API Gateway

SkillSecurity

Passthrough proxy for direct access to third-party APIs using managed OAuth connections, provided by [Maton](https://maton.ai). The API gateway lets y

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the API Gateway skill

What this skill tells your AI

The instructions your AI receives, as published by aaaaqwq/agi-super-team in skills/api-gateway/SKILL.md and read by ahel’s review.

Passthrough proxy for direct access to third-party APIs using managed OAuth connections, provided by Maton. The API gateway lets you call native API endpoints directly.

Quick Start

# Native Slack API call
python <<'EOF'
import urllib.request, os, json
data = json.dumps({'channel': 'C0123456', 'text': 'Hello from gateway!'}).encode()
req = urllib.request.Request('https://gateway.maton.ai/slack/api/chat.postMessage', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Base URL

https://gateway.maton.ai/{app}/{native-api-path}

Replace {app} with the service name and {native-api-path} with the actual API endpoint path.

IMPORTANT: The URL path MUST start with the connection's app name (eg. /google-mail/...). This prefix tells the gateway which app connection to use. For example, the native Gmail API path starts with gmail/v1/, so full paths look like /google-mail/gmail/v1/users/me/messages.

Authentication

All requests require the Maton API key in the Authorization header:

Authorization: Bearer $MATON_API_KEY

The API gateway automatically injects the appropriate OAuth token for the target service.

Environment Variable: You can set your API key as the MATON_API_KEY environment variable:

export MATON_API_KEY="YOUR_API_KEY"

Getting Your API Key

  1. Sign in or create an account at maton.ai
  2. Go to maton.ai/settings
  3. Click the copy button on the right side of API Key section to copy it

Connection Management

Connection management uses a separate base URL: https://ctrl.maton.ai

List Connections

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections?app=slack&status=ACTIVE')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Query Parameters (optional):

  • app - Filter by service name (e.g., slack, hubspot, salesforce)
  • status - Filter by connection status (ACTIVE, PENDING, FAILED)

Response:

{
  "connections": [
    {
      "connection_id": "21fd90f9-5935-43cd-b6c8-bde9d915ca80",
      "status": "ACTIVE",
      "creation_time": "2025-12-08T07:20:53.488460Z",
      "last_updated_time": "2026-01-31T20:03:32.593153Z",
      "url": "https://connect.maton.ai/?session_token=5e9...",
      "app": "slack",
      "method": "OAUTH2",
      "metadata": {}
    }
  ]
}

Create Connection

python <<'EOF'
import urllib.request, os, json
data = json.dumps({'app': 'slack'}).encode()
req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Request Body:

  • app (required) - Service name (e.g., slack, notion)
  • method (optional) - Connection method (API_KEY, BASIC, OAUTH1, OAUTH2, MCP)

Get Connection

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Response:

{
  "connection": {
    "connection_id": "21fd90f9-5935-43cd-b6c8-bde9d915ca80",
    "status": "ACTIVE",
    "creation_time": "2025-12-08T07:20:53.488460Z",
    "last_updated_time": "2026-01-31T20:03:32.593153Z",
    "url": "https://connect.maton.ai/?session_token=5e9...",
    "app": "slack",
    "metadata": {}
  }
}

Open the returned URL in a browser to complete OAuth.

Delete Connection

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Specifying Connection

If you have multiple connections for the same app, you can specify which connection to use by adding the Maton-Connection header with the connection ID:

python <<'EOF'
import urllib.request, os, json
data = json.dumps({'channel': 'C0123456', 'text': 'Hello!'}).encode()
req = urllib.request.Request('https://gateway.maton.ai/slack/api/chat.postMessage', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
req.add_header('Maton-Connection', '21fd90f9-5935-43cd-b6c8-bde9d915ca80')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

If omitted, the gateway uses the default (oldest) active connection for that app.

