sealgate-ai Observability API

openapi: 3.2.0
info:
  title: Sealgate Ai Observability API
  x-refined-note:
  - x-source-of-truth differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Observability across 3 of this provider''s published API definitions: sealgate-ai-openapi.json, sealgate-ai-dashboard-openapi.json, sealgate-ai-management-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://dashboard.sealgate.ai
  description: SealGate management API - release
- url: https://demo-dashboard.sealgate.ai
  description: SealGate management API - demo
tags:
- name: Observability
  description: Trifecta event summaries and the audit log.
paths:
  /api/v1/observability/trifecta:
    get:
      tags:
      - Observability
      summary: Trifecta event summary
      description: Summary counts of lethal-trifecta events within a rolling window. Requires the admin role.
      operationId: getTrifectaSummary
      parameters:
      - name: time_period
        in: query
        required: false
        description: 'Rolling window: 24h, 7d, or 30d'
        schema:
          type: string
          enum:
          - 24h
          - 7d
          - 30d
          default: 24h
      responses:
        '200':
          description: Trifecta summary
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TrifectaSummary'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
      security:
      - bearerAuth: []
    servers:
    - url: https://dashboard.sealgate.ai
      description: SealGate management API - release
    - url: https://demo-dashboard.sealgate.ai
      description: SealGate management API - demo
  /api/v1/observability/trifecta/events:
    get:
      tags:
      - Observability
      summary: List trifecta events
      description: List lethal-trifecta events with pagination and date filters. Requires the admin role.
      operationId: listTrifectaEvents
      parameters:
      - $ref: '#/components/parameters/PageParam'
      - name: per_page
        in: query
        required: false
        description: Results per page
        schema:
          type: integer
          minimum: 1
          maximum: 100
          default: 20
      - name: created_after
        in: query
        required: false
        description: Filter events after this date-time
        schema:
          type: string
          format: date-time
      - name: created_before
        in: query
        required: false
        description: Filter events before this date-time
        schema:
          type: string
          format: date-time
      responses:
        '200':
          description: A page of trifecta events
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TrifectaEventPage'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '422':
          $ref: '#/components/responses/ValidationError'
      security:
      - bearerAuth: []
    servers:
    - url: https://dashboard.sealgate.ai
      description: SealGate management API - release
    - url: https://demo-dashboard.sealgate.ai
      description: SealGate management API - demo
  /api/v1/observability/audit-log:
    get:
      tags:
      - Observability
      summary: List audit log entries
      description: List audit-log entries with pagination and filters. Requires the admin role.
      operationId: listAuditLog
      parameters:
      - $ref: '#/components/parameters/PageParam'
      - name: per_page
        in: query
        required: false
        description: Results per page
        schema:
          type: integer
          minimum: 1
          maximum: 100
          default: 20
      - name: actor
        in: query
        required: false
        description: Filter by actor user ID
        schema:
          type: string
      - name: action
        in: query
        required: false
        description: Filter by action type
        schema:
          type: string
      - name: resource_type
        in: query
        required: false
        description: Filter by resource type
        schema:
          type: string
      responses:
        '200':
          description: A page of audit-log entries
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuditEntryPage'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '422':
          $ref: '#/components/responses/ValidationError'
      security:
      - bearerAuth: []
    servers:
    - url: https://dashboard.sealgate.ai
      description: SealGate management API - release
    - url: https://demo-dashboard.sealgate.ai
      description: SealGate management API - demo
components:
  schemas:
    AuditEntry:
      type: object
      properties:
        id:
          type: integer
        timestamp:
          type: string
          format: date-time
        user_id:
          type: string
        user_email:
          type:
          - string
          - 'null'
        domain:
          type: string
        action:
          type: string
          description: Action performed (e.g. approve_user, create_role, update_policy)
        resource_type:
          type: string
          description: Type of resource affected (e.g. user, role, policy, server)
        resource_id:
          type: string
        old_value:
          type:
          - object
          - 'null'
          additionalProperties: true
        new_value:
          type:
          - object
          - 'null'
          additionalProperties: true
        request_status:
          type: string
          description: HTTP status of the request (e.g. success, error)
      required:
      - id
      - timestamp
      - user_id
      - domain
      - action
      - resource_type
      - resource_id
      - request_status
    TrifectaEvent:
      type: object
      properties:
        id:
          type: integer
        session_id:
          type: string
        tool_name:
          type: string
        user_id:
          type: string
        user_email:
          type:
          - string
          - 'null'
        trifecta_flags:
          type: array
          items:
            type: string
        status:
          type: string
          description: 'Event status: blocked, pending, or approved'
        timestamp:
          type: string
          format: date-time
      required:
      - id
      - session_id
      - tool_name
      - user_id
      - status
      - timestamp
    AuditEntryPage:
      type: object
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/AuditEntry'
        total:
          type: integer
        page:
          type: integer
        per_page:
          type: integer
        total_pages:
          type: integer
      required:
      - items
      - total
      - page
      - per_page
      - total_pages
    TrifectaSummary:
      type: object
      properties:
        total_events:
          type: integer
          description: Total trifecta events in the time period
        blocked:
          type: integer
        pending:
          type: integer
        approved:
          type: integer
        time_period:
          type: string
          description: Time period for the summary (e.g. '24h', '7d', '30d')
      required:
      - total_events
      - blocked
      - pending
      - approved
      - time_period
    ErrorDetail:
      type: object
      description: Application error body carried under `detail`.
