--- title: "Published Records" description: "GET /records/{originalImageHash} and POST /records: recover an image's manifests and its verification material, singly or for a list of hashes." published: 2026-09-23T10:54:54.953415+00:00 updated: 2026-09-23T10:54:54.953415+00:00 tags: ["api", "parallax", "reference", "rest"] url: https://xiobjects.com/docs/xio/parallax/rest-api/reference/records source: XI Objects --- # Published Records ## GET /records/{originalImageHash} Recovers one image's published record: the manifests it was registered with, and the material to verify that record. **Any token holder may call this for any original image hash, whoever registered the image.** No match is needed and no ownership is checked. The answer names no account and no registration. `{originalImageHash}` is a 64-character lowercase hex hash, as `matchedOriginalImageHashes` on a look-up gives it, or as `originalImageHash` on your own registration response gives it. ```bash curl -sS "$BASE/records/$HASH" -H "Authorization: Bearer $TOKEN" ``` **Response: 200 OK** The [published record](#published-record) shape, for the one hash asked for. ```json { "originalImageHash": "9f2c7a41e6b8d0532c1f4a9b7e0d8c6a53f1b2e4d7c0a9f8b6e3d1c4a7f0b2e5", "outcome": "published", "manifests": [ { "type": "xi-manifest", "form": "json", "payload": { "creator": "Ada Lovelace", "licence": "CC-BY-4.0" }, "hash": "7c91...4e2a", "signature": "3Fq1..." }, { "type": "c2pa", "form": "jumbf", "payload": "AAAAIWp1bWIAAAAZanVtZGMycGEAEQAQgAAAqgA4m3EA", "hash": "2a00...4580", "signature": "9Kd7..." } ], "verification": { "contentHash": "3b1f...", "hashAlgorithm": "BLAKE3-256", "signedAtUtc": "2026-09-22T09:14:03.771Z", "signature": "MEUCIQ...", "signatureAlgorithm": "Ed25519", "publicKey": "MCowBQ...", "leafCertificate": "-----BEGIN CERTIFICATE-----\n...", "certificateChain": ["-----BEGIN CERTIFICATE-----\n..."], "leafCertificateThumbprint": "A1B2C3...", "trustContext": "xio", "trustVersion": 1, "canonicalVersion": 2, "collectionSignature": "Wp3x..." } } ``` `noRecordAnswered` and `takenDown` are `200`s too, carrying the outcome with `manifests` and `verification` both `null`. `noRecordAnswered` means either that nothing was ever published for that hash or that the record store would not answer for it, and the two are not distinguishable. There is no `404` on this route. Costs one look-up when the outcome is `published` or `takenDown`. Costs nothing otherwise. **Statuses:** | Status | Title | Meaning | |--------|-------|---------| | 400 | `Invalid declared hash` | The path hash is not 64 lowercase hex characters. Nothing read, nothing charged | | 422 | `Image could not be checked` | The engine refused this hash. Nothing charged | | 429 | `Quota exceeded` | Carries both remaining counts. No engine call was made | | 503 | `Image could not be checked yet` | The engine could not answer for this hash yet. Nothing charged. `Retry-After` names the seconds to wait | | 503 | `Engine not configured` | No engine is wired | See [Recover an image's attribution](/docs/xio/parallax/rest-api/records). --- ## POST /records Recovers the published records for a list of original image hashes. One result per hash, in the order asked. **Request body:** | Field | Type | Required | Description | |-------|------|----------|-------------| | `originalImageHashes` | `array` | Yes | The hashes to read. At least one, and no more than the deployment's cap. | ```bash curl -sS -X POST "$BASE/records" \ -H "Authorization: Bearer $TOKEN" \ -H "Content-Type: application/json" \ -d '{"originalImageHashes":["9f2c7a...b2e5","0000...beef"]}' ``` **Response: 200 OK** | Field | Type | Description | |-------|------|-------------| | `records` | `array` | One [published record](#published-record) per hash asked, in the order asked. | ```json { "records": [ { "originalImageHash": "9f2c7a...b2e5", "outcome": "published", "manifests": [ { "type": "xi-manifest", "form": "json", "payload": { "creator": "Ada Lovelace" } } ], "verification": { "contentHash": "3b1f...", "signatureAlgorithm": "Ed25519" }, "failureReason": null }, { "originalImageHash": "0000...beef", "outcome": "noRecordAnswered", "manifests": null, "verification": null, "failureReason": null } ] } ``` A hash that is not 64 lowercase hex characters is answered `refused` in its own position and is never sent to the engine. A hash the engine refused is answered `refused` or `retry` with a `failureReason`. One hash's refusal never costs its siblings their answers. Reserves one look-up for every hash it will send, all or nothing, before any engine call. Charges only the hashes answered `published` or `takenDown`. **Statuses:** | Status | Title | Meaning | |--------|-------|---------| | 400 | `Malformed request` | The body names no hash at all | | 400 | `Too many declared hashes` | The list is longer than the configured cap. Nothing read, nothing charged | | 429 | `Quota exceeded` | Your grant does not cover every hash asked. Carries both remaining counts. No engine call was made | | 503 | `Engine not configured` | No engine is wired | See [Recover an image's attribution](/docs/xio/parallax/rest-api/records). ---