DiscordSign up
SKILLS.SH

api-gateway

Unified API gateway for 100+ services with managed OAuth and native endpoint passthrough. Supports 100+ integrations including Google Workspace, Microsoft 365, Slack, Notion, HubSpot, Salesforce, Stripe, and more with automatic OAuth token injection Routes requests directly to native API endpoints via https://gateway.maton.ai/{app}/{native-api-path} , eliminating the need to learn custom abstractions Manages OAuth connections through a separate control API with list, create, get, and delete operations; supports multiple connections per service with explicit connection selection Requires MATON_API_KEY environment variable for authentication; each third-party service requires explicit user authorization through Maton's OAuth flow with scoped access control

INSTALLATION
npx skills add https://github.com/maton-ai/api-gateway-skill --skill api-gateway
Run in your project or agent environment. Adjust flags if your CLI version differs.

SKILL.md

API Gateway

Managed API routing for third-party services, provided by Maton. Use this only for a user-requested app, account, and task.

Quick Start

CLI:

maton slack channel list --types public_channel --limit 10
maton api '/slack/api/conversations.list?types=public_channel&limit=10'

Python:

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/slack/api/conversations.list?types=public_channel&#x26;limit=10')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Routing

Use https://api.maton.ai/ with the app-prefixed routes documented in the examples below or in the matching reference file.

Usage protocol:

  • Only invoke after the user specifies the exact app, account, and task.
  • Always start with read-only (GET) calls to verify the target account, resource identifiers, and current state.
  • All non-GET requests are denied unless the user explicitly approves each one. Before any POST, PUT, PATCH, or DELETE call, present the user with: the exact connection ID, the full endpoint path, the request body, and the expected outcome — then wait for approval.
  • If the user's request implies a non-GET operation, first show them what you intend to call and ask for confirmation. Do not infer approval from the original request.

Read-only route examples:

https://api.maton.ai/slack/api/conversations.list?types=public_channel&#x26;limit=10

https://api.maton.ai/google-mail/gmail/v1/users/me/messages

The first path segment is the app identifier listed in Supported Services. For Gmail, use /google-mail/gmail/v1/users/me/messages.

Installation

NPM:

npm install -g @maton-ai/cli

Homebrew:

brew install maton-ai/cli/maton

Authentication

IMPORTANT — Credential Safety:

  • Treat MATON_API_KEY as a secret. Never log it, echo it, paste it into prompts, or expose it in shared files, command output, or tool results.
  • Connection creation requires explicit user approval. Before creating any connection, ask the user to confirm the specific service and confirm they intend to authorize access. Never create connections on the agent's own initiative.
  • Least-privilege scopes: When a service offers scope selection during OAuth, select only the scopes the current task requires. Do not accept broader scopes for convenience.
  • Remove connections immediately after the task is complete if they are no longer needed (maton connection delete {id}).
  • If the key may have been exposed (logs, screenshots, shared terminals), rotate it immediately at maton.ai/settings.
  • Never share the key across users, workflows, or environments that do not require it.

CLI:

maton login                          # Opens browser for API key

maton login --interactive            # Skip browser, paste API key directly

maton whoami                         # Show current auth state

Manual:

  • Sign in or create an account at maton.ai
  • Click the copy button on the right side of API Key section to copy it
  • Set your API key as MATON_API_KEY:
export MATON_API_KEY="YOUR_API_KEY"

Connection Management

Connection management uses a separate base URL: https://api.maton.ai

List Connections

CLI:

maton connection list slack --status ACTIVE
maton api -X GET /connections -f app=slack -f status=ACTIVE

Python:

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/connections?app=slack&#x26;status=ACTIVE')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Query Parameters (optional):

  • app - Filter by service name (e.g., slack, hubspot, salesforce)
  • status - Filter by connection status (ACTIVE, PENDING, FAILED)

Response:

