Identity management
Enroll users and workloads, assign groups, and update access scope through API calls that integrate with your HR, ITSM, or internal portal.
Product · API & Automation
API & Automation
Use NetSeed as a programmable access layer for users, services, and workloads.
Control surface
Every access decision is a programmable object.
Manage identities, policies, services, and access workflows through a central control surface. What you configure in the UI is also available through the API — with no hidden state.
Policy management
Create, update, and version access policies programmatically. Apply changes fleet-wide without touching network configuration or restarting tunnels.
Service publishing
Register internal services and define who can reach them through the API. Service boundaries are expressed as policy objects, not firewall rules.
Automation workflows
The workflows that actually ship.
Automate onboarding, offboarding, service enrollment, environment setup, and temporary access workflows — the scenarios that otherwise live in Slack threads.
01
Joiner / mover / leaver
When a hire joins or changes role, your HR or ITSM system triggers access provisioning via the API — no manual ticket required. Offboarding revokes all sessions immediately.
02
Service publishing
Publish a new internal service by registering it with the API, defining the access policy, and assigning it to the relevant group. No firewall change. No DNS delegation.
03
Temporary access
Issue a time-bounded access grant for a contractor, vendor, or incident responder. The grant expires automatically; no cleanup step required.
04
CI and agent identity
Assign a scoped workload identity to a CI runner or AI agent at launch time. The identity expires with the job — no long-lived secrets in your pipeline configuration.
Example
A programmable access layer in practice.
The same operations available in the UI are available through the API — create, update, and revoke access in your own tooling.
# publish an internal service via the API$ curl -sX POST https://api.netseed.info/v1/services \ -H "Authorization: Bearer $NS_TOKEN" \ -d '{"name":"db-prod","policy":"eng-rw","node":"nsn-prod-01"}' > service registered · db-prod → nsn-prod-01 # issue a temporary access grant$ netseed access grant --user alice --service db-prod --ttl 2h> access granted · expires in 2h
Platform integration
Embed NetSeed into your internal platform.
Integrate NetSeed into internal portals, approval systems, and operational tooling. Access provisioning should happen in the system your team already uses.
Works where your team works
NetSeed's API surface is designed for integration, not for replacing your existing workflows. Plug access provisioning into your ITSM, developer portal, or approval system — the API handles the rest.
+ITSM and approval system integration
+Internal developer portal embedding
+Event webhooks for audit and alerting
+Terraform and IaC-native workflows
No new tool to adopt
The goal is that access provisioning disappears into the tools your team already uses. Engineers request access in your portal; the API handles enrollment, policy, and revocation.