Jelliu API documentation

{
  "data": {
    "id": "5b0f3c1e-8d2a-4b7e-9f61-2c4d8a9e7b10",
    "tenant_id": "7a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d",
    "user_id": "user_2kLmNoPqRsTuVwXyZ",
    "action": "webhook.update",
    "resource_type": "outbound_webhook",
    "resource_id": "5d2f8a4c-1b3e-4f6a-9c7d-8e0f1a2b3c4d",
    "changes": {
      "body": {
        "headers": "[REDACTED]",
        "is_active": true
      }
    },
    "changes_compressed": false,
    "ip_address": "181.49.12.7",
    "user_agent": {
      "browser": "Chrome",
      "os": "Windows",
      "device": "desktop"
    },
    "created_at": "2026-09-14T13:22:05.114Z",
    "row_hash": "9f2c4e6a8b0d1f3e5a7c9e1b3d5f7a9c2e4b6d8f0a1c3e5b7d9f1a3c5e7b9d0f",
    "prev_row_hash": "1a3c5e7b9d0f2c4e6a8b0d1f3e5a7c9e1b3d5f7a9c2e4b6d8f0a1c3e5b7d9f2c",
    "redacted_at": null,
    "redaction_reason": null,
    "redaction_hmac": null
  }
}

Returns one audit entry of the workspace with everything stored for it: the redacted request body in changes, and the integrity and redaction fields that GET /api/audit/verify-chain checks.

changes usually has the shape { "body": {...}, "statusCode"?: 403, "_resource_ref"?: "..." }. body is the request body with secrets and contact PII replaced by [REDACTED]. statusCode is present on failed attempts. _resource_ref holds a non-UUID resource id. Large bodies are stored compressed. When changes_compressed is true, changes is a base64 string of the gzip of that JSON: base64-decode it, gunzip it, then parse the JSON.

Idempotency. A read with no side effects. Safe to retry.

Access

Required scope: full. Human users need the owner role; admins are refused.
Rate limit: Audit — 20 requests/min per workspace, shared with the other audit routes, plus the general API limit (120–600/min by plan). See Rate limits.
Plan: Available on every plan.

Returns one audit entry of the workspace with everything stored for it: the redacted request body in `changes`, and the integrity and redaction fields that `GET /api/audit/verify-chain` checks. `changes` usually has the shape `{ "body": {...}, "statusCode"?: 403, "_resource_ref"?: "..." }`. `body` is the request body with secrets and contact PII replaced by `[REDACTED]`. `statusCode` is present on failed attempts. `_resource_ref` holds a non-UUID resource id. Large bodies are stored compressed. When `changes_compressed` is true, `changes` is a base64 string of the gzip of that JSON: base64-decode it, gunzip it, then parse the JSON. **Idempotency.** A read with no side effects. Safe to retry. **Access** - **Required scope:** `full`. Human users need the **owner** role; admins are refused. - **Rate limit:** Audit — 20 requests/min per workspace, shared with the other audit routes, plus the general API limit (120–600/min by plan). See [Rate limits](/rate-limits). - **Plan:** Available on every plan.

Authentication

AuthorizationBearer

Workspace API key: jl_ followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (Settings → API Keys) and sent as Authorization: Bearer jl_.... The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys.

Scope	GET / HEAD	POST / PUT / PATCH / DELETE	Admin-only routes
`read`	Yes	No	No
`write`	Yes	Yes	No
`full`	Yes	Yes	Yes

Operations restricted to admins or owners reject keys without the full scope with 403, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See Authentication.

Workspace API key: `jl_` followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (**Settings → API Keys**) and sent as `Authorization: Bearer jl_...`. The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys. | Scope | GET / HEAD | POST / PUT / PATCH / DELETE | Admin-only routes | | --- | --- | --- | --- | | `read` | Yes | No | No | | `write` | Yes | Yes | No | | `full` | Yes | Yes | Yes | Operations restricted to admins or owners reject keys without the `full` scope with `403`, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See [Authentication](/authentication).

Path parameters

idstringRequiredformat: "uuid"

UUID of the audit entry, as returned in id by GET /api/audit. An entry of another workspace answers 404.

Response

The audit entry.

dataobject

The full audit row.

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

429

Too Many Requests Error

Returns one audit entry of the workspace with everything stored for it: the redacted request body in changes, and the integrity and redaction fields that GET /api/audit/verify-chain checks.

Idempotency. A read with no side effects. Safe to retry.

Access

Required scope: full. Human users need the owner role; admins are refused.
Rate limit: Audit — 20 requests/min per workspace, shared with the other audit routes, plus the general API limit (120–600/min by plan). See Rate limits.
Plan: Available on every plan.