---
title: "Verify tenant audit chain integrity"
method: POST
path: "/audit/verify"
tags: ["Audits"]
---

# Verify tenant audit chain integrity

`POST /audit/verify`

Requires an owner/admin browser session with recent MFA. Returns tenant-scoped, no-store audit data; agent tokens and tenant API keys are not sufficient. Walks the tenant audit chain and verifies HMAC continuity over at most 10,000 rows. Partial verification starts at fromSeq and is anchored to the stored predecessor hash; use requireHead=true to require the current chain head.

## Query parameters

- `fromSeq` integer
- `toSeq` integer
- `requireHead` boolean

## Headers

- `X-Steward-Request-Timestamp` string
- `X-Steward-Request-Expires-At` string
- `X-Steward-Signature` string
- `X-Steward-Signing-Key-Id` string
- `Idempotency-Key` string

## Response `200`

JSON response

- object
  - `ok` true, required
  - `data` union, required
    - object
      - `valid` boolean, required
      - `count` integer, required
      - `brokenAt` integer
      - `anchored` boolean, required
      - `requireHead` boolean, required
      - `verifiedFromSeq` integer, required
      - `verifiedToSeq` integer, required
      - `warning` string
    - object
      - `valid` boolean, required
      - `count` integer
      - `brokenAt` integer, required
      - `anchored` boolean, required
      - `requireHead` boolean, required
      - `verifiedFromSeq` integer, required
      - `verifiedToSeq` integer, required
      - `warning` string

## Other responses

- `400` — JSON response
- `401` — JSON response
- `403` — JSON response
- `404` — JSON response
- `408` — JSON response
- `409` — JSON response

## Changes

- **2026-08-17** `261a7c8070b2` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/steward-fi/apis/steward-api/changes/audit/verify/post.md)

---

[API](https://skmtc.dev/steward-fi/apis/steward-api.md) · [All operations](https://skmtc.dev/steward-fi/apis/steward-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/steward-fi/steward-api/revisions/b88b4b97a664/schema)
