seekrit-dev

seekrit-dev reference API

seekrit-dev reference API as documented publicly: 100 operations. Contract generated from the documentation by API Evangelist (2026-10-30); not the provider's own document.

GitHub OpenAPI

Operations 100

GET /.well-known/seekrit-export-signing-key The public half of the key that signs export archives (no auth). #
POST /connect/browser/start Start a browser session capture for the Connect page. #
POST /connect/oauth/start Start an OAuth flow for the Connect page. #
GET /health Liveness check (no auth). #
GET /oauth/callback OAuth callback endpoint. #
POST /sync/bindings Enable sync for one environment. #
POST /v1/browser/open Open a browser session for capture. #
POST /v1/cli-login Open a sign-in request. #
GET /v1/cli-login/{code} The request's details, for the approval screen. #
POST /v1/cli-login/{code}/approve Authorize the device; the registered hash becomes a usable credential (90 days). #
POST /v1/cli-login/{code}/deny Decline the request. #
POST /v1/cli-login/poll Ask whether the request was authorized. #
GET /v1/me The current user and their organizations. #
GET /v1/me/cli-sessions Devices authorized with seekrit login. #
DELETE /v1/me/cli-sessions/{sessionid} Revoke a CLI session — it stops authenticating on its next request. #
GET /v1/me/keys Your public key and passphrase-encrypted private key. #
PUT /v1/me/keys Upload your keys (one-time key setup). #
GET /v1/me/notifications Your email notification preferences (all types, defaults applied). #
PUT /v1/me/notifications Update notification preferences. #
GET /v1/me/passkeys Passkeys enrolled to unlock your keyring. #
POST /v1/me/passkeys Enroll a passkey. #
DELETE /v1/me/passkeys/{passkeyid} Stop a passkey unlocking your keyring. #
GET /v1/orgs List organizations you can access. #
POST /v1/orgs Create an organization (creator becomes owner). #
GET /v1/orgs/{orgid} Get one organization and your role. #
PATCH /v1/orgs/{orgid} Rename an organization: {name} (display name only — the slug is fixed). #
GET /v1/orgs/{orgid}/apps List applications. #
POST /v1/orgs/{orgid}/apps Create an application. #
DELETE /v1/orgs/{orgid}/apps/{appid} Delete an application. #
GET /v1/orgs/{orgid}/apps/{appid} Get an application and its environments. #
PATCH /v1/orgs/{orgid}/apps/{appid} Rename an application (display name only — the slug is fixed). #
GET /v1/orgs/{orgid}/apps/{appid}/branches Every branch in an application. #
GET /v1/orgs/{orgid}/apps/{appid}/envs List environments. #
POST /v1/orgs/{orgid}/apps/{appid}/envs Create an environment (body includes the wrapped DEK). #
GET /v1/orgs/{orgid}/change-requests List change requests, newest first. #
GET /v1/orgs/{orgid}/change-requests/{id} Get a change request and its reviews. #
POST /v1/orgs/{orgid}/change-requests/{id}/approve Approve a change request. #
POST /v1/orgs/{orgid}/change-requests/{id}/reject Reject a change request. #
POST /v1/orgs/{orgid}/change-requests/{id}/withdraw Take a proposal off the queue. #
GET /v1/orgs/{orgid}/envs/{envid} Get an environment. #
PATCH /v1/orgs/{orgid}/envs/{envid} Rename an environment: {name} (display name only — the slug is fixed, since composition and resolve match on it). #
GET /v1/orgs/{orgid}/envs/{envid}/branches List branches of an environment. #
POST /v1/orgs/{orgid}/envs/{envid}/branches Fork this environment: { slug, name?, ttlSeconds?, wrappedDek, recoveryWrappedDek?, grants? }. #
GET /v1/orgs/{orgid}/envs/{envid}/grantees The public keys of this environment's grant-holders, for wrapping a new key to them. #
