Audit

API reference descriptions are provided in English to preserve the exact published contract.

GETList tamper-evident audit entries for the accountaudit.list
GETCurrent tamper-evidence chain head for the accountaudit.chainHead.list

List tamper-evident audit entries for the account

GET/v1/accounts/{AC}/audit

audit.listSDK operation getV1AccountsByAcAudit

Entries are masked by default. unmask=true requires contacts:read_identifiers and records a RESTRICTED_DATA_READ entry of its own.

Required scope: audit:read.Paginated

Parameters

actionstring (max 64 chars)query
actorRefstring (max 256 chars)query
resourceRefstring (max 256 chars)query
Entries about this resource, including read-access entries that exposed it (a contact's messages, a conversation's thread).
sincestring (date-time)query
untilstring (date-time)query
unmaskbooleanquery
limitinteger (1–100)query
cursorstring (max 2048 chars)query

GET /v1/accounts/{AC}/audit

curl "https://api.staging.toutye.com/v1/accounts/$TOUTYE_ACCOUNT_SID/audit" \
  -H "Authorization: Bearer $TOUTYE_API_KEY" \
  -H "Toutye-Version: 2026-08-21"

Responses

Current tamper-evidence chain head for the account

GET/v1/accounts/{AC}/audit/chain-head

audit.chainHead.listSDK operation getV1AccountsByAcAuditChainHead

The head hash an auditor compares against the hourly Object-Locked export anchor.

Required scope: audit:read.

GET /v1/accounts/{AC}/audit/chain-head

curl "https://api.staging.toutye.com/v1/accounts/$TOUTYE_ACCOUNT_SID/audit/chain-head" \
  -H "Authorization: Bearer $TOUTYE_API_KEY" \
  -H "Toutye-Version: 2026-08-21"

Responses