---
title: "Secrets proxy: call an https API with {{secret:NAME}} filled in server-side, only to allowed hosts, no private networks, no redirects; secret values redacted from the reply."
method: POST
path: "/api/v1/fetch"
tags: ["secrets"]
---

# Secrets proxy: call an https API with {{secret:NAME}} filled in server-side, only to allowed hosts, no private networks, no redirects; secret values redacted from the reply.

`POST /api/v1/fetch`

## Request

- Base URL: `https://cloudforbots.com`
- URL: `https://cloudforbots.com/api/v1/fetch`
- Auth: HTTP bearer

## Request body

- object
  - `url` string, required
  - `method` string
  - `headers` object
  - `body` unknown
  - `timeout_s` integer

## Response `200`

upstream status, headers and body (redacted)

## Other responses

- `403`: host not allowed or private address

---

[API](https://skmtc.dev/cloudforbots/apis/cloud-for-bots-api.md) · [All operations](https://skmtc.dev/cloudforbots/apis/cloud-for-bots-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cloudforbots/apis/cloud-for-bots-api/revisions/1afdb5648693?raw)