GET /v1/orgs/{orgid}/envs/{envid}/groups List composed groups (slug, name, position). #
POST /v1/orgs/{orgid}/envs/{envid}/groups Compose a group { groupId, position? }. #
DELETE /v1/orgs/{orgid}/envs/{envid}/groups/{groupid} Remove a composed group. #
GET /v1/orgs/{orgid}/envs/{envid}/key Get the calling principal's own wrapped DEK. #
GET /v1/orgs/{orgid}/envs/{envid}/keys List all grants for the environment. #
POST /v1/orgs/{orgid}/envs/{envid}/keys Grant a wrapped DEK to a principal. #
DELETE /v1/orgs/{orgid}/envs/{envid}/keys/{grantid} Revoke a grant. #
DELETE /v1/orgs/{orgid}/envs/{envid}/protection Stop requiring approval for an environment. #
GET /v1/orgs/{orgid}/envs/{envid}/protection Get the environment's protection status and open change requests. #
PUT /v1/orgs/{orgid}/envs/{envid}/protection Protect an environment or update its protection settings. #
GET /v1/orgs/{orgid}/envs/{envid}/secrets List secrets (with ciphertext). #
DELETE /v1/orgs/{orgid}/envs/{envid}/secrets/{name} Delete a secret and its whole version history. #
PUT /v1/orgs/{orgid}/envs/{envid}/secrets/{name} Create or update a secret (appends a version). #
POST /v1/orgs/{orgid}/envs/{envid}/secrets/{name}/restore Roll back to an earlier version. #
GET /v1/orgs/{orgid}/envs/{envid}/secrets/{name}/versions The secret's history, newest first. #
GET /v1/orgs/{orgid}/groups List groups. #
POST /v1/orgs/{orgid}/groups Create a group. #
DELETE /v1/orgs/{orgid}/groups/{groupid} Delete a group. #
GET /v1/orgs/{orgid}/groups/{groupid} Get a group and its environments. #
PATCH /v1/orgs/{orgid}/groups/{groupid} Rename a group: {name} (display name only — the slug is fixed). #
GET /v1/orgs/{orgid}/groups/{groupid}/envs List a group's environments. #
POST /v1/orgs/{orgid}/groups/{groupid}/envs Create a group environment (body includes the wrapped DEK). #
GET /v1/orgs/{orgid}/invites List pending invitations. #
POST /v1/orgs/{orgid}/invites Invite someone by email. #
DELETE /v1/orgs/{orgid}/invites/{inviteid} Revoke a pending invitation. #
GET /v1/orgs/{orgid}/kms/keys List keys the caller can see. #
POST /v1/orgs/{orgid}/kms/keys Create a key for application-layer encryption or signing. #
DELETE /v1/orgs/{orgid}/kms/keys/{keyid} Soft-delete a key, hiding it from every listing and read path; row and versions retained for audit. #
GET /v1/orgs/{orgid}/kms/keys/{keyid} Retrieve key metadata and every version with public keys for sign keys. #
POST /v1/orgs/{orgid}/kms/keys/{keyid}/disable Disable a key, blocking all use and new grants or rotations; grant rows retained. #
DELETE /v1/orgs/{orgid}/kms/keys/{keyid}/grants Revoke a principal entirely from all versions. #
GET /v1/orgs/{orgid}/kms/keys/{keyid}/grants Retrieve grantees, each with the versions they hold. #
POST /v1/orgs/{orgid}/kms/keys/{keyid}/grants Grant the current version to a principal. #
GET /v1/orgs/{orgid}/kms/keys/{keyid}/key Retrieve the caller's wrapped key material across granted versions. #
GET /v1/orgs/{orgid}/kms/keys/{keyid}/public Retrieve published public keys of a sign key, per version, grant-free within the org. #
POST /v1/orgs/{orgid}/kms/keys/{keyid}/rotate Add a version and re-wrap for grantees. #
GET /v1/orgs/{orgid}/members List members (includes public keys, for granting). #
GET /v1/orgs/{orgid}/mfa-policy Get the org's second-factor policy: { required, configured }. #
PATCH /v1/orgs/{orgid}/mfa-policy Require (or stop requiring) MFA for all members. #
