api-gateway

Enables seamless connections to over 100 APIs with managed OAuth, allowing users to interact with various external services securely.

Install this skill

or

0/100

Security score

The api-gateway skill was audited on May 14, 2026 and we found 52 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 553

Template literal with variable interpolation in command context

SourceSKILL.md

553	'Authorization': `Bearer ${process.env.MATON_API_KEY}`

low line 549

Fetch to external URL

SourceSKILL.md

549	const response = await fetch('https://gateway.maton.ai/slack/api/chat.postMessage', {

medium line 322

Webhook reference - potential data exfiltration

SourceSKILL.md

322	- [Asana](references/asana/README.md) - Tasks, projects, workspaces, webhooks

medium line 330

Webhook reference - potential data exfiltration

SourceSKILL.md

330	- [Calendly](references/calendly/README.md) - Event types, scheduled events, availability, webhooks

medium line 331

Webhook reference - potential data exfiltration

SourceSKILL.md

331	- [Cal.com](references/cal-com/README.md) - Event types, bookings, schedules, availability slots, webhooks

medium line 334

Webhook reference - potential data exfiltration

SourceSKILL.md

334	- [ClickFunnels](references/clickfunnels/README.md) - Contacts, products, orders, courses, webhooks

medium line 336

Webhook reference - potential data exfiltration

SourceSKILL.md

336	- [ClickUp](references/clickup/README.md) - Tasks, lists, folders, spaces, webhooks

medium line 348

Webhook reference - potential data exfiltration

SourceSKILL.md

348	- [Fathom](references/fathom/README.md) - Meeting recordings, transcripts, summaries, webhooks

medium line 355

Webhook reference - potential data exfiltration

SourceSKILL.md

355	- [Gumroad](references/gumroad/README.md) - Products, sales, subscribers, licenses, webhooks

medium line 380

Webhook reference - potential data exfiltration

SourceSKILL.md

380	- [JotForm](references/jotform/README.md) - Forms, submissions, webhooks

medium line 393

Webhook reference - potential data exfiltration

SourceSKILL.md

393	- [Manus](references/manus/README.md) - AI agent tasks, projects, files, webhooks

medium line 409

Webhook reference - potential data exfiltration

SourceSKILL.md

409	- [Quo](references/quo/README.md) - Calls, messages, contacts, conversations, webhooks

medium line 422

Webhook reference - potential data exfiltration

SourceSKILL.md

422	- [Systeme.io](references/systeme/README.md) - Contacts, tags, courses, communities, webhooks

medium line 423

Webhook reference - potential data exfiltration

SourceSKILL.md

423	- [Tally](references/tally/README.md) - Forms, submissions, workspaces, webhooks

low line 553

Access to .env file

SourceSKILL.md

553	'Authorization': `Bearer ${process.env.MATON_API_KEY}`

low line 6

External URL reference

SourceSKILL.md

6	Security: The MATON_API_KEY authenticates with Maton.ai but grants NO access to third-party services by itself. Each service requires explicit OAuth authorization by the user through Maton's connect f

low line 13

External URL reference

SourceSKILL.md

13	homepage: "https://maton.ai"

low line 21

External URL reference

SourceSKILL.md

21	Passthrough proxy for direct access to third-party APIs using managed OAuth connections, provided by [Maton](https://maton.ai). The API gateway lets you call native API endpoints directly.

low line 30

External URL reference

SourceSKILL.md

30	req = urllib.request.Request('https://gateway.maton.ai/slack/api/chat.postMessage', data=data, method='POST')

low line 41

External URL reference

SourceSKILL.md

41	https://gateway.maton.ai/{app}/{native-api-path}

low line 66

External URL reference

SourceSKILL.md

66	1. Sign in or create an account at [maton.ai](https://maton.ai)

low line 67

External URL reference

SourceSKILL.md

67	2. Go to [maton.ai/settings](https://maton.ai/settings)

low line 72

External URL reference

SourceSKILL.md

72	Connection management uses a separate base URL: `https://ctrl.maton.ai`

low line 79

External URL reference

SourceSKILL.md

79	req = urllib.request.Request('https://ctrl.maton.ai/connections?app=slack&status=ACTIVE')

low line 98

External URL reference

SourceSKILL.md

98	"url": "https://connect.maton.ai/?session_token=5e9...",

low line 113

External URL reference

SourceSKILL.md

113	req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST')

