---
title: "Inclusion proof for one of your entries"
method: GET
path: "/api/v2/evidence/proof"
tags: ["Evidence"]
---

# Inclusion proof for one of your entries

`GET /api/v2/evidence/proof`

## Request

- Base URL: `https://api.riskrouter.eu`
- URL: `https://api.riskrouter.eu/api/v2/evidence/proof`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-RiskRouter-Key`

RFC 9162 audit path from the entry's leaf hash to the root of a tree of tree_size leaves. Take tree_size and root_hash from the same signed head.

## Query parameters

- `leaf_index` integer, required
- `tree_size` integer

## Response `200`

The proof.

- object
  - `format` 'riskrouter-evidence-proof|v2'
  - `entry` EvidenceEntry
    - `leaf_index` integer, required
    - `created_at` string, required: UTC, YYYY-MM-DDTHH:MM:SS.ffffffZ, exactly as in the leaf string.
    - `distributor_id` string, uuid, required
    - `kind` string, required
    - `record_digest` string, required
    - `leaf_hash` string, required: SHA-256(0x00 || leaf string); the leaf string is the v2 or the v3 form according to leaf_version. See /spec.
    - `leaf_version` 2 | 3: 2: unsigned leaf. 3: the entry also carries signer_key_id, claimed_at and client_signature, the distributor's own signature over its claim.
    - `signer_key_id` string
    - `claimed_at` string
    - `client_signature` string
  - `tree_size` integer
  - `audit_path` string[]
  - `head` EvidenceHead
    - `tree_size` integer, required
    - `root_hash` string, required
    - `timestamp` string, date-time, required
  - `signer_public_key` SignerPublicKey: A P-256 public key in JWK form. Its id is the first 16 hex characters of SHA-256 over the JSON array [x, y].
    - `kty` 'EC', required
    - `crv` 'P-256', required
    - `x` string, required
    - `y` string, required

## Other responses

- `400`: Every error carries the same envelope with a stable code.
- `401`: Every error carries the same envelope with a stable code.
- `404`: Every error carries the same envelope with a stable code.
- `413`: Every error carries the same envelope with a stable code.
- `429`: Every error carries the same envelope with a stable code.
- `502`: Every error carries the same envelope with a stable code.
- `503`: Every error carries the same envelope with a stable code.

---

[API](https://skmtc.dev/riskrouter/apis/riskrouter-api.md) · [All operations](https://skmtc.dev/riskrouter/apis/riskrouter-api/llms.txt) · [OpenAPI document](https://skmtc.dev/riskrouter/apis/riskrouter-api/revisions/5fee45dc6d1f?raw)