> For the complete documentation index, see [llms.txt](https://docs.sealsecurity.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sealsecurity.io/reference/public-api.md).

# Public API

The Seal Public API is a RESTful service that accepts and returns JSON. It exposes a small set of endpoints for programmatic access to your tenant's vulnerable packages, Sealing Rules, and remediation actions.

## Base URL

```
https://external.sealsecurity.io/authenticated/api/v1
```

## Authentication

Every Public API call carries a Bearer token in the standard `Authorization` header:

```
Authorization: Bearer <token>
```

The token is your Seal Artifact Server token, the same one the Seal CLI uses to authenticate. Generate one in the Seal UI; see [Generating and revoking tokens](/getting-started/tokens/generating-tokens.md).

### Making your first request

```bash
curl --location 'https://external.sealsecurity.io/authenticated/api/v1/packages/vulnerable?limit=2' \
  --header 'Authorization: Bearer $TOKEN'
```

Replace `$TOKEN` with your access token.

## Endpoints

* [List vulnerable packages](/reference/public-api/list-vulnerable-packages.md): `GET /packages/vulnerable`.
* [List Sealing Rules](/reference/public-api/list-sealing-rules.md): `GET /sealing-rules`.
* [Generate fix](/reference/public-api/generate-fix.md): `POST /generate-fix`.
* [Patch validation prompt](/reference/public-api/patch-validation-prompt.md): `GET /patches/validation-prompt`.

## Related

* [Generating and revoking tokens](/getting-started/tokens/generating-tokens.md)
* [Token types](/getting-started/tokens/token-types.md)