veil

Read card history

Read older version events and the account transfers around them.

GET/v1/identities/{n}/history
Access
Public; API key optional
Client
Browser fetch supported

Parameters#

NameLocationMeaning
nRequiredPathPermanent positive card number.
beforeQueryExclusive version cursor for older history. Omit for the newest page.
limitQuery1 to 200. Default 50.

Request examples#

cURL
curl -fsS 'https://veil.rip/v1/identities/1/history'
javascript
const response = await fetch("https://veil.rip/v1/identities/1/history");
const result = await response.json();

Try the request#

Response#

HTTP 200application/json

events has the same shape as the card’s event list. Pass before to get the next older page; null marks the first version.

FieldTypeMeaning
nintegerPermanent card number.
eventsarray<CardEvent>History page.
beforeinteger | nullCursor for the next older page.

Expand a nested object for its fields. Types ending in null allow a null value; optional fields may be absent. Other fields are present in that object.

Card history event CardEvent
FieldTypeMeaning
tstringPublication time in ISO 8601 UTC.
kindstringChange kind, such as created, added, revoked, renamed or takeover.
byobjectdevice, key and identity of the signer, where available.
ninteger | nullCard version, or null for an external event.
logIndexinteger | nullZero-based log index.
devicestring | nullDevice concerned by the change.
servicestring | nullPlatform concerned by the change.
handlestring | nullAccount concerned by the change.
changesarray<string>All changes in this version, in a fixed order.

Response headers#

HeaderValueMeaning
Content-Typeapplication/jsonUse the declared media type before choosing a parser.
DateHTTP dateServer time. Compare it with your clock when signing requests.
Retry-Afterinteger seconds, on rate_limited or busyWait at least this long before retrying. Other 429/503 codes do not necessarily include it.

Errors#

API errors return an error object. Use error.code for program logic; error.message is English text for people and can change. Response and error guide

HTTPCodeMeaning and next step
400invalid_parameter

A path, query or body field is missing, malformed or outside its accepted range.

Correct the field named in error.message before sending again.

404not_found

The requested card, key, alias, code or resource was not found.

Check the identifier. Temporary codes and previews may already have expired or been used.

410erased

The card existed and was erased or removed. The response also carries its public erasure receipt.

Stop using this card as current authority. Retain only the public receipt if needed.

When using an optional API key
HTTPCodeMeaning and next step
401invalid_api_key

The bearer credential is malformed, unknown, expired or revoked.

Use an active key. To use anonymous public access, remove Authorization entirely. Invalid credentials never fall back automatically.

403api_key_scope

The API key lacks read or verify scope, or the endpoint does not accept bearer keys.

Use the correct scope. Identity writes and key management still require a device signature.

403api_key_suspended

This API key is suspended.

Ask staff to restore it; another key cannot lift an account suspension.

403developer_suspended

The owner’s API account is suspended or the owner card is unavailable.

Check the owner account and any staff restriction. Creating another key does not bypass suspension.

Shared request errors
HTTPCodeMeaning and next step
429rate_limited

An anonymous, signed-request or API-key allowance was exceeded.

Wait at least Retry-After seconds. Share a queue and retry budget across your workers.

500internal_error

An unexpected server error occurred. Internal details are not returned.

Retry reads with bounded backoff. Check write results before sending a new signed operation.

503busy

The application has reached a temporary concurrency or database limit.

Wait Retry-After seconds and retry with bounded backoff.