fal-api-reference
Provides a comprehensive API reference for fal.ai, covering client setup, method usage, and webhook configuration for seamless integration.
Install this skill
Security score
The fal-api-reference skill was audited on May 22, 2026 and we found 33 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 296 | curl -X POST "https://queue.fal.run/fal-ai/flux/dev" \ |
Curl to non-GitHub URL
| 312 | curl "https://queue.fal.run/fal-ai/flux/dev/requests/abc123-def456/status" \ |
Curl to non-GitHub URL
| 327 | curl "https://queue.fal.run/fal-ai/flux/dev/requests/abc123-def456" \ |
Curl to non-GitHub URL
| 343 | curl -X POST "https://queue.fal.run/fal-ai/flux/dev" \ |
Curl to non-GitHub URL
| 368 | curl -X POST "https://fal.run/fal-ai/fast-sdxl" \ |
Fetch to external URL
| 178 | const response = await fetch("https://example.com/image.jpg"); |
Webhook reference - potential data exfiltration
| 5 | PROACTIVELY activate for: (1) @fal-ai/client JavaScript setup, (2) fal_client Python setup, (3) fal.subscribe/run/stream methods, (4) Queue management (submit/status/result), (5) Webhook configuration |
Webhook reference - potential data exfiltration
| 6 | Provides: Client configuration, method signatures, queue workflow, webhook payloads, common parameters. |
Webhook reference - potential data exfiltration
| 36 | - Implementing webhook callbacks |
Webhook reference - potential data exfiltration
| 147 | webhookUrl: "https://your-server.com/webhook" // Optional |
Webhook reference - potential data exfiltration
| 338 | ### Webhooks |
Webhook reference - potential data exfiltration
| 340 | Submit with webhook URL to receive results via POST: |
Webhook reference - potential data exfiltration
| 348 | "webhook_url": "https://your-server.com/webhook" |
Webhook reference - potential data exfiltration
| 352 | Webhook payload: |
Webhook reference - potential data exfiltration
| 493 | - Use webhooks for high-volume applications |
Access to .env file
| 65 | credentials: process.env.FAL_KEY, |
External URL reference
| 67 | proxyUrl: "https://your-server.com/api/fal-proxy" |
External URL reference
| 132 | image_url: "https://example.com/base.jpg" |
External URL reference
| 147 | webhookUrl: "https://your-server.com/webhook" // Optional |
External URL reference
| 178 | const response = await fetch("https://example.com/image.jpg"); |
External URL reference
| 279 | | Queue Submit | `https://queue.fal.run/{model_id}` | |
External URL reference
| 280 | | Queue Status | `https://queue.fal.run/{model_id}/requests/{request_id}/status` | |
External URL reference
| 281 | | Queue Result | `https://queue.fal.run/{model_id}/requests/{request_id}` | |
External URL reference
| 282 | | Queue Cancel | `https://queue.fal.run/{model_id}/requests/{request_id}/cancel` | |
External URL reference
| 283 | | Direct Run | `https://fal.run/{model_id}` | |
External URL reference
| 296 | curl -X POST "https://queue.fal.run/fal-ai/flux/dev" \ |
External URL reference
| 312 | curl "https://queue.fal.run/fal-ai/flux/dev/requests/abc123-def456/status" \ |
External URL reference
| 327 | curl "https://queue.fal.run/fal-ai/flux/dev/requests/abc123-def456" \ |
External URL reference
| 332 | # "images": [{"url": "https://fal.media/...", "width": 1024, "height": 576}], |
External URL reference
| 343 | curl -X POST "https://queue.fal.run/fal-ai/flux/dev" \ |
External URL reference
| 348 | "webhook_url": "https://your-server.com/webhook" |
External URL reference
| 358 | "images": [{"url": "https://fal.media/..."}] |
External URL reference
| 368 | curl -X POST "https://fal.run/fal-ai/fast-sdxl" \ |