Agent skill

API Gateway

by CraftOS-dev in CraftOS-dev/CraftBot

Connect to 100+ APIs (Google Workspace, Microsoft 365, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth.

MITAuto-check passedBackend & APIs

Install API Gateway

skills CLI
$ npx skills add CraftOS-dev/CraftBot --skill api-gateway -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install CraftOS-dev/CraftBot api-gateway --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/CraftOS-dev/CraftBot.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/api-gateway .claude/skills/api-gateway && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
api-gateway
GitHub stars
392
Used in
3 other repos
Token cost
~7.1k tokens
SKILL.md length
1,698 words
Files
120 (incl. references)
Skills in repo
89
Repo updated
First seen
Licence
MIT

At a glance

Connect to 100+ APIs (Google Workspace, Microsoft 365, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth.

  • Works in 3 steps: Sign in or create an account at maton.ai → Go to maton.ai/settings → Click the copy button on the right side…
  • Users want to interact with external services
  • SKILL.md covers Quick Start, Base URL, Authentication and Getting Your API Key, plus 8 more sections
  • Calls python; reaches gateway.maton.ai and ctrl.maton.ai; needs MATON_API_KEY

What it does

API Gateway is an agent skill from CraftOS-dev/CraftBot. Connect to 100+ APIs (Google Workspace, Microsoft 365, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth. Use this skill when users want to interact with external services. Security: The MATONAPIKEY authenticates with Maton.ai but grants NO access to third-party services by itself. Each service requires explicit OAuth authorization by the user through Maton's connect flow. Access is strictly scoped to connections the user has authorized. Provided by Maton (https://maton.ai).

Its SKILL.md is about 7.1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 121 other files, including reference files (for example `.clawhub/origin.json`, `_meta.json` and `references/active-campaign.md`). Compatibility notes: Requires network access and valid Maton API key

It sits in Backend & APIs, covering Microservices, Cloud office suites and CRM management. It works with Airtable, HubSpot, Google Workspace and Microsoft 365. The repository describes itself as: One agent. Every kind of work. The licence is MIT.

When your agent uses it

  • Users want to interact with external services
  • Tasks that involve Microservices
  • Tasks that involve Cloud office suites

Example prompts

  • “/api-gateway”

Requirements

  • Python 3
  • A credential in MATON_API_KEY
  • A credential in YOUR_API_KEY
  • Compatibility (from SKILL.md): Requires network access and valid Maton API key

Workflow steps

3 steps, taken from the first numbered list in SKILL.md.

  1. Sign in or create an account at maton.ai
  2. Go to maton.ai/settings
  3. Click the copy button on the right side of API Key section to copy it

What it can do on your machine

Read from SKILL.md and the folder at commit b50970c. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • python

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Hosts in commands or code, which the agent is likely to contact:

    • gateway.maton.ai
    • ctrl.maton.ai
    • connect.maton.ai
    • slack.com
    • api.hubapi.com
    • sheets.googleapis.com
    • api.airtable.com
    • api.notion.com
    • api.stripe.com

    Also links to:

    • maton.ai
    • github.com
    • discord.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • MATON_API_KEY

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

  • Compatibility

    Requires network access and valid Maton API key

    From compatibility in the SKILL.md frontmatter.

Context cost

API Gateway loads about 7.1k tokens when it runs, and up to ~123k if it reads all its reference files. Until then it costs about 126 tokens; SKILL.md has 1,698 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~126
When it runs · the whole SKILL.md, loaded when a task matches
~7.1k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~123k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from CraftOS-dev/CraftBot at commit b50970c, republished under its MIT licence (© CraftOS-dev). 1,698 words, ~7,146 tokens.

Download SKILL.mdSave it as .claude/skills/api-gateway/SKILL.md (or your agent's skills folder). This skill also uses 119 other files; get the full folder from GitHub.
name
api-gateway
description
Connect to 100+ APIs (Google Workspace, Microsoft 365, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth. Use this skill when users want to interact with external services. Security: The MATON_API_KEY authenticates with Maton.ai but grants NO access to third-party services by itself. Each service requires explicit OAuth authorization by the user through Maton's connect flow. Access is strictly scoped to connections the user has authorized. Provided by Maton (https://maton.ai).
compatibility
Requires network access and valid Maton API key
metadata.author
maton
metadata.version
1.0

API Gateway

Passthrough proxy for direct access to third-party APIs using managed OAuth connections, provided by Maton. The API gateway lets you call native API endpoints directly.

