IntegrationOS Passthrough API

Proxy requests to external APIs through configured connections

Documentation GitHub OpenAPI

Operations 7

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

DELETE /v1/passthrough/{key} Delete on a platform via a raw DELETE · Passthrough request #

Ask an LLM

“Can I remove a record on a connected platform by forwarding a raw DELETE?”

“What does the passthrough proxy need to delete an upstream resource with my stored credentials?”

Tell an agent destructive · confirm first

Send a passthrough DELETE to {key} on connection {connection}.

Delete the upstream resource at {key} via connection {connection} and action {action}.

GET /v1/passthrough/{key} Read data from a platform via a raw GET · Passthrough request #

Ask an LLM

“How do I fetch a record from a connected platform when no ready-made action covers it?”

“Can I send a raw GET to an upstream endpoint and have my connection's credentials signed in for me?”

Tell an agent

Send a passthrough GET to {key} on connection {connection}.

Read upstream path {key} with a GET using connection {connection} and action {action}.

HEAD /v1/passthrough/{key} Check a platform resource via a raw HEAD · Passthrough request #

Ask an LLM

“Can I check whether an upstream resource exists with a HEAD request, without pulling the body?”

“Does the passthrough proxy forward HEAD requests to the connected platform?”

Tell an agent

Send a passthrough HEAD to {key} on connection {connection}.

Check headers only for upstream path {key} via connection {connection}, action {action}.

OPTIONS /v1/passthrough/{key} Probe a platform endpoint via raw OPTIONS · Passthrough request #

Ask an LLM

“How do I find which methods an upstream endpoint allows by forwarding an OPTIONS request?”

“Can the passthrough proxy send an OPTIONS preflight to a connected platform?”

Tell an agent

Send a passthrough OPTIONS request to {key} on connection {connection}.

Ask upstream path {key} which methods it allows, via connection {connection} and action {action}.

PATCH /v1/passthrough/{key} Partly update a platform record via raw PATCH · Passthrough request #

Ask an LLM

“How do I change just a few fields on a connected platform's record with a raw PATCH?”

“Can a passthrough PATCH run in an organization or project tenant instead of my personal scope?”

Tell an agent

Send a passthrough PATCH to {key} on connection {connection}.

Patch selected fields at upstream path {key} through connection {connection} in project {project}.

POST /v1/passthrough/{key} Create on a platform via a raw POST · Passthrough request #

Ask an LLM

“How do I create something on a connected platform through a raw POST when there's no built-in action?”

“Is the request body kept intact when I POST through the passthrough proxy?”

Tell an agent

Send a passthrough POST to {key} on connection {connection}.

Create a record upstream by POSTing to {key} through connection {connection} using action {action}.

PUT /v1/passthrough/{key} Replace a platform record via a raw PUT · Passthrough request #

Ask an LLM

“Can I overwrite a whole record on a connected platform with a raw PUT call?”

“Which headers does a passthrough PUT need so the upstream call uses the right connection?”

Tell an agent

Send a passthrough PUT to {key} on connection {connection} to replace that record.