Supported Services

ServiceApp NameBase URL Proxied
ActiveCampaignactive-campaign{account}.api-us1.com
Acuity Schedulingacuity-schedulingacuityscheduling.com
Airtableairtableapi.airtable.com
Apolloapolloapi.apollo.io
Asanaasanaapp.asana.com
Attioattioapi.attio.com
Basecampbasecamp3.basecampapi.com
Baserowbaserowapi.baserow.io
beehiivbeehiivapi.beehiiv.com
Boxboxapi.box.com
Brevobrevoapi.brevo.com
Calendlycalendlyapi.calendly.com
Cal.comcal-comapi.cal.com
CallRailcallrailapi.callrail.com
Chargebeechargebee{subdomain}.chargebee.com
ClickFunnelsclickfunnels{subdomain}.myclickfunnels.com
ClickSendclicksendrest.clicksend.com
ClickUpclickupapi.clickup.com
Clockifyclockifyapi.clockify.me
Codacodacoda.io
Confluenceconfluenceapi.atlassian.com
CompanyCamcompanycamapi.companycam.com
Cognito Formscognito-formswww.cognitoforms.com
Constant Contactconstant-contactapi.cc.email
Dropboxdropboxapi.dropboxapi.com
Dropbox Businessdropbox-businessapi.dropboxapi.com
ElevenLabselevenlabsapi.elevenlabs.io
Eventbriteeventbritewww.eventbriteapi.com
Exaexaapi.exa.ai
Fathomfathomapi.fathom.ai
Firebasefirebasefirebase.googleapis.com
Firefliesfirefliesapi.fireflies.ai
GetResponsegetresponseapi.getresponse.com
GrafanagrafanaUser's Grafana instance
GitHubgithubapi.github.com
Gumroadgumroadapi.gumroad.com
Granola MCPgranolamcp.granola.ai
Google Adsgoogle-adsgoogleads.googleapis.com
Google BigQuerygoogle-bigquerybigquery.googleapis.com
Google Analytics Admingoogle-analytics-adminanalyticsadmin.googleapis.com
Google Analytics Datagoogle-analytics-dataanalyticsdata.googleapis.com
Google Calendargoogle-calendarwww.googleapis.com
Google Classroomgoogle-classroomclassroom.googleapis.com
Google Contactsgoogle-contactspeople.googleapis.com
Google Docsgoogle-docsdocs.googleapis.com
Google Drivegoogle-drivewww.googleapis.com
Google Formsgoogle-formsforms.googleapis.com
Gmailgoogle-mailgmail.googleapis.com
Google Merchantgoogle-merchantmerchantapi.googleapis.com
Google Meetgoogle-meetmeet.googleapis.com
Google Playgoogle-playandroidpublisher.googleapis.com
Google Search Consolegoogle-search-consolewww.googleapis.com
Google Sheetsgoogle-sheetssheets.googleapis.com
Google Slidesgoogle-slidesslides.googleapis.com
Google Tasksgoogle-taskstasks.googleapis.com
Google Workspace Admingoogle-workspace-adminadmin.googleapis.com
HubSpothubspotapi.hubapi.com
Instantlyinstantlyapi.instantly.ai
Jirajiraapi.atlassian.com
Jobberjobberapi.getjobber.com
JotFormjotformapi.jotform.com
Kagglekaggleapi.kaggle.com
Keapkeapapi.infusionsoft.com
KibanakibanaUser's Kibana instance
Kitkitapi.kit.com
Klaviyoklaviyoa.klaviyo.com
Lemlistlemlistapi.lemlist.com
Linearlinearapi.linear.app
LinkedInlinkedinapi.linkedin.com
Mailchimpmailchimp{dc}.api.mailchimp.com
MailerLitemailerliteconnect.mailerlite.com
Mailgunmailgunapi.mailgun.net
ManyChatmanychatapi.manychat.com
Manusmanusapi.manus.ai
Microsoft Excelmicrosoft-excelgraph.microsoft.com
Microsoft Teamsmicrosoft-teamsgraph.microsoft.com
Microsoft To Domicrosoft-to-dograph.microsoft.com
Monday.commondayapi.monday.com
Motionmotionapi.usemotion.com
Netlifynetlifyapi.netlify.com
Notionnotionapi.notion.com
Notion MCPnotionmcp.notion.com
OneDriveone-drivegraph.microsoft.com
Outlookoutlookgraph.microsoft.com
PDF.copdf-coapi.pdf.co
Pipedrivepipedriveapi.pipedrive.com
Podiopodioapi.podio.com
PostHogposthog{subdomain}.posthog.com
QuickBooksquickbooksquickbooks.api.intuit.com
Quoquoapi.openphone.com
Reductoreductoplatform.reducto.ai
Salesforcesalesforce{instance}.salesforce.com
Sentrysentry{subdomain}.sentry.io
SharePointsharepointgraph.microsoft.com
SignNowsignnowapi.signnow.com
Slackslackslack.com
Snapchatsnapchatadsapi.snapchat.com
Squaresquareupconnect.squareup.com
Squarespacesquarespaceapi.squarespace.com
Sunsama MCPsunsamaMCP server
Stripestripeapi.stripe.com
Systeme.iosystemeapi.systeme.io
Tallytallyapi.tally.so
Tavilytavilyapi.tavily.com
Telegramtelegramapi.telegram.org
TickTickticktickapi.ticktick.com
Todoisttodoistapi.todoist.com
Toggl Tracktoggl-trackapi.track.toggl.com
Trellotrelloapi.trello.com
Twiliotwilioapi.twilio.com
Typeformtypeformapi.typeform.com
Unbounceunbounceapi.unbounce.com
Vimeovimeoapi.vimeo.com
WhatsApp Businesswhatsapp-businessgraph.facebook.com
WooCommercewoocommerce{store-url}/wp-json/wc/v3
WordPress.comwordpresspublic-api.wordpress.com
Xeroxeroapi.xero.com
YouTubeyoutubewww.googleapis.com
Zoho Biginzoho-biginwww.zohoapis.com
Zoho Bookingszoho-bookingswww.zohoapis.com
Zoho Bookszoho-bookswww.zohoapis.com
Zoho Calendarzoho-calendarcalendar.zoho.com
Zoho CRMzoho-crmwww.zohoapis.com
Zoho Inventoryzoho-inventorywww.zohoapis.com
Zoho Mailzoho-mailmail.zoho.com
Zoho Peoplezoho-peoplepeople.zoho.com
Zoho Projectszoho-projectsprojectsapi.zoho.com
Zoho Recruitzoho-recruitrecruit.zoho.com