Quick Start

bash
# Native Slack API call
python <<'EOF'
import urllib.request, os, json
data = json.dumps({'channel': 'C0123456', 'text': 'Hello from gateway!'}).encode()
req = urllib.request.Request('https://gateway.maton.ai/slack/api/chat.postMessage', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Base URL

https://gateway.maton.ai/{app}/{native-api-path}

Replace {app} with the service name and {native-api-path} with the actual API endpoint path.

IMPORTANT: The URL path MUST start with the connection's app name (eg. /google-mail/...). This prefix tells the gateway which app connection to use. For example, the native Gmail API path starts with gmail/v1/, so full paths look like /google-mail/gmail/v1/users/me/messages.

Authentication

All requests require the Maton API key in the Authorization header:

Authorization: Bearer $MATON_API_KEY

The API gateway automatically injects the appropriate OAuth token for the target service.

Environment Variable: You can set your API key as the MATON_API_KEY environment variable:

bash
export MATON_API_KEY="YOUR_API_KEY"

Getting Your API Key

  1. Sign in or create an account at maton.ai
  2. Go to maton.ai/settings
  3. Click the copy button on the right side of API Key section to copy it

Connection Management

Connection management uses a separate base URL: https://ctrl.maton.ai

List Connections
bash
python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections?app=slack&status=ACTIVE')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Query Parameters (optional):

  • app - Filter by service name (e.g., slack, hubspot, salesforce)
  • status - Filter by connection status (ACTIVE, PENDING, FAILED)

Response:

json
{
  "connections": [
    {
      "connection_id": "21fd90f9-5935-43cd-b6c8-bde9d915ca80",
      "status": "ACTIVE",
      "creation_time": "2025-12-08T07:20:53.488460Z",
      "last_updated_time": "2026-01-31T20:03:32.593153Z",
      "url": "https://connect.maton.ai/?session_token=5e9...",
      "app": "slack",
      "metadata": {}
    }
  ]
}
Create Connection
bash
python <<'EOF'
import urllib.request, os, json
data = json.dumps({'app': 'slack'}).encode()
req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF
Get Connection
bash
python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Response:

json
{
  "connection": {
    "connection_id": "21fd90f9-5935-43cd-b6c8-bde9d915ca80",
    "status": "ACTIVE",
    "creation_time": "2025-12-08T07:20:53.488460Z",
    "last_updated_time": "2026-01-31T20:03:32.593153Z",
    "url": "https://connect.maton.ai/?session_token=5e9...",
    "app": "slack",
    "metadata": {}
  }
}

Open the returned URL in a browser to complete OAuth.

Delete Connection
bash
python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF
Specifying Connection

If you have multiple connections for the same app, you can specify which connection to use by adding the Maton-Connection header with the connection ID:

bash
python <<'EOF'
import urllib.request, os, json
data = json.dumps({'channel': 'C0123456', 'text': 'Hello!'}).encode()
req = urllib.request.Request('https://gateway.maton.ai/slack/api/chat.postMessage', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
req.add_header('Maton-Connection', '21fd90f9-5935-43cd-b6c8-bde9d915ca80')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

If omitted, the gateway uses the default (oldest) active connection for that app.

