# List a signature request's audit trail (/docs/api-reference/signature-requests/list-sign-request-events)

Everything that happened to the request, oldest first: who did it, from which address, the documents' SHA-256 when it mattered, and a hash chain (`previous_hash`, `hash`) that shows the trail is complete and unchanged.

`GET https://api.coss.com/v1/sign/requests/{id}/audit_trail`

Authenticate with your API key as a bearer token (`Authorization: Bearer coss_test_…`). Responses are JSON with snake_case fields; errors are `{ error: { type, code, message, param?, issues?, request_id } }` (https://coss.com/docs/api-reference/errors.md).

## Path parameters

- `id` (string, required): The signature request's id.

## Example request

TypeScript (the `coss` package):

```ts
import { Coss } from "coss";

const coss = new Coss({
  apiKey: process.env.COSS_API_KEY,
  baseUrl: "https://api.coss.com",
});

const { data, error } = await coss.sign.requests.auditTrail("sreq_01k7c8m4q2f3e9v6t5r1n0p8yz");
```

HTTP:

```sh
curl -X GET "https://api.coss.com/v1/sign/requests/sreq_01k7c8m4q2f3e9v6t5r1n0p8yz/audit_trail" \
  -H "Authorization: Bearer $COSS_API_KEY"
```

## Response 200

The audit trail.

- `object` ("list", required)
- `data` (object[], required)
  - `object` ("sign_event", required)
  - `id` (string, required)
  - `sequence` (integer, required): 1-based position in the request's trail.
  - `type` ("created" | "sent" | "notified" | "viewed" | "consented" | "signed" | "declined" | "reminded" | "canceled" | "expired" | "completed" | "sealed", required)
  - `signer_id` (string | null, required)
  - `actor` ("api_key" | "signer" | "dashboard" | "system", required): Who did it: your API key, a signer, a member in the dashboard, or coss.com.
  - `ip_address` (string | null, required)
  - `user_agent` (string | null, required)
  - `details` (object, required)
    - `reason` (string)
    - `document_sha256` (map of string): Each document's SHA-256 at that moment, by document id.
    - `disclosure_sha256` (string): SHA-256 of the consent text the signer accepted.
    - `field_ids` (string[])
    - `signature_sha256` (string): SHA-256 of the signature image the signer adopted.
    - `initials_sha256` (string)
    - `session_id` (string): The signing session the signer used.
    - `signed_document_sha256` (string): `sealed`: the SHA-256 of the sealed, completed document.
  - `occurred_at` (string, required, date-time)
  - `previous_hash` (string | null, required)
  - `hash` (string, required): SHA-256 over this event and `previous_hash`: changing or removing an event breaks the chain from there on.
- `has_more` (boolean, required)

Example:

```json
{
  "object": "list",
  "data": [],
  "has_more": false
}
```

## Errors

- `400`: The `Coss-Version` header names an unknown API version (`invalid_api_version`).
- `401`: The API key is missing, invalid, revoked or expired (`authentication_error`).
- `403`: The API key lacks the permission this endpoint needs (`permission_error`), or its organization is suspended (`organization_suspended`).
- `404`: No signature request with this id exists in the API key's environment (`not_found`).
- `429`: Too many requests with this API key (`rate_limited`), or too many requests with invalid keys from this address (`too_many_failed_authentications`). Retry after `Retry-After` seconds. Successful responses carry `RateLimit-Limit`, `RateLimit-Remaining` and `RateLimit-Reset` (seconds until the limit is fully restored).
- `500`: Unexpected server error (`api_error` / `internal_error`).
- `503`: The API key could not be verified right now; retry (`service_unavailable`).