---
title: "Read Compliance Share"
method: GET
path: "/api/v1/compliance-shares/{token}"
tags: ["compliance"]
---

# Read Compliance Share

`GET /api/v1/compliance-shares/{token}`

## Request

- Base URL: `https://cp.xenovia.io` (the document declares no server; this is the origin it was published from)
- URL: `https://cp.xenovia.io/api/v1/compliance-shares/{token}`
- Auth: none declared

An auditor's link: the live evidence pack for the link's framework.
Anonymous by design; the unguessable token is the credential. Unknown,
expired and revoked links all answer 404. Each read is audited. The
pack is the one built within the last minute when there is one, and
reads are rate-limited per address: a link is not a way to make the
control plane rebuild evidence on demand.

## Path parameters

- `token` string, required

## Response `200`

Successful Response

- ComplianceSharedPackRead: What an auditor's link serves: the live pack and the link's terms.
  - `pack` object, required
  - `signed` SignedAuditExport, required
    - `payload` string, required
    - `signature` string, required
    - `key_id` string, required
    - `alg` 'ed25519', required
  - `public_key` AuditSigningKey, required
    - `alg` 'ed25519', required
    - `key_id` string, required
    - `public_key` string, required
  - `label` string, required
  - `expires_at` string, date-time, required

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-04** `2f4b4b338b8f`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/xenovia/apis/controlplane/changes/api/v1/compliance-shares/:token/get.md)

---

[API](https://skmtc.dev/xenovia/apis/controlplane.md) - [All operations](https://skmtc.dev/xenovia/apis/controlplane/llms.txt) - [OpenAPI document](https://skmtc.dev/xenovia/apis/controlplane/revisions/3e25bef24f8f?raw)