Supported Services

ServiceApp NameBase URL Proxied
ActiveCampaignactive-campaign{account}.api-us1.com
Acuity Schedulingacuity-schedulingacuityscheduling.com
Airtableairtableapi.airtable.com
Apolloapolloapi.apollo.io
Asanaasanaapp.asana.com
Attioattioapi.attio.com
Basecampbasecamp3.basecampapi.com
beehiivbeehiivapi.beehiiv.com
Boxboxapi.box.com
Brevobrevoapi.brevo.com
Calendlycalendlyapi.calendly.com
Cal.comcal-comapi.cal.com
CallRailcallrailapi.callrail.com
Chargebeechargebee{subdomain}.chargebee.com
ClickFunnelsclickfunnels{subdomain}.myclickfunnels.com
ClickSendclicksendrest.clicksend.com
ClickUpclickupapi.clickup.com
Clockifyclockifyapi.clockify.me
Codacodacoda.io
Confluenceconfluenceapi.atlassian.com
CompanyCamcompanycamapi.companycam.com
Cognito Formscognito-formswww.cognitoforms.com
Constant Contactconstant-contactapi.cc.email
Dropboxdropboxapi.dropboxapi.com
Dropbox Businessdropbox-businessapi.dropboxapi.com
ElevenLabselevenlabsapi.elevenlabs.io
Eventbriteeventbritewww.eventbriteapi.com
Fathomfathomapi.fathom.ai
Firebasefirebasefirebase.googleapis.com
Firefliesfirefliesapi.fireflies.ai
GetResponsegetresponseapi.getresponse.com
GitHubgithubapi.github.com
Gumroadgumroadapi.gumroad.com
Granolagranolamcp.granola.ai (MCP)
Google Adsgoogle-adsgoogleads.googleapis.com
Google BigQuerygoogle-bigquerybigquery.googleapis.com
Google Analytics Admingoogle-analytics-adminanalyticsadmin.googleapis.com
Google Analytics Datagoogle-analytics-dataanalyticsdata.googleapis.com
Google Calendargoogle-calendarwww.googleapis.com
Google Classroomgoogle-classroomclassroom.googleapis.com
Google Contactsgoogle-contactspeople.googleapis.com
Google Docsgoogle-docsdocs.googleapis.com
Google Drivegoogle-drivewww.googleapis.com
Google Formsgoogle-formsforms.googleapis.com
Gmailgoogle-mailgmail.googleapis.com
Google Merchantgoogle-merchantmerchantapi.googleapis.com
Google Meetgoogle-meetmeet.googleapis.com
Google Playgoogle-playandroidpublisher.googleapis.com
Google Search Consolegoogle-search-consolewww.googleapis.com
Google Sheetsgoogle-sheetssheets.googleapis.com
Google Slidesgoogle-slidesslides.googleapis.com
Google Tasksgoogle-taskstasks.googleapis.com
Google Workspace Admingoogle-workspace-adminadmin.googleapis.com
HubSpothubspotapi.hubapi.com
Instantlyinstantlyapi.instantly.ai
Jirajiraapi.atlassian.com
Jobberjobberapi.getjobber.com
JotFormjotformapi.jotform.com
Keapkeapapi.infusionsoft.com
Kitkitapi.kit.com
Klaviyoklaviyoa.klaviyo.com
Lemlistlemlistapi.lemlist.com
Linearlinearapi.linear.app
LinkedInlinkedinapi.linkedin.com
Mailchimpmailchimp{dc}.api.mailchimp.com
MailerLitemailerliteconnect.mailerlite.com
Mailgunmailgunapi.mailgun.net
ManyChatmanychatapi.manychat.com
Microsoft Excelmicrosoft-excelgraph.microsoft.com
Microsoft Teamsmicrosoft-teamsgraph.microsoft.com
Microsoft To Domicrosoft-to-dograph.microsoft.com
Monday.commondayapi.monday.com
Motionmotionapi.usemotion.com
Netlifynetlifyapi.netlify.com
Notionnotionapi.notion.com
OneDriveone-drivegraph.microsoft.com
Outlookoutlookgraph.microsoft.com
PDF.copdf-coapi.pdf.co
Pipedrivepipedriveapi.pipedrive.com
Podiopodioapi.podio.com
PostHogposthog{subdomain}.posthog.com
QuickBooksquickbooksquickbooks.api.intuit.com
Quoquoapi.openphone.com
Salesforcesalesforce{instance}.salesforce.com
Sentrysentry{subdomain}.sentry.io
SignNowsignnowapi.signnow.com
Slackslackslack.com
Snapchatsnapchatadsapi.snapchat.com
Squaresquareupconnect.squareup.com
Stripestripeapi.stripe.com
Systeme.iosystemeapi.systeme.io
Tallytallyapi.tally.so
Telegramtelegramapi.telegram.org
TickTickticktickapi.ticktick.com
Todoisttodoistapi.todoist.com
Toggl Tracktoggl-trackapi.track.toggl.com
Trellotrelloapi.trello.com
Twiliotwilioapi.twilio.com
Typeformtypeformapi.typeform.com
Vimeovimeoapi.vimeo.com
WhatsApp Businesswhatsapp-businessgraph.facebook.com
WooCommercewoocommerce{store-url}/wp-json/wc/v3
WordPress.comwordpresspublic-api.wordpress.com
Xeroxeroapi.xero.com
YouTubeyoutubewww.googleapis.com
Zoho Biginzoho-biginwww.zohoapis.com
Zoho Bookingszoho-bookingswww.zohoapis.com
Zoho Bookszoho-bookswww.zohoapis.com
Zoho Calendarzoho-calendarcalendar.zoho.com
Zoho CRMzoho-crmwww.zohoapis.com
Zoho Inventoryzoho-inventorywww.zohoapis.com
Zoho Mailzoho-mailmail.zoho.com
Zoho Peoplezoho-peoplepeople.zoho.com
Zoho Recruitzoho-recruitrecruit.zoho.com