{

  "connections": [

    {

      "connection_id": "{connection_id}",

      "status": "ACTIVE",

      "creation_time": "2025-12-08T07:20:53.488460Z",

      "last_updated_time": "2026-01-31T20:03:32.593153Z",

      "url": "https://connect.maton.ai/?session_token=5e9...",

      "app": "slack",

      "method": "OAUTH2",

      "metadata": {}

    }

  ]

}

Create Connection

CLI:

maton connection create slack
maton api /connections -f app=slack

Python:

python <<'EOF'

import urllib.request, os, json

data = json.dumps({'app': 'slack'}).encode()

req = urllib.request.Request('https://api.maton.ai/connections', data=data, method='POST')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

req.add_header('Content-Type', 'application/json')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Request Body:

  • app (required) - Service name (e.g., slack, notion)
  • method (optional) - Connection method (API_KEY, BASIC, OAUTH1, OAUTH2, MCP)

Get Connection

CLI:

maton connection view {connection_id}
maton api /connections/{connection_id}

Python:

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/connections/{connection_id}')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Response:

{

  "connection": {

    "connection_id": "{connection_id}",

    "status": "ACTIVE",

    "creation_time": "2025-12-08T07:20:53.488460Z",

    "last_updated_time": "2026-01-31T20:03:32.593153Z",

    "url": "https://connect.maton.ai/?session_token=5e9...",

    "app": "slack",

    "metadata": {}

  }

}

Open the returned URL in a browser to complete service authorization.

Delete Connection

CLI:

maton connection delete {connection_id}
maton api -X DELETE /connections/{connection_id}

Python:

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/connections/{connection_id}', method='DELETE')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Specifying Connection

If you have multiple connections for the same app, specify which connection to use:

CLI:

maton slack channel list --types public_channel --limit 10 --connection {connection_id}
maton api '/slack/api/conversations.list?types=public_channel&#x26;limit=10' --connection {connection_id}

Python:

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/slack/api/conversations.list?types=public_channel&#x26;limit=10')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

req.add_header('Maton-Connection', '{connection_id}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

If you have multiple connections, always specify the connection to ensure requests go to the intended account.

Security &#x26; Permissions

  • Access is scoped to the specific third-party service connected through each Maton connection and the scopes the user authorized.
  • Use least privilege. Connect only the services needed for the current task. Prefer read-only scopes and revoke unused connections promptly.
  • Default to read/list calls. Retrieve or list resources first to verify identifiers, account context, and current state before proposing any change.
  • All operations that modify data require explicit user approval. Before executing any POST, PUT, PATCH, or DELETE call, confirm the target service, resource, payload, and intended effect with the user. This includes sending messages, creating records, modifying content, deleting resources, and triggering workflows.
  • High-impact operations require extra caution. Actions such as bulk deletions, publishing content, sending emails/messages to external recipients, modifying billing or financial data, or changing permissions must be clearly described with specific resource identifiers and confirmed before execution.
  • Always specify the connection. Use the --connection flag (CLI) or Maton-Connection header to ensure requests go to the intended account, especially when the user has multiple connections for the same service.

