cURL
curl --request GET --fail-with-body --max-time 30 \
"${AMLOK_API_BASE_URL}/v1/input-manifests/manifest_example/entries?limit=100" \
--header "Authorization: Bearer ${AMLOK_API_KEY}" \
--header "Accept: application/json"import os
import requests
base_url = os.environ["AMLOK_API_BASE_URL"].rstrip("/")
headers = {'Accept': 'application/json'}
headers["Authorization"] = "Bearer " + os.environ["AMLOK_API_KEY"]
response = requests.request(
"GET", base_url + "/v1/input-manifests/manifest_example/entries?limit=100",
headers=headers, timeout=30, allow_redirects=False,
)
response.raise_for_status()
print(response.json())
const baseUrl = process.env.AMLOK_API_BASE_URL;
const apiKey = process.env.AMLOK_API_KEY;
if (!baseUrl || !apiKey) throw new Error("Configure AMLOK_API_BASE_URL and AMLOK_API_KEY");
const headers = {
"Accept": "application/json"
};
headers.Authorization = `Bearer ${apiKey}`;
const response = await fetch(baseUrl.replace(/\/$/, "") + "/v1/input-manifests/manifest_example/entries?limit=100", {
method: "GET", headers,
redirect: "error", signal: AbortSignal.timeout(30000),
});
if (!response.ok) throw new Error(`AMLOK returned HTTP ${response.status}`);
console.log(await response.json());{
"data": [
{
"resource_type": "application",
"resource_id": "app_example",
"resource_version": 1,
"source_record_id": "client-application-example",
"source_version": "1",
"content_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
},
{
"resource_type": "document",
"resource_id": "doc_example",
"resource_version": 1,
"source_record_id": "client-document-example",
"source_version": "1",
"content_sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
}
],
"page": {
"next_cursor": null,
"has_more": false,
"limit": 100
},
"meta": {
"request_id": "req_example",
"schema_version": "1.4.2",
"generated_at": "2026-10-23T14:00:00Z",
"data_status": "complete"
}
}Risk
List input manifest entries
Read the frozen source and normalized record-version references for an immutable input manifest. The path ID is the manifest ID. Order by resource_type, resource_id, resource_version; cursors remain bound to the same manifest. The record_count equals the complete entry count, including separately analyzed line items. Download the actual frozen normalized evidence through the record endpoint using manifest_id; raw documents use the document download route with the same manifest_id. Hash canonicalization is specified on InputManifest.sha256. Missing authorization returns 403; unavailable or deleted evidence returns 404 rather than substituting a newer record.
GET
/
v1
/
input-manifests
/
{id}
/
entries
cURL
curl --request GET --fail-with-body --max-time 30 \
"${AMLOK_API_BASE_URL}/v1/input-manifests/manifest_example/entries?limit=100" \
--header "Authorization: Bearer ${AMLOK_API_KEY}" \
--header "Accept: application/json"import os
import requests
base_url = os.environ["AMLOK_API_BASE_URL"].rstrip("/")
headers = {'Accept': 'application/json'}
headers["Authorization"] = "Bearer " + os.environ["AMLOK_API_KEY"]
response = requests.request(
"GET", base_url + "/v1/input-manifests/manifest_example/entries?limit=100",
headers=headers, timeout=30, allow_redirects=False,
)
response.raise_for_status()
print(response.json())
const baseUrl = process.env.AMLOK_API_BASE_URL;
const apiKey = process.env.AMLOK_API_KEY;
if (!baseUrl || !apiKey) throw new Error("Configure AMLOK_API_BASE_URL and AMLOK_API_KEY");
const headers = {
"Accept": "application/json"
};
headers.Authorization = `Bearer ${apiKey}`;
const response = await fetch(baseUrl.replace(/\/$/, "") + "/v1/input-manifests/manifest_example/entries?limit=100", {
method: "GET", headers,
redirect: "error", signal: AbortSignal.timeout(30000),
});
if (!response.ok) throw new Error(`AMLOK returned HTTP ${response.status}`);
console.log(await response.json());{
"data": [
{
"resource_type": "application",
"resource_id": "app_example",
"resource_version": 1,
"source_record_id": "client-application-example",
"source_version": "1",
"content_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
},
{
"resource_type": "document",
"resource_id": "doc_example",
"resource_version": 1,
"source_record_id": "client-document-example",
"source_version": "1",
"content_sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
}
],
"page": {
"next_cursor": null,
"has_more": false,
"limit": 100
},
"meta": {
"request_id": "req_example",
"schema_version": "1.4.2",
"generated_at": "2026-10-23T14:00:00Z",
"data_status": "complete"
}
}Required scope:
risk:read
Read the frozen source and normalized record-version references for an immutable input manifest. The path ID is the manifest ID. Order by resource_type, resource_id, resource_version; cursors remain bound to the same manifest. The record_count equals the complete entry count, including separately analyzed line items. Download the actual frozen normalized evidence through the record endpoint using manifest_id; raw documents use the document download route with the same manifest_id. Hash canonicalization is specified on InputManifest.sha256. Missing authorization returns 403; unavailable or deleted evidence returns 404 rather than substituting a newer record.
Product scope · Processing lifecycle · ErrorsAuthorizations
Server-to-server API key bound to exactly one workspace, institution tenant and environment. No caller-supplied workspace override is accepted. Do not use in public browser code.
Path Parameters
Authorized resource ID in this workspace.
Query Parameters
Default 100; maximum 200.
Required range:
1 <= x <= 200Opaque continuation bound to the original filters and snapshot.