See references/ for detailed routing guides per provider:

  • ActiveCampaign - Contacts, deals, tags, lists, automations, campaigns
  • Acuity Scheduling - Appointments, calendars, clients, availability
  • Airtable - Records, bases, tables
  • Apollo - People search, enrichment, contacts
  • Asana - Tasks, projects, workspaces, webhooks
  • Attio - People, companies, records, tasks
  • Basecamp - Projects, to-dos, messages, schedules, documents
  • beehiiv - Publications, subscriptions, posts, custom fields
  • Box - Files, folders, collaborations, shared links
  • Brevo - Contacts, email campaigns, transactional emails, templates
  • Calendly - Event types, scheduled events, availability, webhooks
  • Cal.com - Event types, bookings, schedules, availability slots, webhooks
  • CallRail - Calls, trackers, companies, tags, analytics
  • Chargebee - Subscriptions, customers, invoices
  • ClickFunnels - Contacts, products, orders, courses, webhooks
  • ClickSend - SMS, MMS, voice messages, contacts, lists
  • ClickUp - Tasks, lists, folders, spaces, webhooks
  • Clockify - Time tracking, projects, clients, tasks, workspaces
  • Coda - Docs, pages, tables, rows, formulas, controls
  • Confluence - Pages, spaces, blogposts, comments, attachments
  • CompanyCam - Projects, photos, users, tags, groups, documents
  • Cognito Forms - Forms, entries, documents, files
  • Constant Contact - Contacts, email campaigns, lists, segments
  • Dropbox - Files, folders, search, metadata, revisions, tags
  • Dropbox Business - Team members, groups, team folders, devices, audit logs
  • ElevenLabs - Text-to-speech, voice cloning, sound effects, audio processing
  • Eventbrite - Events, venues, tickets, orders, attendees
  • Fathom - Meeting recordings, transcripts, summaries, webhooks
  • Firebase - Projects, web apps, Android apps, iOS apps, configurations
  • Fireflies - Meeting transcripts, summaries, AskFred AI, channels
  • GetResponse - Campaigns, contacts, newsletters, autoresponders, tags, segments
  • GitHub - Repositories, issues, pull requests, commits
  • Gumroad - Products, sales, subscribers, licenses, webhooks
  • Granola - Meeting notes, transcripts, queries (MCP)
  • Google Ads - Campaigns, ad groups, GAQL queries
  • Google Analytics Admin - Reports, dimensions, metrics
  • Google Analytics Data - Reports, dimensions, metrics
  • Google BigQuery - Datasets, tables, jobs, SQL queries
  • Google Calendar - Events, calendars, free/busy
  • Google Classroom - Courses, coursework, students, teachers, announcements
  • Google Contacts - Contacts, contact groups, people search
  • Google Docs - Document creation, batch updates
  • Google Drive - Files, folders, permissions
  • Google Forms - Forms, questions, responses
  • Gmail - Messages, threads, labels
  • Google Meet - Spaces, conference records, participants
  • Google Merchant - Products, inventories, promotions, reports
  • Google Play - In-app products, subscriptions, reviews
  • Google Search Console - Search analytics, sitemaps
  • Google Sheets - Values, ranges, formatting
  • Google Slides - Presentations, slides, formatting
  • Google Tasks - Task lists, tasks, subtasks
  • Google Workspace Admin - Users, groups, org units, domains, roles
  • HubSpot - Contacts, companies, deals
  • Instantly - Campaigns, leads, accounts, email outreach
  • Jira - Issues, projects, JQL queries
  • Jobber - Clients, jobs, invoices, quotes (GraphQL)
