api-gateway

Facilitates secure connections to over 100 APIs using managed OAuth, enabling seamless integration with various external services.

Install this skill

or

0/100

Security score

The api-gateway skill was audited on Mar 6, 2026 and we found 52 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 535

Template literal with variable interpolation in command context

SourceSKILL.md

535	'Authorization': `Bearer ${process.env.MATON_API_KEY}`

low line 531

Fetch to external URL

SourceSKILL.md

531	const response = await fetch('https://gateway.maton.ai/slack/api/chat.postMessage', {

medium line 313

Webhook reference - potential data exfiltration

SourceSKILL.md

313	- [Asana](references/asana/README.md) - Tasks, projects, workspaces, webhooks

medium line 320

Webhook reference - potential data exfiltration

SourceSKILL.md

320	- [Calendly](references/calendly/README.md) - Event types, scheduled events, availability, webhooks

medium line 321

Webhook reference - potential data exfiltration

SourceSKILL.md

321	- [Cal.com](references/cal-com/README.md) - Event types, bookings, schedules, availability slots, webhooks

medium line 324

Webhook reference - potential data exfiltration

SourceSKILL.md

324	- [ClickFunnels](references/clickfunnels/README.md) - Contacts, products, orders, courses, webhooks

medium line 326

Webhook reference - potential data exfiltration

SourceSKILL.md

326	- [ClickUp](references/clickup/README.md) - Tasks, lists, folders, spaces, webhooks

medium line 337

Webhook reference - potential data exfiltration

SourceSKILL.md

337	- [Fathom](references/fathom/README.md) - Meeting recordings, transcripts, summaries, webhooks

medium line 342

Webhook reference - potential data exfiltration

SourceSKILL.md

342	- [Gumroad](references/gumroad/README.md) - Products, sales, subscribers, licenses, webhooks

medium line 367

Webhook reference - potential data exfiltration

SourceSKILL.md

367	- [JotForm](references/jotform/README.md) - Forms, submissions, webhooks

medium line 378

Webhook reference - potential data exfiltration

SourceSKILL.md

378	- [Manus](references/manus/README.md) - AI agent tasks, projects, files, webhooks

medium line 394

Webhook reference - potential data exfiltration

SourceSKILL.md

394	- [Quo](references/quo/README.md) - Calls, messages, contacts, conversations, webhooks

medium line 406

Webhook reference - potential data exfiltration

SourceSKILL.md

406	- [Systeme.io](references/systeme/README.md) - Contacts, tags, courses, communities, webhooks

medium line 407

Webhook reference - potential data exfiltration

SourceSKILL.md

407	- [Tally](references/tally/README.md) - Forms, submissions, workspaces, webhooks

low line 535

Access to .env file

SourceSKILL.md

535	'Authorization': `Bearer ${process.env.MATON_API_KEY}`

low line 6

External URL reference

SourceSKILL.md

6	Security: The MATON_API_KEY authenticates with Maton.ai but grants NO access to third-party services by itself. Each service requires explicit OAuth authorization by the user through Maton's connect f

low line 13

External URL reference

SourceSKILL.md

13	homepage: "https://maton.ai"

low line 21

External URL reference

SourceSKILL.md

21	Passthrough proxy for direct access to third-party APIs using managed OAuth connections, provided by [Maton](https://maton.ai). The API gateway lets you call native API endpoints directly.

low line 30

External URL reference

SourceSKILL.md

30	req = urllib.request.Request('https://gateway.maton.ai/slack/api/chat.postMessage', data=data, method='POST')

low line 41

External URL reference

SourceSKILL.md

41	https://gateway.maton.ai/{app}/{native-api-path}

low line 66

External URL reference

SourceSKILL.md

66	1. Sign in or create an account at [maton.ai](https://maton.ai)

low line 67

External URL reference

SourceSKILL.md

67	2. Go to [maton.ai/settings](https://maton.ai/settings)

low line 72

External URL reference

SourceSKILL.md

72	Connection management uses a separate base URL: `https://ctrl.maton.ai`

low line 79

External URL reference

SourceSKILL.md

79	req = urllib.request.Request('https://ctrl.maton.ai/connections?app=slack&status=ACTIVE')

low line 98

External URL reference

SourceSKILL.md

98	"url": "https://connect.maton.ai/?session_token=5e9...",

low line 113

External URL reference

SourceSKILL.md

113	req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST')