See references/ for detailed routing guides per provider:

  • ActiveCampaign - Contacts, deals, tags, lists, automations, campaigns
  • Acuity Scheduling - Appointments, calendars, clients, availability
  • Airtable - Records, bases, tables
  • Apollo - People search, enrichment, contacts
  • Asana - Tasks, projects, workspaces, webhooks
  • Attio - People, companies, records, tasks
  • Basecamp - Projects, to-dos, messages, schedules, documents
  • Baserow - Database rows, fields, tables, batch operations
  • beehiiv - Publications, subscriptions, posts, custom fields
  • Box - Files, folders, collaborations, shared links
  • Brevo - Contacts, email campaigns, transactional emails, templates
  • Calendly - Event types, scheduled events, availability, webhooks
  • Cal.com - Event types, bookings, schedules, availability slots, webhooks
  • CallRail - Calls, trackers, companies, tags, analytics
  • Chargebee - Subscriptions, customers, invoices
  • ClickFunnels - Contacts, products, orders, courses, webhooks
  • ClickSend - SMS, MMS, voice messages, contacts, lists
  • ClickUp - Tasks, lists, folders, spaces, webhooks
  • Clockify - Time tracking, projects, clients, tasks, workspaces
  • Coda - Docs, pages, tables, rows, formulas, controls
  • Confluence - Pages, spaces, blogposts, comments, attachments
  • CompanyCam - Projects, photos, users, tags, groups, documents
  • Cognito Forms - Forms, entries, documents, files
  • Constant Contact - Contacts, email campaigns, lists, segments
  • Dropbox - Files, folders, search, metadata, revisions, tags
  • Dropbox Business - Team members, groups, team folders, devices, audit logs
  • ElevenLabs - Text-to-speech, voice cloning, sound effects, audio processing
  • Eventbrite - Events, venues, tickets, orders, attendees
  • Exa - Neural web search, content extraction, similar pages, AI answers, research tasks
  • Fathom - Meeting recordings, transcripts, summaries, webhooks
  • Firebase - Projects, web apps, Android apps, iOS apps, configurations
  • Fireflies - Meeting transcripts, summaries, AskFred AI, channels
  • GetResponse - Campaigns, contacts, newsletters, autoresponders, tags, segments
  • Grafana - Dashboards, data sources, folders, annotations, alerts, teams
  • GitHub - Repositories, issues, pull requests, commits
  • Gumroad - Products, sales, subscribers, licenses, webhooks
  • Granola MCP - MCP-based interface for meeting notes, transcripts, queries
  • Google Ads - Campaigns, ad groups, GAQL queries
  • Google Analytics Admin - Reports, dimensions, metrics
  • Google Analytics Data - Reports, dimensions, metrics
  • Google BigQuery - Datasets, tables, jobs, SQL queries
  • Google Calendar - Events, calendars, free/busy
  • Google Classroom - Courses, coursework, students, teachers, announcements
  • Google Contacts - Contacts, contact groups, people search
  • Google Docs - Document creation, batch updates
  • Google Drive - Files, folders, permissions
  • Google Forms - Forms, questions, responses
  • Gmail - Messages, threads, labels
  • Google Meet - Spaces, conference records, participants
  • Google Merchant - Products, inventories, promotions, reports
  • Google Play - In-app products, subscriptions, reviews
  • Google Search Console - Search analytics, sitemaps
  • Google Sheets - Values, ranges, formatting
  • Google Slides - Presentations, slides, formatting
  • Google Tasks - Task lists, tasks, subtasks
  • Google Workspace Admin - Users, groups, org units, domains, roles
  • HubSpot - Contacts, companies, deals
  • Instantly - Campaigns, leads, accounts, email outreach
  • Jira - Issues, projects, JQL queries
  • Jobber - Clients, jobs, invoices, quotes (GraphQL)
  • JotForm - Forms, submissions, webhooks
  • Kaggle - Datasets, models, competitions, kernels
  • Keap - Contacts, companies, tags, tasks, opportunities, campaigns
  • Kibana - Saved objects, dashboards, data views, spaces, alerts, fleet
  • Kit - Subscribers, tags, forms, sequences, broadcasts
  • Klaviyo - Profiles, lists, campaigns, flows, events