  • JotForm - Forms, submissions, webhooks
  • Keap - Contacts, companies, tags, tasks, opportunities, campaigns
  • Kit - Subscribers, tags, forms, sequences, broadcasts
  • Klaviyo - Profiles, lists, campaigns, flows, events
  • Lemlist - Campaigns, leads, activities, schedules, unsubscribes
  • Linear - Issues, projects, teams, cycles (GraphQL)
  • LinkedIn - Profile, posts, shares, media uploads
  • Mailchimp - Audiences, campaigns, templates, automations
  • MailerLite - Subscribers, groups, campaigns, automations, forms
  • Mailgun - Email sending, domains, routes, templates, mailing lists, suppressions
  • ManyChat - Subscribers, tags, flows, messaging
  • Microsoft Excel - Workbooks, worksheets, ranges, tables, charts
  • Microsoft Teams - Teams, channels, messages, members, chats
  • Microsoft To Do - Task lists, tasks, checklist items, linked resources
  • Monday.com - Boards, items, columns, groups (GraphQL)
  • Motion - Tasks, projects, workspaces, schedules
  • Netlify - Sites, deploys, builds, DNS, environment variables
  • Notion - Pages, databases, blocks
  • OneDrive - Files, folders, drives, sharing
  • Outlook - Mail, calendar, contacts
  • PDF.co - PDF conversion, merge, split, edit, text extraction, barcodes
  • Pipedrive - Deals, persons, organizations, activities
  • Podio - Organizations, workspaces, apps, items, tasks, comments
  • PostHog - Product analytics, feature flags, session recordings, experiments, HogQL queries
  • QuickBooks - Customers, invoices, reports
  • Quo - Calls, messages, contacts, conversations, webhooks
  • Salesforce - SOQL, sObjects, CRUD
  • SignNow - Documents, templates, invites, e-signatures
  • SendGrid - Email sending, contacts, templates, suppressions, statistics
  • Sentry - Issues, events, projects, teams, releases
  • Slack - Messages, channels, users
  • Snapchat - Ad accounts, campaigns, ad squads, ads, creatives, audiences
  • Square - Payments, customers, orders, catalog, inventory, invoices
  • Stripe - Customers, subscriptions, payments
  • Systeme.io - Contacts, tags, courses, communities, webhooks
  • Tally - Forms, submissions, workspaces, webhooks
  • Telegram - Messages, chats, bots, updates, polls
  • TickTick - Tasks, projects, task lists
  • Todoist - Tasks, projects, sections, labels, comments
  • Toggl Track - Time entries, projects, clients, tags, workspaces
  • Trello - Boards, lists, cards, checklists
  • Twilio - SMS, voice calls, phone numbers, messaging
  • Typeform - Forms, responses, insights
  • Vimeo - Videos, folders, albums, comments, likes
  • WhatsApp Business - Messages, templates, media
  • WooCommerce - Products, orders, customers, coupons
  • WordPress.com - Posts, pages, sites, users, settings
  • Xero - Contacts, invoices, reports
  • YouTube - Videos, playlists, channels, subscriptions
  • Zoho Bigin - Contacts, companies, pipelines, products
  • Zoho Bookings - Appointments, services, staff, workspaces
  • Zoho Books - Invoices, contacts, bills, expenses
  • Zoho Calendar - Calendars, events, attendees, reminders
  • Zoho CRM - Leads, contacts, accounts, deals, search
  • Zoho Inventory - Items, sales orders, invoices, purchase orders, bills
  • Zoho Mail - Messages, folders, labels, attachments
  • Zoho People - Employees, departments, designations, attendance, leave
  • Zoho Recruit - Candidates, job openings, interviews, applications
Show full SKILL.md (348 more words)Show less