Supported Services

Service

App Name

Service API Host

ActiveCampaign

active-campaign

{account}.api-us1.com

Acuity Scheduling

acuity-scheduling

acuityscheduling.com

Airtable

airtable

api.airtable.com

Apify

apify

api.apify.com

Apollo

apollo

api.apollo.io

Asana

asana

app.asana.com

Attio

attio

api.attio.com

Basecamp

basecamp

3.basecampapi.com

Baserow

baserow

api.baserow.io

beehiiv

beehiiv

api.beehiiv.com

Box

box

api.box.com

Brevo

brevo

api.brevo.com

Brave Search

brave-search

api.search.brave.com

Buffer

buffer

api.buffer.com

Calendly

calendly

api.calendly.com

Cal.com

cal-com

api.cal.com

CallRail

callrail

api.callrail.com

Chargebee

chargebee

{subdomain}.chargebee.com

ClickFunnels

clickfunnels

{subdomain}.myclickfunnels.com

ClickSend

clicksend

rest.clicksend.com

ClickUp

clickup

api.clickup.com

Clio

clio

app.clio.com

Clockify

clockify

api.clockify.me

Coda

coda

coda.io

Confluence

confluence

api.atlassian.com

CompanyCam

companycam

api.companycam.com

Cognito Forms

cognito-forms

www.cognitoforms.com

Constant Contact

constant-contact

api.cc.email

Dropbox

dropbox

api.dropboxapi.com

Dropbox Business

dropbox-business

api.dropboxapi.com

ElevenLabs

elevenlabs

api.elevenlabs.io

Eventbrite

eventbrite

www.eventbriteapi.com

Exa

exa

api.exa.ai

Facebook Page

facebook-page

graph.facebook.com

fal.ai

fal-ai

queue.fal.run

Fathom

fathom

api.fathom.ai

Firecrawl

firecrawl

api.firecrawl.dev

Firebase

firebase

firebase.googleapis.com

Fireflies

fireflies

api.fireflies.ai

Front

front

api2.frontapp.com

GetResponse

getresponse

api.getresponse.com

Grafana

grafana

User's Grafana instance

GitHub

github

api.github.com

Gumroad

gumroad

api.gumroad.com

Granola MCP

granola

mcp.granola.ai

Google Ads

google-ads

googleads.googleapis.com

Google BigQuery

google-bigquery

bigquery.googleapis.com

Google Analytics Admin

google-analytics-admin

analyticsadmin.googleapis.com

Google Analytics Data

google-analytics-data

analyticsdata.googleapis.com

Google Apps Script

google-apps-script

script.googleapis.com

Google Calendar

google-calendar

www.googleapis.com

Google Classroom

google-classroom

classroom.googleapis.com

Google Contacts

google-contacts

people.googleapis.com

Google Docs

google-docs

docs.googleapis.com

Google Drive

google-drive

www.googleapis.com

Google Forms

google-forms

forms.googleapis.com

Gmail

google-mail

gmail.googleapis.com

Google Merchant

google-merchant

merchantapi.googleapis.com

Google Meet

google-meet

meet.googleapis.com

Google Play

google-play

androidpublisher.googleapis.com

Google Search Console

google-search-console

www.googleapis.com

Google Sheets

google-sheets

sheets.googleapis.com

Google Slides

google-slides

slides.googleapis.com

Google Tag Manager

google-tag-manager

tagmanager.googleapis.com

Google Tasks

google-tasks

tasks.googleapis.com

Google Workspace Admin

google-workspace-admin

admin.googleapis.com

GoHighLevel (PIT)