DELETE /v1/orgs/{orgid}/recovery Disable recovery and delete every recovery grant. #
GET /v1/orgs/{orgid}/recovery Retrieve recovery status: threshold, custodians, and environment coverage. #
POST /v1/orgs/{orgid}/recovery Enable customer-controlled M-of-N recovery with Shamir-split shares. #
GET /v1/orgs/{orgid}/recovery/env-keys Every DEK wrapped to the recovery key, for the target to reconstruct. #
POST /v1/orgs/{orgid}/recovery/grants Backfill recovery grants. #
GET /v1/orgs/{orgid}/recovery/requests List recovery ceremonies. #
POST /v1/orgs/{orgid}/recovery/requests Start a ceremony. #
GET /v1/orgs/{orgid}/recovery/requests/{id} A request plus its contributed (re-wrapped) shares. #
POST /v1/orgs/{orgid}/recovery/requests/{id}/cancel Cancel an open request. #
POST /v1/orgs/{orgid}/recovery/requests/{id}/complete Target restores access. #
POST /v1/orgs/{orgid}/recovery/requests/{id}/shares A custodian contributes. #
POST /v1/orgs/{orgid}/recovery/rotate Rotate to a fresh recovery key, custodian set, and env re-wraps. #
GET /v1/orgs/{orgid}/recovery/share The caller's own wrapped recovery share (custodian only). #
GET /v1/orgs/{orgid}/tokens List service tokens. #
GET /v1/resolve The full layered environment for the calling principal. #
POST /v1/signup Create an organization and a machine (M2M) client for it — the zero-human on-ramp for agents. #
GET /v2/deployments List deployments, with each deployment's UUID for use in langgraph-platform sync. #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/seekrit-dev/openapi/_ae-authored/seekrit-dev-reference-openapi-generated.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/seekrit-dev/json-schema/seekrit-dev-post-sync-bindings-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/seekrit-dev/json-schema/seekrit-dev-post-v1-orgs-orgid-envs-envid-branches-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/seekrit-dev/json-schema/seekrit-dev-post-v1-orgs-orgid-kms-keys-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/seekrit-dev/json-schema/seekrit-dev-post-v1-cli-login-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/seekrit-dev/json-schema/seekrit-dev-post-v1-cli-login-poll-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/seekrit-dev/json-schema/seekrit-dev-post-v1-cli-login-response-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/seekrit-dev:reference-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

seekrit-dev-reference-openapi-generated.yml Raw ↑ 
openapi: 3.1.0
info:
  title: seekrit-dev reference API
  version: '2026-10-30'
  description: 'GENERATED FROM DOCUMENTATION by API Evangelist on 2026-10-30: 100 operation(s) read from 3 public documentation page(s) (each
    operation names its page in x-source). This is not the provider''s published contract; seekrit-dev has published no machine-readable contract
    that the pipeline could find. Engine: anthropic.'
  x-evidence-tiers:
    code-example: 26
    documentation: 118
    pages-with-code: 27
    pages-read: 40
  x-generated-from: documentation
  x-provenance: generated
  x-authored-by: API Evangelist
  x-generated: '2026-10-30'
  x-generator: generate-contract-from-docs.py
  x-engine: anthropic
  x-sources:
  - https://seekrit.dev/docs/reference/api
  - https://seekrit.dev/docs/reference/api.md
  - https://seekrit.dev/docs/reference/cli.md
  x-docs-section: reference
servers:


# --- truncated at 32 KB (82 KB total) ---
# Full source: https://artifacts.apis.io/seekrit-dev/openapi/_ae-authored/seekrit-dev-reference-openapi-generated.yml