Skip to main content
GET
/
reports
/
{request_id}
/
verify
Verify a report's integrity
curl --request GET \
  --url https://{hostname}/v1/reports/{request_id}/verify \
  --header 'Authorization: Bearer <token>'
{
  "request_id": "req_01JNQBC4X8Y2Z3A",
  "verified": true,
  "report_hash": "sha256:abc123def456...",
  "checked_at": "2026-02-19T15:00:00Z",
  "signed_at": "2026-02-19T14:23:01Z",
  "failure_reason": null
}

Authorizations

​
Authorization
string
header
required

JWT issued by your organization's SAML/OIDC identity provider after authentication. Required for user-attributed queries. The sub claim is recorded verbatim in the audit trail.

Path Parameters

​
request_id
string
required

The unique identifier of the lookup request.

Response

Verification result returned.

​
request_id
string
required
Example:

"req_01JNQBC4X8Y2Z3A"

​
verified
boolean
required

True if the stored report hash matches the originally generated hash and the signature is valid.

Example:

true

​
report_hash
string
required

The SHA-256 hash on record for this report.

Example:

"sha256:abc123def456..."

​
checked_at
string<date-time>
required
Example:

"2026-02-19T15:00:00Z"

​
signed_at
string<date-time>
Example:

"2026-02-19T14:23:01Z"

​
failure_reason
string | null

Present only when verified is false. Describes why verification failed.

Example:

null