Public API

The Seal Public API base URL, authentication, and the endpoint catalog.

The Seal Public API is a RESTful service that accepts and returns JSON. It exposes a small set of endpoints for programmatic access to your tenant's vulnerable packages, Sealing Rules, and remediation actions.

Base URL

https://external.sealsecurity.io/authenticated/api/v1

Authentication

Every Public API call carries a Bearer token in the standard Authorization header:

Authorization: Bearer <token>

The token is your Seal Artifact Server token, the same one the Seal CLI uses to authenticate. Generate one in the Seal UI; see Generating and revoking tokens.

Making your first request

curl --location 'https://external.sealsecurity.io/authenticated/api/v1/packages/vulnerable?limit=2' \
  --header 'Authorization: Bearer $TOKEN'

Replace $TOKEN with your access token.

Endpoints

• List vulnerable packages: GET /packages/vulnerable.

• List Sealing Rules: GET /sealing-rules.

• Generate fix: POST /generate-fix.

• Patch validation prompt: GET /patches/validation-prompt.

Related

• Generating and revoking tokens

• Token types

• MCP server: the AI-facing equivalent, for tool calls from an LLM-driven client.