Sealio DocsDevelopers
Build on Sealio: the REST API, API keys and signed webhooks.
The Sealio API lets your own systems create clients, send document requests, follow their progress and download what clients upload. It uses the same rules as the Sealio app: a key can only do what its creator's role and its scopes allow, and everything it does is in your audit log.
In place
- REST API at
https://api.sealio.ca/v1(Sealio Canada) andhttps://api.sealio.in/v1(Sealio India). See Authentication, Conventions and Endpoints. - API keys with scopes, optional IP allowlists and expiry dates, rotation with an overlap, in Settings → API keys.
- Webhooks: signed HTTPS requests when clients, cases, requests and documents change, with retries, a delivery log, resend and replay. See Webhooks.
- OpenAPI 3.1 description at
https://api.sealio.ca/v1/openapi.json, for code generators and API tools, and an API reference generated from it: every endpoint's parameters, request and response schemas, and samples in cURL, JavaScript, Python, Go, Java, C# and Rust. Every webhook event's payload is listed too.
What your plan includes
The API and webhooks are part of every plan. The free trial has everything, with two webhook endpoints, so you can test a full integration.
| Starter | Pro and Enterprise | |
|---|---|---|
| Webhook endpoints | 3 | 25 (Enterprise: by agreement) |
| Events | client.created, request.sent, request.completed, document.uploaded | Every event |
| Scopes that work | clients:*, templates:read, requests:*, documents:read, webhooks:manage | Every scope |
| Requests per minute, per firm | 60 | 300 (Enterprise: by agreement) |
A key can hold scopes its firm's plan doesn't cover; those calls return 403 with a line saying which scope needs Pro. Subscribing to an event outside the plan, or adding an endpoint over the limit, returns 402.
Planned
- Test mode with separate keys and isolated data.
- An official TypeScript SDK.
- A Sealio app in Zapier's directory (triggers for every event, actions for clients, requests and reviews). Zapier's generic webhook and API-request steps work with the API today.