highlevel-pit

services.leadconnectorhq.com

HubSpot

hubspot

api.hubapi.com

Instantly

instantly

api.instantly.ai

Jira

jira

api.atlassian.com

Jobber

jobber

api.getjobber.com

JotForm

jotform

api.jotform.com

Kaggle

kaggle

api.kaggle.com

Keap

keap

api.infusionsoft.com

Kibana

kibana

User's Kibana instance

Kit

kit

api.kit.com

Klaviyo

klaviyo

a.klaviyo.com

Lemlist

lemlist

api.lemlist.com

Linear

linear

api.linear.app

LinkedIn

linkedin

api.linkedin.com

LinkedIn Community Management

linkedin-community-management

api.linkedin.com

Mailchimp

mailchimp

{dc}.api.mailchimp.com

MailerLite

mailerlite

connect.mailerlite.com

Mailgun

mailgun

api.mailgun.net

Make

make

{zone}.make.com

ManyChat

manychat

api.manychat.com

Manus

manus

api.manus.ai

Memelord

memelord

www.memelord.com

Microsoft Excel

microsoft-excel

graph.microsoft.com

Microsoft Teams

microsoft-teams

graph.microsoft.com

Microsoft To Do

microsoft-to-do

graph.microsoft.com

Monday.com

monday

api.monday.com

Motion

motion

api.usemotion.com

Netlify

netlify

api.netlify.com

Notion

notion

api.notion.com

Notion MCP

notion

mcp.notion.com

OneNote

one-note

graph.microsoft.com

OneDrive

one-drive

graph.microsoft.com

Outlook

outlook

graph.microsoft.com

PDF.co

pdf-co

api.pdf.co

Pipedrive

pipedrive

api.pipedrive.com

Podio

podio

api.podio.com

PostHog

posthog

{subdomain}.posthog.com

QuickBooks

quickbooks

quickbooks.api.intuit.com

Quo

quo

api.openphone.com

Reducto

reducto

platform.reducto.ai

Resend

resend

api.resend.com

Salesforce

salesforce

{instance}.salesforce.com

SendGrid

sendgrid

api.sendgrid.com

Sentry

sentry

{subdomain}.sentry.io

SharePoint

sharepoint

graph.microsoft.com

SignNow

signnow

api.signnow.com

Slack

slack

slack.com

Snapchat

snapchat

adsapi.snapchat.com

Square

squareup

connect.squareup.com

Squarespace

squarespace

api.squarespace.com

Stripe

stripe

api.stripe.com

Sunsama MCP

sunsama

MCP server

Supabase

supabase

{project_ref}.supabase.co

Systeme.io

systeme

api.systeme.io

Tally

tally

api.tally.so

Tavily

tavily

api.tavily.com

Telegram

telegram

api.telegram.org

TickTick

ticktick

api.ticktick.com

Todoist

todoist

api.todoist.com

Toggl Track

toggl-track

api.track.toggl.com

Trello

trello

api.trello.com

Twilio

twilio

api.twilio.com

Twenty CRM

twenty

api.twenty.com

Typeform

typeform

api.typeform.com

Unbounce

unbounce

api.unbounce.com

Vercel

vercel

api.vercel.com

Vimeo

vimeo

api.vimeo.com

WATI

wati

{tenant}.wati.io

WhatsApp Business

whatsapp-business

graph.facebook.com

WooCommerce

woocommerce

{store-url}/wp-json/wc/v3

WordPress.com

wordpress

public-api.wordpress.com

Wrike

wrike

www.wrike.com

Xero

xero

api.xero.com

YouTube

youtube

www.googleapis.com

YouTube Analytics

youtube-analytics

youtubeanalytics.googleapis.com

YouTube Reporting

youtube-reporting

youtubereporting.googleapis.com

Zoom

zoom

api.zoom.us

Zoom Admin

zoom-admin

api.zoom.us

Zoho Bigin

zoho-bigin

www.zohoapis.com

Zoho Bookings

zoho-bookings

www.zohoapis.com

Zoho Books

zoho-books

www.zohoapis.com

Zoho Calendar

zoho-calendar

calendar.zoho.com

Zoho CRM

zoho-crm

www.zohoapis.com

Zoho Inventory

zoho-inventory

www.zohoapis.com

Zoho Mail

zoho-mail

mail.zoho.com

Zoho People

zoho-people

people.zoho.com

Zoho Projects

zoho-projects

projectsapi.zoho.com

Zoho Recruit

zoho-recruit

recruit.zoho.com

See references/ for detailed routing guides per provider:

  • ActiveCampaign - Contacts, deals, tags, lists, automations, campaigns
  • Apify - Actors, runs, datasets, key-value stores, request queues, schedules
  • Apollo - People search, enrichment, contacts
  • Asana - Tasks, projects, workspaces, webhooks
  • Attio - People, companies, records, tasks
  • Basecamp - Projects, to-dos, messages, schedules, documents
  • Baserow - Database rows, fields, tables, batch operations
  • beehiiv - Publications, subscriptions, posts, custom fields
  • Box - Files, folders, collaborations, shared links
  • Brevo - Contacts, email campaigns, transactional emails, templates
  • Brave Search - Web search, image search, news search, video search
  • Buffer - Social media posts, channels, organizations, scheduling
  • Calendly - Event types, scheduled events, availability, webhooks
  • Cal.com - Event types, bookings, schedules, availability slots, webhooks
  • CallRail - Calls, trackers, companies, tags, analytics
  • Chargebee - Subscriptions, customers, invoices
  • ClickFunnels - Contacts, products, orders, courses, webhooks
  • ClickSend - SMS, MMS, voice messages, contacts, lists
  • ClickUp - Tasks, lists, folders, spaces, webhooks
  • Clio - Matters, contacts, activities, tasks, calendar entries, documents
  • Clockify - Time tracking, projects, clients, tasks, workspaces
  • Coda - Docs, pages, tables, rows, formulas, controls
  • Confluence - Pages, spaces, blogposts, comments, attachments
  • CompanyCam - Projects, photos, users, tags, groups, documents
  • Constant Contact - Contacts, email campaigns, lists, tags, custom fields, segments, bulk activities, reporting
  • Dropbox - Files, folders, search, metadata, revisions, tags
  • ElevenLabs - Text-to-speech, voice cloning, sound effects, audio processing
  • Eventbrite - Events, venues, tickets, orders, attendees
  • Exa - Neural web search, content extraction, similar pages, AI answers, research tasks
  • fal.ai - AI model inference (image generation, video, audio, upscaling)
  • Facebook Page - Pages, posts, comments, insights, photos, videos, product catalogs
  • Fathom - Meeting recordings, transcripts, summaries, webhooks
  • Firecrawl - Web scraping, crawling, site mapping, web search
  • Firebase - Projects, web apps, Android apps, iOS apps, configurations
  • Fireflies - Meeting transcripts, summaries, AskFred AI, channels
  • Front - Conversations, messages, contacts, tags, inboxes, teammates
  • GetResponse - Campaigns, contacts, newsletters, autoresponders, tags, segments
  • Grafana - Dashboards, data sources, folders, annotations, alerts, teams
  • GitHub - Repositories, issues, pull requests, commits
  • Gumroad - Products, sales, subscribers, licenses, webhooks
  • Granola MCP - MCP-based interface for meeting notes, transcripts, queries
  • Gmail - Messages, threads, labels
  • Google Meet - Spaces, conference records, participants
  • Google Play - In-app products, subscriptions, reviews
  • GoHighLevel PIT - Contacts, opportunities, calendars, conversations, locations, custom fields
  • HubSpot - Contacts, companies, deals
  • Instantly - Campaigns, leads, accounts, email outreach
  • Jira - Issues, projects, JQL queries
  • Jobber - Clients, jobs, invoices, quotes (GraphQL)
  • JotForm - Forms, submissions, webhooks
  • Kaggle - Datasets, models, competitions, kernels
  • Keap - Contacts, companies, tags, tasks, opportunities, campaigns
  • Kibana - Saved objects, dashboards, data views, spaces, alerts, fleet
  • Kit - Subscribers, tags, forms, sequences
  • Klaviyo - Profiles, lists, campaigns, flows, events
  • Lemlist - Campaigns, leads, activities, schedules, unsubscribes
  • Linear - Issues, projects, teams, cycles (GraphQL)
  • LinkedIn - Profile, posts, shares, media uploads