Examples

Slack - Post Message (Native API)
bash
# Native Slack API: POST https://slack.com/api/chat.postMessage
python <<'EOF'
import urllib.request, os, json
data = json.dumps({'channel': 'C0123456', 'text': 'Hello!'}).encode()
req = urllib.request.Request('https://gateway.maton.ai/slack/api/chat.postMessage', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json; charset=utf-8')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF
HubSpot - Create Contact (Native API)
bash
# Native HubSpot API: POST https://api.hubapi.com/crm/v3/objects/contacts
python <<'EOF'
import urllib.request, os, json
data = json.dumps({'properties': {'email': 'john@example.com', 'firstname': 'John', 'lastname': 'Doe'}}).encode()
req = urllib.request.Request('https://gateway.maton.ai/hubspot/crm/v3/objects/contacts', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF
Google Sheets - Get Spreadsheet Values (Native API)
bash
# Native Sheets API: GET https://sheets.googleapis.com/v4/spreadsheets/{id}/values/{range}
python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://gateway.maton.ai/google-sheets/v4/spreadsheets/122BS1sFN2RKL8AOUQjkLdubzOwgqzPT64KfZ2rvYI4M/values/Sheet1!A1:B2')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF
Salesforce - SOQL Query (Native API)
bash
# Native Salesforce API: GET https://{instance}.salesforce.com/services/data/v64.0/query?q=...
python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://gateway.maton.ai/salesforce/services/data/v64.0/query?q=SELECT+Id,Name+FROM+Contact+LIMIT+10')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF
Airtable - List Tables (Native API)
bash
# Native Airtable API: GET https://api.airtable.com/v0/meta/bases/{id}/tables
python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://gateway.maton.ai/airtable/v0/meta/bases/appgqan2NzWGP5sBK/tables')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF
Notion - Query Database (Native API)
bash
# Native Notion API: POST https://api.notion.com/v1/data_sources/{id}/query
python <<'EOF'
import urllib.request, os, json
data = json.dumps({}).encode()
req = urllib.request.Request('https://gateway.maton.ai/notion/v1/data_sources/23702dc5-9a3b-8001-9e1c-000b5af0a980/query', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
req.add_header('Notion-Version', '2025-09-03')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF
Stripe - List Customers (Native API)
bash
# Native Stripe API: GET https://api.stripe.com/v1/customers
python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://gateway.maton.ai/stripe/v1/customers?limit=10')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Code Examples

JavaScript (Node.js)
javascript
const response = await fetch('https://gateway.maton.ai/slack/api/chat.postMessage', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Authorization': `Bearer ${process.env.MATON_API_KEY}`
  },
  body: JSON.stringify({ channel: 'C0123456', text: 'Hello!' })
});
Python
python
import os
import requests

response = requests.post(
    "https://gateway.maton.ai/slack/api/chat.postMessage",
    headers={"Authorization": f"Bearer {os.environ['MATON_API_KEY']}"},
    json={"channel": "C0123456", "text": "Hello!"},
)

Error Handling

StatusMeaning
400Missing connection for the requested app
401Invalid or missing Maton API key
429Rate limited (10 requests/second per account)
500Internal Server Error
4xx/5xxPassthrough error from the target API

Errors from the target API are passed through with their original status codes and response bodies.

Troubleshooting: API Key Issues
  1. Check that the MATON_API_KEY environment variable is set:
bash
echo $MATON_API_KEY
  1. Verify the API key is valid by listing connections:
bash
python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF
Troubleshooting: Invalid App Name
  1. Verify your URL path starts with the correct app name. The path must begin with /google-mail/. For example:
  • Correct: https://gateway.maton.ai/google-mail/gmail/v1/users/me/messages
  • Incorrect: https://gateway.maton.ai/gmail/v1/users/me/messages
  1. Ensure you have an active connection for the app. List your connections to verify:
bash
python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://ctrl.maton.ai/connections?app=google-mail&status=ACTIVE')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF
Troubleshooting: Server Error

A 500 error may indicate an expired OAuth token. Try creating a new connection via the Connection Management section above and completing OAuth authorization. If the new connection is "ACTIVE", delete the old connection to ensure the gateway uses the new one.

