Export a Session Bundle
curl --request GET \
--url https://api.checkfu.com/v1/sessions/{id}/bundle \
--header 'Authorization: Bearer <token>' \
--header 'checkfu-version: <checkfu-version>'import requests
url = "https://api.checkfu.com/v1/sessions/{id}/bundle"
headers = {
"checkfu-version": "<checkfu-version>",
"Authorization": "Bearer <token>"
}
response = requests.get(url, headers=headers)
print(response.text)const options = {
method: 'GET',
headers: {'checkfu-version': '<checkfu-version>', Authorization: 'Bearer <token>'}
};
fetch('https://api.checkfu.com/v1/sessions/{id}/bundle', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.checkfu.com/v1/sessions/{id}/bundle",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"checkfu-version: <checkfu-version>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.checkfu.com/v1/sessions/{id}/bundle"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("checkfu-version", "<checkfu-version>")
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.checkfu.com/v1/sessions/{id}/bundle")
.header("checkfu-version", "<checkfu-version>")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.checkfu.com/v1/sessions/{id}/bundle")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["checkfu-version"] = '<checkfu-version>'
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"format": "checkfu.session-bundle",
"schema_version": 1,
"wire_version": "<string>",
"session_id": "<string>",
"workspace_id": "<string>",
"exported_at": "<string>",
"inspector_views": [
"session",
"events",
"unavailable",
"graph",
"recovery",
"learning"
],
"manifest": {
"statement": {
"format_id": "checkfu.session-bundle",
"schema_version": 1,
"authority": "server_bundle_projector",
"workspace_id": "<string>",
"session_id": "<string>",
"created_at": "<string>",
"high_water": {
"through_sequence": 4503599627370495,
"through_event_id": "<string>",
"event_log_digest": "<string>"
},
"capture_policy_digest": "<string>",
"census": [
{
"path": "session.json",
"byte_count": 536870912,
"row_count": 4503599627370495
}
],
"omitted_bodies": [
"<string>"
]
},
"signature": {
"algorithm": "ed25519",
"key_id": "<string>",
"statement_digest": "<string>",
"signature": "<string>"
}
},
"integrity": {
"statement": {
"format_id": "checkfu.session-bundle",
"schema_version": 1,
"authority": "server_bundle_projector",
"workspace_id": "<string>",
"session_id": "<string>",
"manifest_digest": "<string>",
"recorded_at": "<string>",
"sections": [
{
"path": "manifest.json",
"sha256": "<string>",
"byte_count": 536870912
}
]
},
"signature": {
"algorithm": "ed25519",
"key_id": "<string>",
"statement_digest": "<string>",
"signature": "<string>"
}
},
"sections": {
"session.json": {
"session_id": "<string>",
"workspace_id": "<string>",
"projection": "event_coverage",
"projector_key_id": "<string>",
"projector_public_key": "<string>"
},
"events.ndjson": [
{
"id": "<string>",
"seq": 1,
"schema_version": 1,
"created_at": "<string>",
"type": "user.message",
"payload": {
"content": "<string>",
"authored_by": "<string>",
"caused_by": {
"kind": "api",
"request_id": "<string>"
},
"attachments": [
"<string>"
],
"prompt_integrity": {
"analyzer_version": "unicode-17.0.0-uts39-r32-checkfu-1",
"disposition": "accepted_normalization",
"original_digest": "<string>",
"findings": [
{
"kind": "mixed_script_confusable",
"utf16_offset": 1,
"code_point": "<string>",
"replacement": "<string>",
"answer_id": "<string>",
"value_index": 1
}
]
},
"connected_runtime": "<string>",
"run_delivery": "next_run",
"host_context": {
"source": "<string>",
"data": {}
},
"surface_scope_id": "<string>"
},
"attested": true
}
],
"unavailable.ndjson": [
{
"seq": 1,
"content_class": "message",
"reason": "shredded",
"structural_replay": "complete",
"replay_fact": {
"version": 1,
"seq": 1,
"kind": "state_neutral"
},
"prompt_integrity": {
"analyzer_version": "unicode-17.0.0-uts39-r32-checkfu-1",
"disposition": "accepted_normalization"
}
}
],
"actors.ndjson": [
{
"session_id": "<string>",