  • Mailchimp - Audiences, campaigns, templates, automations
  • MailerLite - Subscribers, groups, campaigns, automations, forms
  • Mailgun - Domains, routes, templates, mailing lists, suppressions
  • Make - Scenarios, organizations, teams, connections, data stores, hooks
  • ManyChat - Subscribers, tags, flows, messaging
  • Manus - AI agent tasks, projects, files, webhooks
  • Memelord - AI meme generation, video memes, template editing
  • Monday.com - Boards, items, columns, groups (GraphQL)
  • Motion - Tasks, projects, workspaces, schedules
  • Netlify - Sites, deploys, builds, DNS, environment variables
  • Notion - Pages, databases, blocks
  • Notion MCP - MCP-based interface for pages, databases, comments, teams, users
  • OneNote - Notebooks, sections, section groups, pages via Microsoft Graph
  • OneDrive - Files, folders, drives, sharing
  • Outlook - Mail, calendar, contacts
  • PDF.co - PDF conversion, merge, split, edit, text extraction, barcodes
  • Pipedrive - Deals, persons, organizations, activities
  • Podio - Organizations, workspaces, apps, items, tasks, comments
  • PostHog - Product analytics, feature flags, session recordings, experiments, HogQL queries
  • Quo - Calls, messages, contacts, conversations, webhooks
  • Reducto - Document parsing, extraction, splitting, editing
  • Resend - Domains, audiences, contacts, webhooks
  • SignNow - Documents, templates, invites, e-signatures
  • SendGrid - Contacts, templates, suppressions, statistics
  • Sentry - Issues, events, projects, teams, releases
  • SharePoint - Sites, lists, document libraries, files, folders, versions
  • Slack - Messages, channels, users
  • Snapchat - Ad accounts, campaigns, ad squads, ads, creatives, audiences
  • Square - Customers, orders, catalog, inventory, invoices
  • Squarespace - Products, inventory, orders, profiles, transactions
  • Stripe - Customers, subscriptions, account records
  • Sunsama MCP - MCP-based interface for tasks, calendar, backlog, objectives, time tracking
  • Supabase - Database tables, auth users, storage buckets
  • Systeme.io - Contacts, tags, courses, communities, webhooks
  • Tally - Forms, submissions, workspaces, webhooks
  • Tavily - AI web search, content extraction, crawling, research tasks
  • Telegram - Messages, chats, bots, updates, polls
  • TickTick - Tasks, projects, task lists
  • Todoist - Tasks, projects, sections, labels, comments
  • Toggl Track - Time entries, projects, clients, tags, workspaces
  • Trello - Boards, lists, cards, checklists
  • Twilio - SMS, voice calls, phone numbers, messaging
  • Twenty CRM - Companies, people, opportunities, notes, tasks
  • Unbounce - Landing pages, leads, accounts, sub-accounts, domains
  • Vercel - Projects, deployments, domains, environment variables
  • Vimeo - Videos, folders, albums, comments, likes
  • WATI - WhatsApp messages, contacts, templates, interactive messages
  • Wrike - Tasks, folders, projects, spaces, comments, timelogs, workflows
  • Xero - Contacts, invoices, reports
  • YouTube - Videos, playlists, channels, subscriptions
  • Zoom - Meetings, recordings, webinars, users
  • Zoom Admin - Users, meetings, webinars, recordings, account settings (admin scopes)
  • Zoho Bigin - Contacts, companies, pipelines, products
  • Zoho Books - Invoices, contacts, bills, expenses
  • Zoho CRM - Leads, contacts, accounts, deals, search
  • Zoho Inventory - Items, sales orders, invoices, vendor orders, bills
  • Zoho Mail - Messages, folders, labels, attachments
  • Zoho People - Employees, departments, designations, attendance, leave
  • Zoho Projects - Projects, tasks, milestones, tasklists, comments
  • Zoho Recruit - Candidates, job openings, interviews, applications