Replace the upstream resource at {key} with a PUT via connection {connection}, action {action}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/integration-os:integration-os-passthrough-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  description: The One API. Universal API integration platform for AI agents and applications.
  license:
    name: ''
  title: One Passthrough API
  version: 5.35.0
tags:
- description: Proxy requests to external APIs through configured connections
  name: Passthrough
paths:
  /v1/passthrough/{key}:
    delete:
      description: Forwards an arbitrary HTTP request to the upstream platform. The method, URL path, query parameters, and body are all preserved — credentials are resolved from your connection and signed in automatically. Use this when no first-class action exists for what you need to do on the platform.
      operationId: passthrough
      parameters:
      - description: API path forwarded to the destination platform (e.g. `users/me`, `contacts`). Anything after `/v1/passthrough/` is preserved verbatim as the upstream path. Generated clients must URL-encode any `/` within a single segment as `%2F` (e.g. `users%2Fme`), since an OpenAPI path parameter cannot contain a raw slash.
        in: path
        name: key
        required: true
        schema:
          type: string
      - description: The action's system_id (from `/v1/available-actions`). Selects which connection-model definition resolves the upstream call. This is what the SDK's `triggerAction` sets.
        in: header
        name: X-One-Action-Id
        required: true
        schema:
          type: string
      - description: 'The connection to run against. Required whichever credential you present: it selects the connection, it does not authenticate you, and a request without it is refused before the handler runs.'
        in: header
        name: X-One-Connection-Key
        required: true
        schema:
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Organization-Id
        required: false
        schema:
          format: uuid
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Project-Id
        required: false
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/octet-stream:
            schema:
              type: string
        description: Payload forwarded to the destination API. Sent as-is to the upstream platform with the request's content-type preserved.
        required: true
      responses:
        '200':
          description: Response proxied back from the destination API
      security:
      - X-One-Secret: []
      - OAuth2:
        - user:connections:write
      - OAuth2:
        - org:connections:write
      - OAuth2:
        - project:connections:write
      summary: Passthrough request
      tags:
      - Passthrough
    get:
      description: Forwards an arbitrary HTTP request to the upstream platform. The method, URL path, query parameters, and body are all preserved — credentials are resolved from your connection and signed in automatically. Use this when no first-class action exists for what you need to do on the platform.
      operationId: getV1PassthroughByKey
      parameters:
      - description: API path forwarded to the destination platform (e.g. `users/me`, `contacts`). Anything after `/v1/passthrough/` is preserved verbatim as the upstream path. Generated clients must URL-encode any `/` within a single segment as `%2F` (e.g. `users%2Fme`), since an OpenAPI path parameter cannot contain a raw slash.
        in: path
        name: key
        required: true
        schema:
          type: string
      - description: The action's system_id (from `/v1/available-actions`). Selects which connection-model definition resolves the upstream call. This is what the SDK's `triggerAction` sets.
        in: header
        name: X-One-Action-Id
        required: true
        schema:
          type: string
      - description: 'The connection to run against. Required whichever credential you present: it selects the connection, it does not authenticate you, and a request without it is refused before the handler runs.'
        in: header
        name: X-One-Connection-Key
        required: true
        schema:
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Organization-Id
        required: false
        schema:
          format: uuid
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Project-Id
        required: false
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/octet-stream:
            schema:
              type: string
        description: Payload forwarded to the destination API. Sent as-is to the upstream platform with the request's content-type preserved.
        required: true
      responses:
        '200':
          description: Response proxied back from the destination API
      security:
      - X-One-Secret: []
      - OAuth2:
        - user:connections:write
      - OAuth2:
        - org:connections:write
      - OAuth2:
        - project:connections:write
      summary: Passthrough request
      tags:
      - Passthrough
      x-operation-id-source: normalized
      x-operation-id-original: passthrough
    head:
      description: Forwards an arbitrary HTTP request to the upstream platform. The method, URL path, query parameters, and body are all preserved — credentials are resolved from your connection and signed in automatically. Use this when no first-class action exists for what you need to do on the platform.
      operationId: headV1PassthroughByKey
      parameters:
      - description: API path forwarded to the destination platform (e.g. `users/me`, `contacts`). Anything after `/v1/passthrough/` is preserved verbatim as the upstream path. Generated clients must URL-encode any `/` within a single segment as `%2F` (e.g. `users%2Fme`), since an OpenAPI path parameter cannot contain a raw slash.
        in: path
        name: key
        required: true
        schema:
          type: string
      - description: The action's system_id (from `/v1/available-actions`). Selects which connection-model definition resolves the upstream call. This is what the SDK's `triggerAction` sets.
        in: header
        name: X-One-Action-Id
        required: true
        schema:
          type: string
      - description: 'The connection to run against. Required whichever credential you present: it selects the connection, it does not authenticate you, and a request without it is refused before the handler runs.'
        in: header
        name: X-One-Connection-Key
        required: true
        schema:
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Organization-Id
        required: false
        schema:
          format: uuid
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Project-Id
        required: false
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/octet-stream:
            schema:
              type: string
