Calimatic Connect|Documentation
PricingSign In

API Proxy

The API Proxy lets you call any connected provider's API through Calimatic Connect. Instead of managing tokens and credentials yourself, just send your request through our proxy and we handle the authentication automatically.

Why use the API Proxy?

  • No need to store or manage provider API tokens in your application
  • Expired tokens are automatically refreshed — your request just works
  • Every API call is logged for auditing and debugging
  • One consistent endpoint for all your connected providers

How It Works

Your App(API request)API ProxyAuth + LoggingToken Injection + RefreshProvider API(e.g., HubSpot, Stripe)
  1. You send a request to the proxy endpoint, specifying the provider and what API call to make
  2. Calimatic Connect adds the stored authentication credentials automatically
  3. The request is forwarded to the provider's API
  4. If the credentials have expired, they are refreshed and the request is retried automatically
  5. The provider's response is returned to you, and the call is logged

Making a Request

Send a POST request to the proxy endpoint, specifying which provider and what API call you want to make:

POST /connect/v1/proxy/:providerType
{
"method": "GET",
"path": "/v2/contacts",
"query": { "limit": 10 },
"headers": { "Accept": "application/json" },
"body": null
}

Request Fields

FieldTypeDescription
methodstringHTTP method: GET, POST, PUT, PATCH, DELETE
pathstringAPI path on the provider (e.g., /v2/contacts)
queryobjectOptional query parameters
headersobjectOptional additional headers
bodyanyOptional request body (for POST/PUT/PATCH)

Examples

Fetch HubSpot Contacts

POST /connect/v1/proxy/hubspot
{
"method": "GET",
"path": "/crm/v3/objects/contacts",
"query": { "limit": 10, "properties": "email,firstname,lastname" }
}

Send a Twilio SMS

POST /connect/v1/proxy/twilio
{
"method": "POST",
"path": "/2010-04-01/Accounts/:accountSid/Messages.json",
"body": {
"To": "+1234567890",
"From": "+0987654321",
"Body": "Hello from Calimatic Connect!"
}
}

Create a Stripe Payment Intent

POST /connect/v1/proxy/stripe
{
"method": "POST",
"path": "/v1/payment_intents",
"body": { "amount": 2000, "currency": "usd" }
}

Automatic Token Refresh

If a provider says your credentials have expired, Calimatic Connect automatically refreshes them and retries your request. You do not need to handle token expiration in your code.

If the refresh also fails (for example, if the user revoked access), the connection status is updated to "expired" and you will see an error message explaining what happened.

Audit Logging

Every API call made through the proxy is logged with details including:

  • Who made the call and which provider was used
  • The HTTP method and path
  • Response status code and how long it took
  • Error messages (if any)

View your proxy logs in the admin panel under Proxy Logs.

Supported Providers

Any connected provider that supports API proxying can be accessed through this endpoint. This includes most OAuth-based providers: Meta, Google, Salesforce, HubSpot, Stripe, Slack, Zoom, Shopify, and more.

Security Note

For security, some sensitive API paths may be blocked (such as credential or admin endpoints). If your request is rejected, check the error message for details about which paths are allowed.