---
title: "Read one admission record's exact stored bytes"
method: GET
path: "/vaults/v1/{vault_id}/admissions/{generation}"
tags: ["vault"]
---

# Read one admission record's exact stored bytes

`GET /vaults/v1/{vault_id}/admissions/{generation}`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/vaults/v1/{vault_id}/admissions/{generation}`
- Auth: one of:
  - API key in header `SIGN-IN-WITH-X`
  - HTTP bearer
  - HTTP bearer

The control-plane-signed admission record canonizing that generation, byte-identical. This is the evidence a client checks when it wants the platform's own attestation of what won at a generation.

## Path parameters

- `vault_id` string, required
- `generation` string, required

## Headers

- `SIGN-IN-WITH-X` string, required

## Response `200`

The exact stored admission-record bytes

- object

## Other responses

- `400`: VALIDATION_FAILED — `generation` must be 16 lowercase hex (checked before the admission record is looked up)
- `403`: Not authorized (VAULT_ACCESS_DENIED)
- `404`: No admission record at this generation

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)