Examples

Slack - List Channels (Native API)

CLI:

maton slack channel list --types public_channel --limit 10
maton api '/slack/api/conversations.list?types=public_channel&#x26;limit=10'

Python:

# Native Slack API: GET https://slack.com/api/conversations.list

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/slack/api/conversations.list?types=public_channel&#x26;limit=10')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

HubSpot - List Contacts (Native API)

CLI:

maton hubspot contact list -L 10

Python:

# Native HubSpot API: GET https://api.hubapi.com/crm/v3/objects/contacts

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/hubspot/crm/v3/objects/contacts?limit=10')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Google Sheets - Get Spreadsheet Values (Native API)

CLI:

maton google-sheets values get {spreadsheet_id} --range 'Sheet1!A1:B2'

Python:

# Native Sheets API: GET https://sheets.googleapis.com/v4/spreadsheets/{id}/values/{range}

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/google-sheets/v4/spreadsheets/{spreadsheet_id}/values/Sheet1!A1:B2')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Salesforce - SOQL Query (Native API)

CLI:

maton salesforce query 'SELECT Id,Name FROM Contact LIMIT 10'

Python:

# Native Salesforce API: GET https://{instance}.salesforce.com/services/data/v64.0/query?q=...

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/salesforce/services/data/v64.0/query?q=SELECT+Id,Name+FROM+Contact+LIMIT+10')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Airtable - List Tables (Native API)

CLI:

maton api '/airtable/v0/meta/bases/{base_id}/tables'

Python:

# Native Airtable API: GET https://api.airtable.com/v0/meta/bases/{id}/tables

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/airtable/v0/meta/bases/{base_id}/tables')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Notion - Query Database (Native API)

CLI:

maton notion data-source query {data_source_id}

Python:

# Native Notion API: POST https://api.notion.com/v1/data_sources/{id}/query

python <<'EOF'

import urllib.request, os, json

data = json.dumps({}).encode()

req = urllib.request.Request('https://api.maton.ai/notion/v1/data_sources/{data_source_id}/query', data=data, method='POST')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

req.add_header('Content-Type', 'application/json')

req.add_header('Notion-Version', '2025-09-03')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Stripe - List Customers (Native API)

CLI:

maton stripe customer list -L 10

Python:

# Native Stripe API: GET https://api.stripe.com/v1/customers

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/stripe/v1/customers?limit=10')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Code Examples

CLI

# List public slack channels

maton slack channel list --types public_channel --limit 10

# List unread messages with headers

maton google-mail message list --hydrate

# Filter with jq — e.g., only active customers

# Note: --jq requires --json

maton stripe customer list -L 10 --json --jq '.data | map(select(.delinquent == false))'

JavaScript (Node.js)

const response = await fetch('https://api.maton.ai/slack/api/conversations.list?types=public_channel&#x26;limit=10', {

  headers: {

    'Authorization': `Bearer ${process.env.MATON_API_KEY}`

  }

});

const data = await response.json();

Python

import os

import requests

response = requests.get(

    'https://api.maton.ai/slack/api/conversations.list?types=public_channel&#x26;limit=10',

    headers={'Authorization': f'Bearer {os.environ["MATON_API_KEY"]}'}

)

data = response.json()

Error Handling

Status

Meaning

400

Missing connection for the requested app

401

Invalid or missing Maton API key

429

Rate limited (10 requests/second per account)

500

Internal Server Error

4xx/5xx

Passthrough error from the target API

Errors from the target API are passed through with their original status codes and response bodies.

Troubleshooting: API Key Issues

CLI:

  • Check your auth state:
maton whoami
  • Verify the API key is valid by listing connections:
maton connection list

Manual:

  • Check that the MATON_API_KEY environment variable is set:
echo $MATON_API_KEY
  • Verify the API key is valid by listing connections:
python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/connections')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Troubleshooting: Invalid App Name

  • Verify your URL path starts with the correct app name. The path must begin with /google-mail/. For example:
  • Correct: https://api.maton.ai/google-mail/gmail/v1/users/me/messages
  • Incorrect: https://api.maton.ai/gmail/v1/users/me/messages
  • Ensure you have an active connection for the app. List your connections to verify:

CLI:

maton connection list google-mail --status ACTIVE

Python:

python <<'EOF'

import urllib.request, os, json

req = urllib.request.Request('https://api.maton.ai/connections?app=google-mail&#x26;status=ACTIVE')

req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')

print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))

EOF

Troubleshooting: Server Error

A 500 error may indicate expired service authorization. Try creating a new connection via the Connection Management section above and completing service authorization. If the new connection is "ACTIVE", delete the old connection to ensure Maton uses the new one.

