Skip to content
GET/api/v1/shares

Read a shared trace by token

Public share-by-token endpoint: returns a single shared trace and its steps for a valid ?shareId. No auth required — the 128-bit shareId is the credential; access is gated by is_active + expiry + a 5/min rate limit. Authentication: the `shareId` query parameter itself (the ShareToken scheme) — the 128-bit random link is the credential. No `eg_` API key is read and no API-key scope is evaluated; the share's active flag, its expiry and a 5-per-minute rate limit are the whole access control.

Authentication

Share link. Pass the shareId query parameter minted by POST /api/v1/shares — the link itself is the credential.

Whoever holds it reads the shared trace. Access is bounded by the share's is_active flag, its expiry (410 Gone once past) and a 5-requests-per-minute rate limit — not by organization membership or an API-key scope. An eg_ API key is neither required nor read.

Response

200 example

{
  "success": true
}

All status codes

200Shares.
400(no description)
404Not Found.
410Gone.
429(no description)

Code samples

cURL

curl -X GET \
  https://evalguard.ai/api/v1/shares \
  -H "Authorization: Bearer $EVALGUARD_API_KEY"

TypeScript

// The TypeScript SDK (@evalguard/sdk) exposes TYPED methods — runEval,
// getEval, runSecurityScan, checkFirewall, … — not a generic request().
// For an arbitrary endpoint, call it directly:

const res = await fetch("https://evalguard.ai/api/v1/shares", {
  method: "GET",
  headers: { Authorization: `Bearer ${process.env.EVALGUARD_API_KEY}` },
});
console.log(res.status, await res.json());

Python

# The Python SDK (pip install evalguardai) exposes TYPED methods on
# EvalGuardClient — run_eval, get_eval, … — not a generic request().
# For an arbitrary endpoint, call it directly:

import os
import requests

headers = {"Authorization": f"Bearer {os.environ['EVALGUARD_API_KEY']}"}

response = requests.request("GET", "https://evalguard.ai/api/v1/shares", headers=headers)
print(response.status_code, response.json())

Go

package main

import (
	"context"
	"fmt"
	"net/http"
	"os"
)

func main() {
	req, _ := http.NewRequestWithContext(context.Background(), "GET", "https://evalguard.ai/api/v1/shares", nil)
	req.Header.Set("Authorization", "Bearer "+os.Getenv("EVALGUARD_API_KEY"))
	resp, err := http.DefaultClient.Do(req)
	if err != nil { panic(err) }
	defer resp.Body.Close()
	fmt.Println(resp.Status)
}

Errors

400404410429

Other Compliance endpoints