"actor_id": "<string>",
"session_thread_id": "<string>",
"first_sequence": 4503599627370495,
"last_sequence": 4503599627370495,
"event_count": 4503599627370495
}
],
"work-units.ndjson": [
{
"session_id": "<string>",
"work_unit_id": "<string>",
"owner_actor_id": "<string>",
"first_sequence": 4503599627370495,
"last_sequence": 4503599627370495,
"event_count": 4503599627370495
}
],
"interactions.ndjson": "<array>",
"context-snapshots.ndjson": "<array>",
"artifacts/index.ndjson": "<array>",
"continuation-capsules/index.ndjson": "<array>"
}
}{
"error": {
"type": "validation.malformed",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#validation-malformed"
}
}{
"error": {
"type": "auth.invalid_key",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#auth-invalid-key"
}
}{
"error": {
"type": "auth.disabled_tenancy",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#auth-disabled-tenancy"
}
}{
"error": {
"type": "validation.not_found",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#validation-not-found"
}
}{
"error": {
"type": "budget.exceeded",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#budget-exceeded"
}
}{
"error": {
"type": "runtime.internal",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#runtime-internal"
}
}Export a Session Bundle
Exports one Session as a checkfu.session-bundle document, distinct from the event-tape checkfu.session-export. The body carries a signed section census, integrity statements, session.json, event-or-unavailable coverage through the frozen high-water, and actor/work indexes rebuilt from canonical attribution. Both statements are signed by this deployment’s pinned server_bundle_projector Ed25519 key when a valid pin is configured (stable bundle_projector_* key id; hold its public key to verify bundles offline); an unconfigured or broken pin signs with an identified per-export ephemeral key instead (ephemeral_* key id — tamper-evidence only, no deployment provenance). Interaction, snapshot, and capsule index sections stay empty until persisted coordinates exist for them. A large history is still assembled before the signature; page the events endpoint for incremental sync.
Checkfu support posture: alpha; hosted. Required evidence journey: session-turn. Deployment-specific readiness and the latest proven release are available from GET /v1/support/capabilities.
GET
/
v1
/
sessions
/
{id}
/
bundle
Export a Session Bundle
curl --request GET \
--url https://api.checkfu.com/v1/sessions/{id}/bundle \
--header 'Authorization: Bearer <token>' \
--header 'checkfu-version: <checkfu-version>'import requests
url = "https://api.checkfu.com/v1/sessions/{id}/bundle"
headers = {
"checkfu-version": "<checkfu-version>",
"Authorization": "Bearer <token>"
}
response = requests.get(url, headers=headers)
print(response.text)const options = {
method: 'GET',
headers: {'checkfu-version': '<checkfu-version>', Authorization: 'Bearer <token>'}
};
fetch('https://api.checkfu.com/v1/sessions/{id}/bundle', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.checkfu.com/v1/sessions/{id}/bundle",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"checkfu-version: <checkfu-version>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.checkfu.com/v1/sessions/{id}/bundle"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("checkfu-version", "<checkfu-version>")
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.checkfu.com/v1/sessions/{id}/bundle")
.header("checkfu-version", "<checkfu-version>")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.checkfu.com/v1/sessions/{id}/bundle")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["checkfu-version"] = '<checkfu-version>'
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"format": "checkfu.session-bundle",
"schema_version": 1,
"wire_version": "<string>",
"session_id": "<string>",
"workspace_id": "<string>",
"exported_at": "<string>",
"inspector_views": [
"session",
"events",
"unavailable",
"graph",
"recovery",
"learning"
],
"manifest": {
