# supportTrailUnseals

query · in the family [Support trail](/reference/support-trail/)

## What it does

Every opening of your staff’s sealed activity trail — who opened it, which door, which user, which window, the ticket or the reason.

THE TRAIL LEDGER: every opening of the caller’s group’s sealed staff-activity trails — who opened it, which door (merchant · support), which user, which window, the ticket or the reason, how many rows — newest first, optionally windowed by ISO instants. OWNER-ONLY (the A19_TRAIL area). The read model expires with the trail (90 days); every opening is also a permanent log event.

## What happens

Reads only — changes nothing.

## Who may call it

Capability area: **Support trail** — Opening a user’s sealed activity trail and the ledger of every opening.

- Owner
- An API key whose scope allows `api:supportTrailUnseals`

## Arguments

| Name | Type | Required | Notes |
| --- | --- | --- | --- |
| `from` | [String](/types/#scalars) | no | No further notes. |
| `to` | [String](/types/#scalars) | no | No further notes. |

## Returns

[SupportTrailUnseal](/types/SupportTrailUnseal/) `[SupportTrailUnseal!]!` — One opening of a sealed staff-activity trail: the ledger row every door writes.

## Example request

```graphql
query ExampleSupportTrailUnseals($from: String) {
  supportTrailUnseals(from: $from) {
    id
    at
    door
    actor
    subjectUserId
    from
    to
    reason
    ticketRef
    rowsReturned
  }
}
```

Variables:

```json
{
  "from": "<from>"
}
```

## Example response

```json
{
  "data": {
    "supportTrailUnseals": [
      {
        "id": "01900000-0000-7000-8000-37386ae00000",
        "at": "<at>",
        "door": "<door>",
        "actor": "<actor>",
        "subjectUserId": "01900000-0000-7000-8000-522730d10000",
        "from": "<from>",
        "to": "<to>",
        "reason": "Correcting a miscount.",
        "ticketRef": "<ticket ref>",
        "rowsReturned": 1
      }
    ]
  },
  "extensions": {
    "at": {
      "callId": "01EXAMPLE-CALL-ID",
      "version": {
        "requested": null,
        "serviced": {
          "name": "genesis",
          "number": 0
        }
      }
    }
  }
}
```

## Errors this call can answer

- `VALIDATION/INVALID` — Something in the request is not valid. ([VALIDATION](/errors/VALIDATION/))
- `AUTHN/REQUIRED` — Sign in to do this. ([AUTHN](/errors/AUTHN/))
- `AUTHZ/FORBIDDEN` — Your role does not allow this action. ([AUTHZ](/errors/AUTHZ/))
- `RATE_LIMIT/THROTTLED` — Too many requests in a short time. ([RATE_LIMIT](/errors/RATE_LIMIT/))