---
title: "verifyAuditChain"
description: "Verify the tamper-evident audit chain"
canonical: "https://pgbeam.com/docs/ts-sdk/agents/verifyAuditChain"
last-updated: "2026-10-15T11:54:41.000Z"
---

# verifyAuditChain

> Verify the tamper-evident audit chain

URL: https://pgbeam.com/docs/ts-sdk/agents/verifyAuditChain

{/* Auto-generated from OpenAPI. Do not edit. Run `pnpm generate:sdk-docs` to regenerate. */}

Recomputes the project's audit hash chain over an optional time range and reports whether it is intact. Each audit entry is linked to its predecessor with a SHA-256 hash, so editing or deleting any row breaks the chain. On a break, the response reports the first sequence number where a tampered or deleted entry was detected. Requires the same audit:read permission as the list and export endpoints.

## Usage

```typescript
const result = await api.agents.verifyAuditChain({
  pathParams: { project_id: "prj_xxx" },
});
```

## Parameters

| Parameter             | Type     | Required | Description                                                               |
| --------------------- | -------- | -------- | ------------------------------------------------------------------------- |
| pathParams.project_id | `string` | Yes      | Unique project identifier (prefixed, e.g. prj_xxx).                       |
| queryParams.start     | `string` | No       | Return entries at or after this timestamp (inclusive lower bound).        |
| queryParams.end       | `string` | No       | Return entries strictly older than this timestamp (cursor / upper bound). |

## Response

`Promise<AuditChainVerification>`: chain verification result.

## Example

```typescript
import { PgBeamClient } from "pgbeam";

const client = new PgBeamClient({
  token: "pbu_...",
  baseUrl: "https://api.pgbeam.com",
});

const result = await client.api.agents.verifyAuditChain({
  pathParams: { project_id: "prj_xxx" },
  queryParams: { start: "...", end: "..." },
});
```

## Errors

| Status | Description                                                                                                                                                                                                                                                                                           |
| ------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| 400    | The request was rejected. `code` is `INVALID_INPUT`, and `errors` names the offending fields when the failure was a validation one.                                                                                                                                                                   |
| 401    | Missing or invalid authentication. `code` is `UNAUTHORIZED`.                                                                                                                                                                                                                                          |
| 403    | The caller is authenticated but not allowed to perform this operation. `code` is `FORBIDDEN` when the caller's role is insufficient, and `PLAN_LIMIT_REACHED` when the organization's plan is what stands in the way. The two are answered differently, so branch on the code rather than the status. |
| 404    | The resource does not exist, or the caller is not entitled to know that it does. `code` is `NOT_FOUND`.                                                                                                                                                                                               |
| 429    | Rate limited. `code` is `RATE_LIMITED`.                                                                                                                                                                                                                                                               |
| 500    | The request failed for a reason on our side. `code` is `INTERNAL_ERROR`. Quote `request_id` when reporting it.                                                                                                                                                                                        |