  • Lemlist - Campaigns, leads, activities, schedules, unsubscribes
  • Linear - Issues, projects, teams, cycles (GraphQL)
  • LinkedIn - Profile, posts, shares, media uploads
  • Mailchimp - Audiences, campaigns, templates, automations
  • MailerLite - Subscribers, groups, campaigns, automations, forms
  • Mailgun - Email sending, domains, routes, templates, mailing lists, suppressions
  • ManyChat - Subscribers, tags, flows, messaging
  • Manus - AI agent tasks, projects, files, webhooks
  • Microsoft Excel - Workbooks, worksheets, ranges, tables, charts
  • Microsoft Teams - Teams, channels, messages, members, chats
  • Microsoft To Do - Task lists, tasks, checklist items, linked resources
  • Monday.com - Boards, items, columns, groups (GraphQL)
  • Motion - Tasks, projects, workspaces, schedules
  • Netlify - Sites, deploys, builds, DNS, environment variables
  • Notion - Pages, databases, blocks
  • Notion MCP - MCP-based interface for pages, databases, comments, teams, users
  • OneDrive - Files, folders, drives, sharing
  • Outlook - Mail, calendar, contacts
  • PDF.co - PDF conversion, merge, split, edit, text extraction, barcodes
  • Pipedrive - Deals, persons, organizations, activities
  • Podio - Organizations, workspaces, apps, items, tasks, comments
  • PostHog - Product analytics, feature flags, session recordings, experiments, HogQL queries
  • QuickBooks - Customers, invoices, reports
  • Quo - Calls, messages, contacts, conversations, webhooks
  • Reducto - Document parsing, extraction, splitting, editing
  • Salesforce - SOQL, sObjects, CRUD
  • SignNow - Documents, templates, invites, e-signatures
  • SendGrid - Email sending, contacts, templates, suppressions, statistics
  • Sentry - Issues, events, projects, teams, releases
  • SharePoint - Sites, lists, document libraries, files, folders, versions
  • Slack - Messages, channels, users
  • Snapchat - Ad accounts, campaigns, ad squads, ads, creatives, audiences
  • Square - Payments, customers, orders, catalog, inventory, invoices
  • Squarespace - Products, inventory, orders, profiles, transactions
  • Sunsama MCP - MCP-based interface for tasks, calendar, backlog, objectives, time tracking
  • Stripe - Customers, subscriptions, payments
  • Systeme.io - Contacts, tags, courses, communities, webhooks
  • Tally - Forms, submissions, workspaces, webhooks
  • Tavily - AI web search, content extraction, crawling, research tasks
  • Telegram - Messages, chats, bots, updates, polls
  • TickTick - Tasks, projects, task lists
  • Todoist - Tasks, projects, sections, labels, comments
  • Toggl Track - Time entries, projects, clients, tags, workspaces
  • Trello - Boards, lists, cards, checklists
  • Twilio - SMS, voice calls, phone numbers, messaging
  • Typeform - Forms, responses, insights
  • Unbounce - Landing pages, leads, accounts, sub-accounts, domains
  • Vimeo - Videos, folders, albums, comments, likes
  • WhatsApp Business - Messages, templates, media
  • WooCommerce - Products, orders, customers, coupons
  • WordPress.com - Posts, pages, sites, users, settings
  • Xero - Contacts, invoices, reports
  • YouTube - Videos, playlists, channels, subscriptions
  • Zoho Bigin - Contacts, companies, pipelines, products
  • Zoho Bookings - Appointments, services, staff, workspaces
  • Zoho Books - Invoices, contacts, bills, expenses
  • Zoho Calendar - Calendars, events, attendees, reminders
  • Zoho CRM - Leads, contacts, accounts, deals, search
  • Zoho Inventory - Items, sales orders, invoices, purchase orders, bills
  • Zoho Mail - Messages, folders, labels, attachments
  • Zoho People - Employees, departments, designations, attendance, leave
  • Zoho Projects - Projects, tasks, milestones, tasklists, comments
  • Zoho Recruit - Candidates, job openings, interviews, applications

Examples

Slack - Post Message (Native API)

Shortened here. Read the whole file on GitHub.

Signals

GitHub stars
92
Forks
23
Last commit
Sep 2026
Advanced
Catalog kind
skill
Gateway key
api-gateway
Source
github.com/aaaaqwq/agi-super-team