Audit Export API - Undisk MCP

Export endpoint
Chain verification endpoint

Use these endpoints when you need to stream audit logs into SIEM or compliance data stores.

Export endpoint

GET /api/workspaces/:id/audit/export?format=ndjson&start=2026-01-01T00:00:00Z&end=2026-04-01T00:00:00Z

Query parameters:

format: json (default) or ndjson
start / end: ISO-8601 time range
agentId: filter events by agent identity
operationType: filter events by operation
filePath: filter events by path

Chain verification endpoint

GET /api/workspaces/:id/audit/verify?fromSeq=1&toSeq=100

Returns:

{ "valid": true, "checked": 100 } when the hash chain verifies.
{ "valid": false, "brokenAt": 42 } when verification detects tampering or corruption.