low line 129

External URL reference

SourceSKILL.md

129	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}')

low line 143

External URL reference

SourceSKILL.md

143	"url": "https://connect.maton.ai/?session_token=5e9...",

low line 157

External URL reference

SourceSKILL.md

157	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE')

low line 171

External URL reference

SourceSKILL.md

171	req = urllib.request.Request('https://gateway.maton.ai/slack/api/chat.postMessage', data=data, method='POST')

low line 456

External URL reference

SourceSKILL.md

456	# Native Slack API: POST https://slack.com/api/chat.postMessage

low line 460

External URL reference

SourceSKILL.md

460	req = urllib.request.Request('https://gateway.maton.ai/slack/api/chat.postMessage', data=data, method='POST')

low line 470

External URL reference

SourceSKILL.md

470	# Native HubSpot API: POST https://api.hubapi.com/crm/v3/objects/contacts

low line 474

External URL reference

SourceSKILL.md

474	req = urllib.request.Request('https://gateway.maton.ai/hubspot/crm/v3/objects/contacts', data=data, method='POST')

low line 484

External URL reference

SourceSKILL.md

484	# Native Sheets API: GET https://sheets.googleapis.com/v4/spreadsheets/{id}/values/{range}

low line 487

External URL reference

SourceSKILL.md

487	req = urllib.request.Request('https://gateway.maton.ai/google-sheets/v4/spreadsheets/122BS1sFN2RKL8AOUQjkLdubzOwgqzPT64KfZ2rvYI4M/values/Sheet1!A1:B2')

low line 496

External URL reference

SourceSKILL.md

496	# Native Salesforce API: GET https://{instance}.salesforce.com/services/data/v64.0/query?q=...

low line 499

External URL reference

SourceSKILL.md

499	req = urllib.request.Request('https://gateway.maton.ai/salesforce/services/data/v64.0/query?q=SELECT+Id,Name+FROM+Contact+LIMIT+10')

low line 508

External URL reference

SourceSKILL.md

508	# Native Airtable API: GET https://api.airtable.com/v0/meta/bases/{id}/tables

low line 511

External URL reference

SourceSKILL.md

511	req = urllib.request.Request('https://gateway.maton.ai/airtable/v0/meta/bases/appgqan2NzWGP5sBK/tables')

low line 520

External URL reference

SourceSKILL.md

520	# Native Notion API: POST https://api.notion.com/v1/data_sources/{id}/query

low line 524

External URL reference

SourceSKILL.md

524	req = urllib.request.Request('https://gateway.maton.ai/notion/v1/data_sources/23702dc5-9a3b-8001-9e1c-000b5af0a980/query', data=data, method='POST')

low line 535

External URL reference

SourceSKILL.md

535	# Native Stripe API: GET https://api.stripe.com/v1/customers

low line 538

External URL reference

SourceSKILL.md

538	req = urllib.request.Request('https://gateway.maton.ai/stripe/v1/customers?limit=10')

low line 549

External URL reference

SourceSKILL.md

549	const response = await fetch('https://gateway.maton.ai/slack/api/chat.postMessage', {

low line 566

External URL reference

SourceSKILL.md

566	'https://gateway.maton.ai/slack/api/chat.postMessage',

low line 597

External URL reference

SourceSKILL.md

597	req = urllib.request.Request('https://ctrl.maton.ai/connections')

low line 607

External URL reference

SourceSKILL.md

607	- Correct: `https://gateway.maton.ai/google-mail/gmail/v1/users/me/messages`

low line 608

External URL reference

SourceSKILL.md

608	- Incorrect: `https://gateway.maton.ai/gmail/v1/users/me/messages`

low line 615

External URL reference

SourceSKILL.md

615	req = urllib.request.Request('https://ctrl.maton.ai/connections?app=google-mail&status=ACTIVE')

low line 650

External URL reference

SourceSKILL.md

650	- [API Reference](https://www.maton.ai/docs/api-reference)

low line 651

External URL reference

SourceSKILL.md

651	- [Maton Community](https://discord.com/invite/dBfFAcefs2)

Scanned on May 14, 2026

View Security Dashboard

Installation guide →

GitHub Stars 2.0K

Rate this skill

Categorymarketing

UpdatedMay 20, 2026

openclaw api growth-marketer product-marketer marketing-analyst sdr business-development slack hubspot github notion airtable marketing sales

LeoYeAI/openclaw-master-skills