low line 129

External URL reference

SourceSKILL.md

129	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}')

low line 143

External URL reference

SourceSKILL.md

143	"url": "https://connect.maton.ai/?session_token=5e9...",

low line 157

External URL reference

SourceSKILL.md

157	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE')

low line 171

External URL reference

SourceSKILL.md

171	req = urllib.request.Request('https://gateway.maton.ai/slack/api/chat.postMessage', data=data, method='POST')

low line 438

External URL reference

SourceSKILL.md

438	# Native Slack API: POST https://slack.com/api/chat.postMessage

low line 442

External URL reference

SourceSKILL.md

442	req = urllib.request.Request('https://gateway.maton.ai/slack/api/chat.postMessage', data=data, method='POST')

low line 452

External URL reference

SourceSKILL.md

452	# Native HubSpot API: POST https://api.hubapi.com/crm/v3/objects/contacts

low line 456

External URL reference

SourceSKILL.md

456	req = urllib.request.Request('https://gateway.maton.ai/hubspot/crm/v3/objects/contacts', data=data, method='POST')

low line 466

External URL reference

SourceSKILL.md

466	# Native Sheets API: GET https://sheets.googleapis.com/v4/spreadsheets/{id}/values/{range}

low line 469

External URL reference

SourceSKILL.md

469	req = urllib.request.Request('https://gateway.maton.ai/google-sheets/v4/spreadsheets/122BS1sFN2RKL8AOUQjkLdubzOwgqzPT64KfZ2rvYI4M/values/Sheet1!A1:B2')

low line 478

External URL reference

SourceSKILL.md

478	# Native Salesforce API: GET https://{instance}.salesforce.com/services/data/v64.0/query?q=...

low line 481

External URL reference

SourceSKILL.md

481	req = urllib.request.Request('https://gateway.maton.ai/salesforce/services/data/v64.0/query?q=SELECT+Id,Name+FROM+Contact+LIMIT+10')

low line 490

External URL reference

SourceSKILL.md

490	# Native Airtable API: GET https://api.airtable.com/v0/meta/bases/{id}/tables

low line 493

External URL reference

SourceSKILL.md

493	req = urllib.request.Request('https://gateway.maton.ai/airtable/v0/meta/bases/appgqan2NzWGP5sBK/tables')

low line 502

External URL reference

SourceSKILL.md

502	# Native Notion API: POST https://api.notion.com/v1/data_sources/{id}/query

low line 506

External URL reference

SourceSKILL.md

506	req = urllib.request.Request('https://gateway.maton.ai/notion/v1/data_sources/23702dc5-9a3b-8001-9e1c-000b5af0a980/query', data=data, method='POST')

low line 517

External URL reference

SourceSKILL.md

517	# Native Stripe API: GET https://api.stripe.com/v1/customers

low line 520

External URL reference

SourceSKILL.md

520	req = urllib.request.Request('https://gateway.maton.ai/stripe/v1/customers?limit=10')

low line 531

External URL reference

SourceSKILL.md

531	const response = await fetch('https://gateway.maton.ai/slack/api/chat.postMessage', {

low line 548

External URL reference

SourceSKILL.md

548	'https://gateway.maton.ai/slack/api/chat.postMessage',

low line 579

External URL reference

SourceSKILL.md

579	req = urllib.request.Request('https://ctrl.maton.ai/connections')

low line 589

External URL reference

SourceSKILL.md

589	- Correct: `https://gateway.maton.ai/google-mail/gmail/v1/users/me/messages`

low line 590

External URL reference

SourceSKILL.md

590	- Incorrect: `https://gateway.maton.ai/gmail/v1/users/me/messages`

low line 597

External URL reference

SourceSKILL.md

597	req = urllib.request.Request('https://ctrl.maton.ai/connections?app=google-mail&status=ACTIVE')

low line 632

External URL reference

SourceSKILL.md

632	- [API Reference](https://www.maton.ai/docs/api-reference)

low line 633

External URL reference

SourceSKILL.md

633	- [Maton Community](https://discord.com/invite/dBfFAcefs2)

Scanned on Mar 6, 2026

View Security Dashboard

Installation guide →

GitHub Stars 2.2K

Rate this skill

Categorymarketing

UpdatedApril 4, 2026

openclaw api growth-marketer product-marketer marketing-analyst sdr business-development slack hubspot notion github airtable marketing sales

openclaw/skills