        description: Payload forwarded to the destination API. Sent as-is to the upstream platform with the request's content-type preserved.
        required: true
      responses:
        '200':
          description: Response proxied back from the destination API
      security:
      - X-One-Secret: []
      - OAuth2:
        - user:connections:write
      - OAuth2:
        - org:connections:write
      - OAuth2:
        - project:connections:write
      summary: Passthrough request
      tags:
      - Passthrough
      x-operation-id-source: normalized
      x-operation-id-original: passthrough
    options:
      description: Forwards an arbitrary HTTP request to the upstream platform. The method, URL path, query parameters, and body are all preserved — credentials are resolved from your connection and signed in automatically. Use this when no first-class action exists for what you need to do on the platform.
      operationId: optionsV1PassthroughByKey
      parameters:
      - description: API path forwarded to the destination platform (e.g. `users/me`, `contacts`). Anything after `/v1/passthrough/` is preserved verbatim as the upstream path. Generated clients must URL-encode any `/` within a single segment as `%2F` (e.g. `users%2Fme`), since an OpenAPI path parameter cannot contain a raw slash.
        in: path
        name: key
        required: true
        schema:
          type: string
      - description: The action's system_id (from `/v1/available-actions`). Selects which connection-model definition resolves the upstream call. This is what the SDK's `triggerAction` sets.
        in: header
        name: X-One-Action-Id
        required: true
        schema:
          type: string
      - description: 'The connection to run against. Required whichever credential you present: it selects the connection, it does not authenticate you, and a request without it is refused before the handler runs.'
        in: header
        name: X-One-Connection-Key
        required: true
        schema:
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Organization-Id
        required: false
        schema:
          format: uuid
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Project-Id
        required: false
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/octet-stream:
            schema:
              type: string
        description: Payload forwarded to the destination API. Sent as-is to the upstream platform with the request's content-type preserved.
        required: true
      responses:
        '200':
          description: Response proxied back from the destination API
      security:
      - X-One-Secret: []
      - OAuth2:
        - user:connections:write
      - OAuth2:
        - org:connections:write
      - OAuth2:
        - project:connections:write
      summary: Passthrough request
      tags:
      - Passthrough
      x-operation-id-source: normalized
      x-operation-id-original: passthrough
    patch:
      description: Forwards an arbitrary HTTP request to the upstream platform. The method, URL path, query parameters, and body are all preserved — credentials are resolved from your connection and signed in automatically. Use this when no first-class action exists for what you need to do on the platform.
      operationId: patchV1PassthroughByKey
      parameters:
      - description: API path forwarded to the destination platform (e.g. `users/me`, `contacts`). Anything after `/v1/passthrough/` is preserved verbatim as the upstream path. Generated clients must URL-encode any `/` within a single segment as `%2F` (e.g. `users%2Fme`), since an OpenAPI path parameter cannot contain a raw slash.
        in: path
        name: key
        required: true
        schema:
          type: string
      - description: The action's system_id (from `/v1/available-actions`). Selects which connection-model definition resolves the upstream call. This is what the SDK's `triggerAction` sets.
        in: header
        name: X-One-Action-Id
        required: true
        schema:
          type: string
      - description: 'The connection to run against. Required whichever credential you present: it selects the connection, it does not authenticate you, and a request without it is refused before the handler runs.'
        in: header
        name: X-One-Connection-Key
        required: true
        schema:
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Organization-Id
        required: false
        schema:
          format: uuid
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Project-Id
        required: false
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/octet-stream:
            schema:
              type: string
        description: Payload forwarded to the destination API. Sent as-is to the upstream platform with the request's content-type preserved.
        required: true
      responses:
        '200':
          description: Response proxied back from the destination API
      security:
      - X-One-Secret: []
      - OAuth2:
        - user:connections:write
      - OAuth2:
        - org:connections:write
      - OAuth2:
        - project:connections:write
      summary: Passthrough request
      tags:
      - Passthrough
      x-operation-id-source: normalized
      x-operation-id-original: passthrough
    post:
      description: Forwards an arbitrary HTTP request to the upstream platform. The method, URL path, query parameters, and body are all preserved — credentials are resolved from your connection and signed in automatically. Use this when no first-class action exists for what you need to do on the platform.
      operationId: postV1PassthroughByKey
      parameters:
      - description: API path forwarded to the destination platform (e.g. `users/me`, `contacts`). Anything after `/v1/passthrough/` is preserved verbatim as the upstream path. Generated clients must URL-encode any `/` within a single segment as `%2F` (e.g. `users%2Fme`), since an OpenAPI path parameter cannot contain a raw slash.
        in: path
        name: key
        required: true
        schema:
          type: string
      - description: The action's system_id (from `/v1/available-actions`). Selects which connection-model definition resolves the upstream call. This is what the SDK's `triggerAction` sets.
        in: header
        name: X-One-Action-Id
        required: true
        schema:
          type: string
      - description: 'The connection to run against. Required whichever credential you present: it selects the connection, it does not authenticate you, and a request without it is refused before the handler runs.'
        in: header
        name: X-One-Connection-Key
        required: true
        schema:
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Organization-Id
        required: false
        schema:
          format: uuid
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Project-Id
        required: false
