GET /api/updates/pull/{artifact}
Pull one allowlisted artifact — subscription-gated.
Body is the canonical JSON whose sha256 is published in the manifest, so the client verifies integrity.
| Method | GET |
| Path | /api/updates/pull/{artifact} |
| Feature area | Updates |
| Tag | Other |
| Auth | machine key — Authorization: Bearer $ZEQ_KEY |
| Tier | authenticated (machine-control) |
Parameters
Path parameters
| Name | Type | Required | Description |
|---|---|---|---|
artifact | string | yes | — |
No query or header parameters are published for this operation.
Request body
This operation takes no request body.
Responses
| Status | Meaning |
|---|---|
200 | OK |
401 | Missing or invalid credentials |
404 | Not found |
401 body
| Field | Type | Required | Description |
|---|---|---|---|
ok | boolean — one of false | yes | — |
error | string | no | Human-readable message. |
code | string | no | Stable machine-readable code, e.g. ADMIN_REQUIRED, INVALID_ZID, ZID_NOT_LINKED. |
404 body
| Field | Type | Required | Description |
|---|---|---|---|
ok | boolean — one of false | yes | — |
error | string | no | Human-readable message. |
code | string | no | Stable machine-readable code, e.g. ADMIN_REQUIRED, INVALID_ZID, ZID_NOT_LINKED. |
Call it
curl -sS -X GET https://zeq.me/api/updates/pull/YOUR_ARTIFACT \
-H "Authorization: Bearer $ZEQ_KEY"
Needs a machine key. Mint one:
curl -sS -X POST https://zeq.me/api/demo-key/mint, then spin up your machine.
Generated from the live OpenAPI description (https://zeq.me/openapi.json, spec version 1.287.0) by scripts/generate-reference.mjs. Do not edit — this file is rewritten on every run.