---
title: "Verify audit log signature"
method: GET
path: "/api/audit-logs/{id}/verify"
tags: ["Audit Logs"]
---

# Verify audit log signature

`GET /api/audit-logs/{id}/verify`

Recomputes the HMAC-SHA256 signature for a single audit log event and
compares it (in constant time) against the stored signature to detect
tampering.

## Path parameters

- `id` string, required

## Response `200`

Successful response

- AuditVerifyResult — The result of an audit log signature verification.
  - `valid` boolean, required — Whether the stored signature matches the recomputed signature.
  - `computed` string, required — The signature recomputed from the stored event fields.
  - `stored` string, required — The signature persisted with the event.

## Other responses

- `400` — Bad request
- `404` — Resource not found
- `500` — Internal server error

---

[API](https://skmtc.net/getbifrost/apis/bifrost-api.md) · [All operations](https://skmtc.net/getbifrost/apis/bifrost-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/getbifrost/bifrost-api/versions/f8cab88f64ea/schema)