DEVELOPER PLATFORM

Build CloudSealed into everything you ship.

One platform. Five surfaces. The same forensic engine that powers your 4D Diagnostic — now reachable from your code, your agents, and your pipelines.

Read the Quickstart Browse the API

Read-only by defaultOAuth 2.0 + PATOpenAPI 3.1

Five surfaces. One source of truth.

Every byte of your 4D forensic data — security findings, cost leaks, architectural drift, compliance posture — flows through the same authoritative store. Pick the surface that matches how you build.

REST API

api.cloudsealed.com

JSON over HTTPS. Pull findings, list resources, trigger reanalysis, and power custom dashboards.

Read the reference

MCP Server

mcp.cloudsealed.com

Drop CloudSealed into Claude, Cursor, or any MCP-compatible agent. Audit data becomes a tool call away.

Install the server

AI Skill

skill bundle

A packaged Skill for Claude that knows how to read findings, draft remediations, and reason over your 4D posture.

Add the Skill

SDKs

TypeScript · Python · Go · C#

First-class clients with types, retries, and pagination baked in. Six lines from install to first finding.

Pick a language

Webhooks

HMAC-signed events

Get pushed the moment a critical finding lands. Wire CloudSealed into PagerDuty, Slack, Jira, or your own service.

Subscribe to events

Six lines to your first finding

Same data model, three languages, one promise: no glue code between you and the forensic engine.

import { CloudSealed } from "@cloudsealed/sdk";

const cs = new CloudSealed({ token: process.env.CS_TOKEN });

const { data } = await cs.findings.list({ severity: "critical" });
console.log(data[0]);

Built for engineers who don't have time to glue tools together

One identity, one set of scopes

OAuth 2.0 with granular scopes — the same token works for REST, MCP, SDKs, and webhooks. Issue, rotate, and revoke from one console.

Read-only by default

Every credential ships read-only. Write operations require an explicit scope upgrade with an audit trail. No accidental writes from a leaked PAT.

Versioned, OpenAPI-described

Every endpoint is documented in OpenAPI 3.1. SDKs are generated from the same spec. No drift between docs and runtime.

Designed for agents, too

Tool schemas, deterministic error codes, and bounded responses — so an LLM can call CloudSealed without hallucinating shape or scope.

Start building

Spin up a sandbox tenant, mint a token, and pull your first finding in under five minutes.

Open the Quickstart View the API reference