"statement": {
"format_id": "checkfu.session-bundle",
"schema_version": 1,
"authority": "server_bundle_projector",
"workspace_id": "<string>",
"session_id": "<string>",
"created_at": "<string>",
"high_water": {
"through_sequence": 4503599627370495,
"through_event_id": "<string>",
"event_log_digest": "<string>"
},
"capture_policy_digest": "<string>",
"census": [
{
"path": "session.json",
"byte_count": 536870912,
"row_count": 4503599627370495
}
],
"omitted_bodies": [
"<string>"
]
},
"signature": {
"algorithm": "ed25519",
"key_id": "<string>",
"statement_digest": "<string>",
"signature": "<string>"
}
},
"integrity": {
"statement": {
"format_id": "checkfu.session-bundle",
"schema_version": 1,
"authority": "server_bundle_projector",
"workspace_id": "<string>",
"session_id": "<string>",
"manifest_digest": "<string>",
"recorded_at": "<string>",
"sections": [
{
"path": "manifest.json",
"sha256": "<string>",
"byte_count": 536870912
}
]
},
"signature": {
"algorithm": "ed25519",
"key_id": "<string>",
"statement_digest": "<string>",
"signature": "<string>"
}
},
"sections": {
"session.json": {
"session_id": "<string>",
"workspace_id": "<string>",
"projection": "event_coverage",
"projector_key_id": "<string>",
"projector_public_key": "<string>"
},
"events.ndjson": [
{
"id": "<string>",
"seq": 1,
"schema_version": 1,
"created_at": "<string>",
"type": "user.message",
"payload": {
"content": "<string>",
"authored_by": "<string>",
"caused_by": {
"kind": "api",
"request_id": "<string>"
},
"attachments": [
"<string>"
],
"prompt_integrity": {
"analyzer_version": "unicode-17.0.0-uts39-r32-checkfu-1",
"disposition": "accepted_normalization",
"original_digest": "<string>",
"findings": [
{
"kind": "mixed_script_confusable",
"utf16_offset": 1,
"code_point": "<string>",
"replacement": "<string>",
"answer_id": "<string>",
"value_index": 1
}
]
},
"connected_runtime": "<string>",
"run_delivery": "next_run",
"host_context": {
"source": "<string>",
"data": {}
},
"surface_scope_id": "<string>"
},
"attested": true
}
],
"unavailable.ndjson": [
{
"seq": 1,
"content_class": "message",
"reason": "shredded",
"structural_replay": "complete",
"replay_fact": {
"version": 1,
"seq": 1,
"kind": "state_neutral"
},
"prompt_integrity": {
"analyzer_version": "unicode-17.0.0-uts39-r32-checkfu-1",
"disposition": "accepted_normalization"
}
}
],
"actors.ndjson": [
{
"session_id": "<string>",
"actor_id": "<string>",
"session_thread_id": "<string>",
"first_sequence": 4503599627370495,
"last_sequence": 4503599627370495,
"event_count": 4503599627370495
}
],
"work-units.ndjson": [
{
"session_id": "<string>",
"work_unit_id": "<string>",
"owner_actor_id": "<string>",
"first_sequence": 4503599627370495,
"last_sequence": 4503599627370495,
"event_count": 4503599627370495
}
],
"interactions.ndjson": "<array>",
"context-snapshots.ndjson": "<array>",
"artifacts/index.ndjson": "<array>",
"continuation-capsules/index.ndjson": "<array>"
}
}{
"error": {
"type": "validation.malformed",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#validation-malformed"
}
}{
"error": {
"type": "auth.invalid_key",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#auth-invalid-key"
}
}{
"error": {
"type": "auth.disabled_tenancy",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#auth-disabled-tenancy"
}
}{
"error": {
"type": "validation.not_found",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#validation-not-found"
}
}{
"error": {
"type": "budget.exceeded",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#budget-exceeded"
}
}{
"error": {
"type": "runtime.internal",
"message": "<string>",
"more": "https://docs.checkfu.com/reference/errors#runtime-internal"
}
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Headers
Available options:
2026-08-29 Path Parameters
Pattern:
^sess_[0-9a-f]{32}$Response
Success
Available options:
checkfu.session-bundle Available options:
1 Pattern:
^sess_[0-9a-f]{32}$Pattern:
^wrkspc_[0-9a-f]{32}$Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes