Skip to main content
GET
Verify the hash chain

Authorizations

X-Qanapi-Authorization
string
header
required

A machine credential, qk_ followed by its secret. The first twelve characters are an indexed prefix; the rest is compared in constant time against a stored SHA-256 hash. A key reaches only the configurations it is linked to.

It may also be sent as Authorization: Bearer qk_..., which is recognised by the prefix.

Query Parameters

from
string<date-time>
to
string<date-time>
instance_id
string

Chains are per node, so verifying one node at a time is normal.

Response

The verification summary.

checked
integer

Records examined.

The finding that matters: a record whose hash does not follow from its predecessor, which means the row was edited after it was written.

gaps
object[]

A missing predecessor. Expected whenever the query is filtered, and expected after an authorised purge, so this is reported separately from a broken link rather than raised as tampering.

gaps_expected
boolean

Whether the filters themselves narrow the range.