WEBCAT log auditor

3,382,130,001 leaves indexed from 5 transparency logs, verified nightly against their signed tree heads. Source code and documentation: https://github.com/freedomofpress/webcat-monitor-api.

Log	Leaves	Newest leaf	Last update	Verification
log2025-1	162,232,576	2026-10-21 03:21	2026-10-21 03:26	verified 2026-10-21 03:26
rekor-v1	3,219,577,023	2026-10-12 00:26	2026-10-21 03:26	verified 2026-10-21 03:26
seasalp	74,245	-	2026-10-21 03:21	verified 2026-10-21 03:21
barreleye	240,843	-	2026-10-21 03:21	verified 2026-10-21 03:21
ginkgo	5,314	-	2026-10-21 03:21	verified 2026-10-21 03:21

API

Read-only JSON, no authentication, cached 5 minutes. Claim semantics are the WEBCAT extension's: every claim must match, a value starting with ^ is a prefix, the SAN claim 2.5.29.17 matches any subject alternative name. Please keep it to a few requests per second; a burst gets 503 with Retry-After.

GET  /v1/sigstore/history?claims[<oid>]=<value>&claims[<oid>]=<value>...[&limit=N][&before=<unix time>][&cursor=C]
POST /v1/sigstore/history          {"claims": {"<oid>": "<value>", ...}, "limit": N, "before": <unix time>, "cursor": C}
GET  /v1/sigsum/history?signer=<base64url public key>   or   ?key=<hex sha256 of the key>   [&cursor=C]
GET  /v1/entry/<log>/<log index>
GET  /v1/sha/<40 hex git commit>
GET  /v1/artifact/<64 hex digest>       Rekor v2 only
GET  /v1/status                          totals and last verification per log

Examples

/v1/sigstore/history?claims%5B2.5.29.17%5D=%5Ehttps%3A%2F%2Fgithub.com%2Ffreedomofpress%2F&claims%5B1.3.6.1.4.1.57264.1.8%5D=https%3A%2F%2Ftoken.actions.githubusercontent.com&limit=20
/v1/sigsum/history?signer=wzRAXpRuYr5CHZmCAdK1Jh2widMU8GOwCNhONOHkV8k
/v1/entry/rekor-v1/3081692656
/v1/status

Entries carry log, log_index, time, kind, issuer, identity and ext (the certificate's Fulcio OID claims); Rekor v1 entries link to search.sigstore.dev. Answers carry the real total; limit is 500 by default, 2000 at most, and a truncated answer carries a cursor for the next page.