — the token IS the capability. No ABAC/consent/PII re-run; fail-closed re-checks only: signature, expiry, the token’s own tenant, availability still 'hot', and at least one live grant (revocation backstop). Bad, expired and revoked tokens all answer the same bare 404. 404 until EVIDENCE_RAW_READ_ENABLED=1.

get/v1/evidence/redeem/{token}

Request

  • Base URL: https://brain.inite.ai
  • URL: https://brain.inite.ai/v1/evidence/redeem/{token}
  • Auth: HTTP bearer

Path parameters

tokenstring required

The signed token from a raw-url mint.

Response

The original bytes (Content-Type = the registered mediaType), with X-Content-Type-Options: nosniff, Cache-Control: no-store and Content-Disposition: attachment.

Changes

No recorded changes to this operation across all 1 revision of this API.