Rate Limits

  • 10 requests per second per account
  • Target API rate limits also apply

Notes

  • When using curl with URLs containing brackets (fields[], sort[], records[]), use the -g flag to disable glob parsing
  • When piping curl output to jq, environment variables may not expand correctly in some shells, which can cause "Invalid API key" errors
  • Media upload URLs (LinkedIn, etc.): Some APIs return pre-signed upload URLs that point to a different host than the normal API host (e.g., LinkedIn returns www.linkedin.com upload URLs while API calls use api.linkedin.com). These upload URLs are pre-signed and do NOT require an Authorization header. Upload the binary directly to the returned URL. **You MUST use Python urllib** for these uploads because the URLs contain encoded characters (e.g., %253D) that get corrupted when passed through shell variables or curl. Always parse the JSON response with json.load() and use the URL directly in Python.

Tips

-

Use native API docs: Refer to each service's official API documentation for endpoint paths and parameters.

-

Headers are forwarded: Custom headers (except Host and Authorization) are forwarded to the target API.

-

Query params work: URL query parameters are passed through to the target API.

-

HTTP methods: Use the method required by the referenced endpoint. Confirm the exact target and expected outcome before methods that change data.

-

QuickBooks special case: Use :realmId in the path and it will be replaced with the connected realm ID.

Optional

BrowserAct

Let your agent run on any real-world website

Bypass CAPTCHA & anti-bot for free. Start local, scale to cloud.

Explore BrowserAct Skills →

Related skills

find-skills
2/3

Discover and install specialized agent skills from the open ecosystem when users need extended capabilities. Helps identify relevant skills by domain and task when users ask "how do I do X" or "find a skill for X" Integrates with the Skills CLI ( npx skills find , npx skills add ) to search, verify, and install packages from the skills.sh directory Recommends skills based on install count, source reputation, and GitHub stars to ensure quality before suggesting installation Presents skill options with install commands and links to skills.sh for user review and one-click installation

Verified authorvercel-labs
SKILLS.SH
1.5M19.6K
2026-05-22
vercel-react-best-practices
3/3

React and Next.js performance optimization guide with 64 prioritized rules across 8 categories. Organized by impact level, from critical waterfalls and bundle optimization down to advanced patterns, each rule includes incorrect/correct code examples and explanations Covers eight domains: async patterns, bundle size, server-side caching, client-side data fetching, re-render optimization, rendering performance, JavaScript efficiency, and advanced patterns Designed for use during component writing, code review, refactoring, and performance audits on React and Next.js applications Each rule has a prefix code (e.g., async-parallel , bundle-barrel-imports ) for easy reference in automated tooling and documentation

Verified authorvercel-labs
SKILLS.SH
389K26.9K
2026-05-22
azure-validate
2/3

Pre-deployment validation for Azure infrastructure, configuration, and permissions before deployment. Requires .azure/plan.md from a prior azure-prepare run; stops immediately if the plan is missing Executes recipe-specific validation commands (azd provision, bicep build, terraform validate) and records proof in the plan document Performs build verification, configuration checks, and permission validation; blocks deployment if any check fails Only authorized method to set plan status to Validated ; must be followed by azure-deploy skill to execute the actual deployment

Verified authormicrosoft
SKILLS.SH
324K1.1K
2026-05-22
appinsights-instrumentation
3/3

Guidance and reference material for instrumenting webapps with Azure Application Insights. Covers SDK setup, telemetry patterns, and configuration for ASP.NET Core and Node.js applications hosted in Azure Distinguishes between this skill (reference and guidance) and azure-prepare (actual implementation); invoke azure-prepare when the user wants to add instrumentation to their project Provides auto-instrumentation guidance for C# ASP.NET Core apps in Azure App Service, plus manual instrumentation paths for creating App Insights resources via Bicep templates or Azure CLI Includes language-specific code modification guides for ASP.NET Core, Node.js, and Python, plus quick references for OpenTelemetry SDKs and exporters

Verified authormicrosoft
SKILLS.SH
324K1.1K
2026-05-22

Stop writing automation&scrapers

Install the CLI. Run your first Skill in 30 seconds. Scale when you're ready.

Start free
free · no credit card