Rate Limits

  • 10 requests per second per account
  • Target API rate limits also apply

Notes

  • When using curl with URLs containing brackets (fields[], sort[], records[]), use the -g flag to disable glob parsing
  • When piping curl output to jq, environment variables may not expand correctly in some shells, which can cause "Invalid API key" errors

Tips

  1. Use native API docs: Refer to each service's official API documentation for endpoint paths and parameters.

  2. Headers are forwarded: Custom headers (except Host and Authorization) are forwarded to the target API.

  3. Query params work: URL query parameters are passed through to the target API.

  4. All HTTP methods supported: GET, POST, PUT, PATCH, DELETE are all supported.

  5. QuickBooks special case: Use :realmId in the path and it will be replaced with the connected realm ID.

Optional

© CraftOS-dev, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 119 other files (references) in skills/api-gateway of CraftOS-dev/CraftBot.

  • SKILL.md
  • .clawhub/origin.json
  • LICENSE.txt
  • _meta.json
  • references/active-campaign.md
  • references/acuity-scheduling.md
  • references/airtable.md
  • references/apollo.md
  • references/asana.md
  • references/attio.md
  • references/basecamp.md
  • references/beehiiv.md
  • references/box.md
  • references/brevo.md
  • references/cal-com.md
  • references/calendly.md
  • references/callrail.md
  • references/chargebee.md
  • references/clickfunnels.md
  • … and 101 more

Open the folder on GitHubat commit b50970c

Used in 3 other repositories

We found 6 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 3 other GitHub owners. This page covers the copy in CraftOS-dev/CraftBot, which our catalogue first saw on October 7, 2026.

Compare with similar skills

API Gateway next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

API Gateway compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
API Gateway this skillCraftOS-dev/CraftBot3923 repos~7.1kAutomated safety check: PassMIT
Implementing Zero Trust For SaaS Applicationsmukul975/Anthropic-Cybersecurity-Skills34k—~2.9kAutomated safety check: PassApache-2.0
Detecting Email Account Compromisemukul975/Anthropic-Cybersecurity-Skills34k—~823Automated safety check: PassApache-2.0
Google WorkspaceRedWoodOG/Hermes-Desktop177—~2.1kAutomated safety check: PassMIT
Sap Btp Build Work Zone Advancedsecondsky/sap-skills460—~3.3kAutomated safety check: PassGPL-3.0
Implementing Google Workspace Sso Configurationmukul975/Anthropic-Cybersecurity-Skills34k—~2kAutomated safety check: PassApache-2.0

Similar skills

  • Implementing Zero Trust For SaaS Applications

    mukul975/Anthropic-Cybersecurity-Skills

    Secures SaaS apps (Microsoft 365, Google Workspace, Salesforce, Slack) via CASB/SSPM deployment, conditional access policies, OAuth app governance, and session-level DLP controls enforcing identity…

    34k GitHub stars~2.9k tokensUpdated 1 mo ago
    Backend & APIsAuto-check passed
  • Detecting Email Account Compromise

    mukul975/Anthropic-Cybersecurity-Skills

    Detect compromised O365 and Google Workspace email accounts by analyzing Unified Audit Logs and Azure AD sign-in logs for impossible travel, inbox rule creation/deletion (Set-InboxRule…

    34k GitHub stars~823 tokensUpdated 1 mo ago
    Backend & APIsAuto-check passed
  • Google Workspace

    RedWoodOG/Hermes-Desktop

    Gmail, Calendar, Drive, Contacts, Sheets, and Docs integration via Python.

    177 GitHub stars~2.1k tokensUpdated 4 mo ago
    Backend & APIsAuto-check passed
  • Develops and administers SAP Build Work Zone, advanced edition digital workplace solutions.

    460 GitHub stars~3.3k tokensUpdated 2 days ago
    Backend & APIsAuto-check passed
  • Implementing Google Workspace Sso Configuration

    mukul975/Anthropic-Cybersecurity-Skills

    Configures SAML 2.0 single sign-on for Google Workspace against a third-party identity provider (Okta, Azure AD/Entra ID, ADFS), with Workspace as the Service Provider, to centralize authentication…

    34k GitHub stars~2k tokensUpdated 1 mo ago
    Backend & APIsAuto-check passed
  • Analyzing Office365 Audit Logs For Compromise

    mukul975/Anthropic-Cybersecurity-Skills

    Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation, suspicious OAuth app grants, and other indicators of account compromise.

