Endpoint-health timeline — probe outcomes and status-check transitions
/stores/{store_id}/health/historyAuthorizationBearer token (JWT) · headerrequiredJWT issued by the external IdP via the OAuth 2.0 authorization-code flow (Kinde in
production; a simulator in test). The client obtains it and sends it as a Bearer token on
every authenticated call. Sarvex's services verify it — issuer, audience, signature
(IdP JWKS), expiry — and read identity and tenant from its claims. Sarvex does not issue
or revoke these tokens. merchant_id/store_id are read from the verified claims (and the
merchant→store mapping), never from the URL. The operator scope is required for
/operator/*. Operators acting on a specific merchant pass the X-Operate-As header,
which is recorded in the audit log.
store_idstringrequiredA store the caller's merchant owns. Authorized server-side against the principal; not a free-form tenant selector.
fromstring<date-time>tostring<date-time>History entries, newest first. Range (to - from) is capped at 30 days; defaults to the last 24 hours if from/to are omitted.
datahealth_history_entry[]requiredShow propertiesHide properties
health_history_entrykindstringprobe_completedthreshold_breachedrecoveredprobe_typestringprofile_reachablesignature_roundtripnegotiation_handshakecatalog_lookupcheck_typestringoutcomestringpassfaildegradedtimeoutseveritystringhealthydegradedcriticaldetailstringatstring<date-time>pagepagerequiredShow propertiesHide properties
cursorstring | nullrequiredhas_morebooleanrequiredResource not found within the caller's tenant.
errorobjectrequiredShow propertiesHide properties
codestringrequiredmessagestringrequireddetailsobject | nullRequest body failed validation.
errorobjectrequiredShow propertiesHide properties
codestringrequiredmessagestringrequireddetailsobject | null