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/octet-stream:
            schema:
              type: string
        description: Payload forwarded to the destination API. Sent as-is to the upstream platform with the request's content-type preserved.
        required: true
      responses:
        '200':
          description: Response proxied back from the destination API
      security:
      - X-One-Secret: []
      - OAuth2:
        - user:connections:write
      - OAuth2:
        - org:connections:write
      - OAuth2:
        - project:connections:write
      summary: Passthrough request
      tags:
      - Passthrough
      x-operation-id-source: normalized
      x-operation-id-original: passthrough
    put:
      description: Forwards an arbitrary HTTP request to the upstream platform. The method, URL path, query parameters, and body are all preserved — credentials are resolved from your connection and signed in automatically. Use this when no first-class action exists for what you need to do on the platform.
      operationId: putV1PassthroughByKey
      parameters:
      - description: API path forwarded to the destination platform (e.g. `users/me`, `contacts`). Anything after `/v1/passthrough/` is preserved verbatim as the upstream path. Generated clients must URL-encode any `/` within a single segment as `%2F` (e.g. `users%2Fme`), since an OpenAPI path parameter cannot contain a raw slash.
        in: path
        name: key
        required: true
        schema:
          type: string
      - description: The action's system_id (from `/v1/available-actions`). Selects which connection-model definition resolves the upstream call. This is what the SDK's `triggerAction` sets.
        in: header
        name: X-One-Action-Id
        required: true
        schema:
          type: string
      - description: 'The connection to run against. Required whichever credential you present: it selects the connection, it does not authenticate you, and a request without it is refused before the handler runs.'
        in: header
        name: X-One-Connection-Key
        required: true
        schema:
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Organization-Id
        required: false
        schema:
          format: uuid
          type: string
      - description: Selects the tenant this request acts in. Omit it to act in your personal scope.
        in: header
        name: X-One-Project-Id
        required: false
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/octet-stream:
            schema:
              type: string
        description: Payload forwarded to the destination API. Sent as-is to the upstream platform with the request's content-type preserved.
        required: true
      responses:
        '200':
          description: Response proxied back from the destination API
      security:
      - X-One-Secret: []
      - OAuth2:
        - user:connections:write
      - OAuth2:
        - org:connections:write
      - OAuth2:
        - project:connections:write
      summary: Passthrough request
      tags:
      - Passthrough
      x-operation-id-source: normalized
      x-operation-id-original: passthrough
components:
  securitySchemes:
    Bearer:
      scheme: bearer
      type: http
    OAuth2:
      flows:
        authorizationCode:
          authorizationUrl: https://api.withone.ai/oauth/authorize
          scopes:
            org:ai_skills:read: Read organization AI skills
            org:ai_skills:write: Create, update, and delete organization AI skills
            org:authkit:read: Read organization AuthKit resources
            org:authkit:write: Create, update, and delete organization AuthKit resources
            org:connections:read: Read organization connections
            org:connections:write: Create, update, and delete organization connections
            org:projects:read: Read organization projects
            org:projects:write: Create, update, and delete organization projects
            org:secrets:read: Read organization secrets
            org:secrets:write: Create, update, and delete organization secrets
            org:workflows:executions:read: Read organization workflow executions
            org:workflows:executions:write: Create, update, and delete organization workflow executions
            org:workflows:read: Read organization workflows
            org:workflows:write: Create, update, and delete organization workflows
            project:ai_skills:read: Read project AI skills
            project:ai_skills:write: Create, update, and delete project AI skills
            project:authkit:read: Read project AuthKit resources
            project:authkit:write: Create, update, and delete project AuthKit resources
            project:connections:read: Read project connections
            project:connections:write: Create, update, and delete project connections
            project:secrets:read: Read project secrets
            project:secrets:write: Create, update, and delete project secrets
            project:workflows:executions:read: Read project workflow executions
            project:workflows:executions:write: Create, update, and delete project workflow executions
            project:workflows:read: Read project workflows
            project:workflows:write: Create, update, and delete project workflows
            user:ai_skills:read: Read your personal AI skills
            user:ai_skills:write: Create, update, and delete your personal AI skills
            user:authkit:read: Read your personal AuthKit resources
            user:authkit:write: Create, update, and delete your personal AuthKit resources
            user:connections:read: Read your personal connections
            user:connections:write: Create, update, and delete your personal connections
            user:secrets:read: Read your personal secrets
            user:secrets:write: Create, update, and delete your personal secrets
            user:workflows:executions:read: Read your personal workflow executions
            user:workflows:executions:write: Create, update, and delete your personal workflow executions
            user:workflows:read: Read your personal workflows
            user:workflows:write: Create, update, and delete your personal workflows
          tokenUrl: https://api.withone.ai/oauth/token
      type: oauth2
    Session:
      in: cookie
      name: withone
      type: apiKey
    X-One-Connection-Key:
      in: header
      name: X-One-Connection-Key
      type: apiKey
    X-One-Secret:
      in: header
      name: X-One-Secret
      type: apiKey
    X-Pica-Connection-Key:
      in: header
      name: X-One-Connection-Key
      type: apiKey
    X-Pica-Secret:
      in: header
      name: X-One-Secret
      type: apiKey

IntegrationOS Passthrough API

Operations 7

Documentation

Specifications

Other Resources

Work with this as data

MCP server

Tools for apis

Call it yourself

Get an API key

OpenAPI Specification