      properties:
        error:
          type: string
          description: Human-readable error message
        code:
          type: string
          description: Machine-readable error code
        details:
          type:
          - object
          - 'null'
          description: Additional error details
          additionalProperties: true
      required:
      - error
      - code
    ValidationError:
      type: object
      description: A single request-validation error.
      properties:
        loc:
          type: array
          items:
            type:
            - string
            - integer
          description: Location of the invalid field
        msg:
          type: string
          description: Validation error message
        type:
          type: string
          description: Validation error type
      required:
      - loc
      - msg
      - type
    HTTPValidationError:
      type: object
      description: Body returned for a 422 request-validation failure.
      properties:
        detail:
          type: array
          items:
            $ref: '#/components/schemas/ValidationError'
    ErrorResponse:
      type: object
      description: Standard error envelope returned on 4xx and 5xx responses.
      properties:
        detail:
          $ref: '#/components/schemas/ErrorDetail'
      required:
      - detail
    TrifectaEventPage:
      type: object
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/TrifectaEvent'
        total:
          type: integer
        page:
          type: integer
        per_page:
          type: integer
        total_pages:
          type: integer
      required:
      - items
      - total
      - page
      - per_page
      - total_pages
    AuditEntry_2:
      properties:
        id:
          type: integer
          title: Id
          description: Audit log entry ID
        timestamp:
          type: string
          format: date-time
          title: Timestamp
          description: When the action occurred
        user_id:
          type: string
          title: User Id
          description: User who performed the action
        user_email:
          anyOf:
          - type: string
          - type: 'null'
          title: User Email
          description: Email of the user who performed the action
        source:
          anyOf:
          - type: string
          - type: 'null'
          title: Source
          description: 'Surface that performed the action when it was not a person at the dashboard: admin-chat (a confirmation card the admin applied) or admin-chat-code (a script the code runner executed)'
        domain:
          type: string
          title: Domain
          description: Domain in which the action occurred
        action:
          type: string
          title: Action
          description: Action performed (e.g. approve_user, create_role, update_policy)
        resource_type:
          type: string
          title: Resource Type
          description: Type of resource affected (e.g. user, role, policy, server)
        resource_id:
          type: string
          title: Resource Id
          description: Identifier of the affected resource
        old_value:
          anyOf:
          - additionalProperties: true
            type: object
          - type: 'null'
          title: Old Value
          description: Previous state of the resource before the change
        new_value:
          anyOf:
          - additionalProperties: true
            type: object
          - type: 'null'
          title: New Value
          description: New state of the resource after the change
        request_status:
          type: string
          title: Request Status
          description: HTTP status of the request (e.g. success, error)
      type: object
      required:
      - id
      - timestamp
      - user_id
      - domain
      - action
      - resource_type
      - resource_id
      - request_status
      title: AuditEntry
    PaginatedResponse_TrifectaEvent_:
      properties:
        items:
          items:
            $ref: '#/components/schemas/TrifectaEvent_2'
          type: array
          title: Items
          description: Page of results
        total:
          type: integer
          title: Total
          description: Total number of items across all pages
        page:
          type: integer
          title: Page
          description: Current page number (1-indexed)
        per_page:
          type: integer
          title: Per Page
          description: Number of items per page
        total_pages:
          type: integer
          title: Total Pages
          description: Total number of pages
      type: object
      required:
      - items
      - total
      - page
      - per_page
      - total_pages
      title: PaginatedResponse[TrifectaEvent]
    TrifectaEvent_2:
      properties:
        id:
          type: integer
          title: Id
          description: Event ID
        session_id:
          type: string
          title: Session Id
          description: Associated session identifier
        tool_name:
          type: string
          title: Tool Name
