api-gateway

You can securely call third-party APIs by using a managed OAuth gateway that centralizes token handling. By sending requests with a single API key, the proxy injects valid user tokens to authenticate native endpoints for services like Slack and Google Workspace.

The best way to integrate multiple services is through a passthrough API proxy that uses a single base URL with service prefixes. This approach lets you send Slack messages or query Notion data without handling individual service authentication flows.

To send a Slack message, POST a JSON payload to the gateway's Slack endpoint and include your API key in the Authorization header. The proxy validates the request and injects the necessary OAuth token to execute the native chat.postMessage call.

Yes, you need a valid MATON_API_KEY placed in the Authorization header to authenticate proxied requests. Users must explicitly authorize each third-party service, while the gateway manages the actual OAuth tokens for GitHub and Notion.

Yes, you can target a specific user connection by including the Maton-Connection header in your request. This allows you to select an exact authorized connection for services with multiple accounts, ensuring the API call uses the correct user context.

The API gateway uses passthrough error handling and rate limiting for native API calls. This means errors and rate limits from the third-party service are passed directly back to your application, preserving the original response codes and headers.