    34k GitHub stars~584 tokensUpdated 1 mo ago
    Backend & APIsAuto-check passed

More from CraftOS-dev/CraftBot

All 89 skills in this repo
  • Self Improvement

    CraftOS-dev/CraftBot

    Captures learnings, errors, and corrections to enable continuous improvement.

    392 GitHub starsUsed in 5 repos~4.9k tokens
    Auto-check passed
  • Bbc News

    CraftOS-dev/CraftBot

    Fetch and display BBC News stories from various sections and regions via RSS feeds.

    392 GitHub starsUsed in 2 repos~555 tokens
    Auto-check passed
  • Outlook

    CraftOS-dev/CraftBot

    Read, search, and manage Outlook emails and calendar via Microsoft Graph API.

    392 GitHub starsUsed in 2 repos~1.8k tokens
    Auto-check passed
  • Nano Banana Pro

    CraftOS-dev/CraftBot

    Generate/edit images with Nano Banana Pro (Gemini 3 Pro Image).

    392 GitHub starsUsed in 6 repos~1.4k tokens
    Auto-check passed
  • Airweave

    CraftOS-dev/CraftBot

    Context retrieval layer for AI agents across users' applications.

    392 GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Telegram Bot Manager

    CraftOS-dev/CraftBot

    Manage and configure Telegram bots for OpenClaw. An agent skill from CraftOS-dev/CraftBot.

    392 GitHub stars~836 tokensUpdated today
    Auto-check passed

Questions about API Gateway

What does API Gateway do?

Connect to 100+ APIs (Google Workspace, Microsoft 365, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth. API Gateway is an agent skill from CraftOS-dev/CraftBot.) with managed OAuth.

When should I use API Gateway?

API Gateway fits situations like: users want to interact with external services; tasks that involve Microservices; tasks that involve Cloud office suites.

How do I install API Gateway in Claude Code?

Run `npx skills add CraftOS-dev/CraftBot --skill api-gateway -a claude-code`. Or copy the skill folder (skills/api-gateway in CraftOS-dev/CraftBot) into .claude/skills/api-gateway in your project. Claude Code loads it when a task matches its description.

How do I install API Gateway in Codex?

Run `npx skills add CraftOS-dev/CraftBot --skill api-gateway -a codex`. Or copy the skill folder (skills/api-gateway in CraftOS-dev/CraftBot) into .agents/skills/api-gateway in your project. Codex loads it when a task matches its description.

Can I use API Gateway in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add CraftOS-dev/CraftBot --skill api-gateway -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/api-gateway, .gemini/skills/api-gateway, .github/skills/api-gateway and .opencode/skills/api-gateway in your project.

What does API Gateway need to run?

Going by SKILL.md and its folder, API Gateway needs the command-line tools its instructions call (python) and credentials named MATON_API_KEY. Our summary lists: Python 3; A credential in MATON_API_KEY; A credential in YOUR_API_KEY. Compatibility (from SKILL.md): Requires network access and valid Maton API key.

Does API Gateway access the network?

SKILL.md names 12 domains. In commands or code: gateway.maton.ai, ctrl.maton.ai, connect.maton.ai, slack.com, api.hubapi.com, sheets.googleapis.com, api.airtable.com, api.notion.com and api.stripe.com; the agent is likely to contact these when it follows the instructions. As links in the text: maton.ai, github.com and discord.com. This is read from the text; nothing was executed.

Is API Gateway safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does API Gateway use?

API Gateway is published under the MIT licence (from the LICENSE file in the skill folder). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does API Gateway use?

About 7.1k tokens (SKILL.md is roughly 29k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 116k tokens, read only when the agent opens those files.

What are the alternatives to API Gateway?

Skills that share tags, products or a category with API Gateway: Implementing Zero Trust For SaaS Applications (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Detecting Email Account Compromise (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Google Workspace (RedWoodOG/Hermes-Desktop, 177 stars) and Sap Btp Build Work Zone Advanced (secondsky/sap-skills, 460 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains API Gateway?

CraftOS-dev (a GitHub user) maintains it in CraftOS-dev/CraftBot, which has 392 GitHub stars. The repository holds 89 skills in this directory. The repository was last updated on October 7, 2026.

Source: CraftOS-dev/CraftBot on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.