          description: Name of the tool that triggered the event
        user_id:
          type: string
          title: User Id
          description: User who initiated the action
        user_email:
          anyOf:
          - type: string
          - type: 'null'
          title: User Email
          description: Email of the user who initiated the action
        trifecta_flags:
          items:
            type: string
          type: array
          title: Trifecta Flags
          description: Trifecta policy flags that were triggered
        status:
          type: string
          title: Status
          description: 'Event status: blocked, pending, or approved'
        timestamp:
          type: string
          format: date-time
          title: Timestamp
          description: When the event occurred
      type: object
      required:
      - id
      - session_id
      - tool_name
      - user_id
      - status
      - timestamp
      title: TrifectaEvent
    TrifectaSummary_2:
      properties:
        total_events:
          type: integer
          title: Total Events
          description: Total number of trifecta events in the time period
        blocked:
          type: integer
          title: Blocked
          description: Number of blocked events
        pending:
          type: integer
          title: Pending
          description: Number of events pending approval
        approved:
          type: integer
          title: Approved
          description: Number of approved events
        time_period:
          type: string
          title: Time Period
          description: Time period for the summary (e.g. '24h', '7d', '30d')
      type: object
      required:
      - total_events
      - blocked
      - pending
      - approved
      - time_period
      title: TrifectaSummary
    ValidationError_2:
      properties:
        loc:
          items:
            anyOf:
            - type: string
            - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
      - loc
      - msg
      - type
      title: ValidationError
    HTTPValidationError_2:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError_2'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    PaginatedResponse_AuditEntry_:
      properties:
        items:
          items:
            $ref: '#/components/schemas/AuditEntry_2'
          type: array
          title: Items
          description: Page of results
        total:
          type: integer
          title: Total
          description: Total number of items across all pages
        page:
          type: integer
          title: Page
          description: Current page number (1-indexed)
        per_page:
          type: integer
          title: Per Page
          description: Number of items per page
        total_pages:
          type: integer
          title: Total Pages
          description: Total number of pages
      type: object
      required:
      - items
      - total
      - page
      - per_page
      - total_pages
      title: PaginatedResponse[AuditEntry]
  responses:
    Forbidden:
      description: The caller's role is not permitted to perform this action
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    ValidationError:
      description: Request validation failed
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/HTTPValidationError'
    Unauthorized:
      description: Missing or invalid API key
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    BadRequest:
      description: The request was invalid
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
  parameters:
    PageParam:
      name: page
      in: query
      required: false
      description: Page number (1-indexed)
      schema:
        type: integer
        minimum: 1
        default: 1
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: SealGate API key
      description: 'SealGate API key sent as `Authorization: Bearer <your-sealgate-api-key>`.'
    HTTPBearer:
      type: http
      scheme: bearer
    ClientBearer:
      type: http
      description: Opaque ewc_ client installation credential
      scheme: bearer
    ServiceToken:
      type: http
      description: 'A SealGate service token: `sgt_acct_...` (account token) or `sgt_org_...` (org token). Mint an account token in the dashboard.'
      scheme: bearer
    MCPGatewayOAuth:
      type: oauth2
      description: OAuth 2.1 authorization-code flow (PKCE required) against the SealGate MCP gateway's authorization server. Request only the scopes an agent needs; unrequested scopes are not granted.
      flows:
        authorizationCode:
          authorizationUrl: /oauth/authorize
          tokenUrl: /oauth/token
          refreshUrl: /oauth/token
          scopes:
            mcp: Connect to the MCP gateway and call the tools exposed by your enabled servers. Every call is still evaluated by the policy engine.
            offline_access: Issue a refresh token so the client can renew access without a new browser sign-in.
externalDocs:
  description: SealGate product documentation
  url: https://docs.sealgate.ai
x-refined-from:
- sealgate-ai-openapi.json
- sealgate-ai-dashboard-openapi.json
- sealgate-ai-management-openapi.json