Skip to main content
Backend scripts can make HTTP requests to external APIs using http.get() and http.post(). All requests are routed through a secure proxy to prevent direct access to internal infrastructure.
HTTP functions are only available when the HTTP proxy is configured. If the proxy is not set up, http will be undefined. Contact your administrator to enable this feature.

http.get(url, headers?)

Make an HTTP GET request.

http.post(url, body, headers?)

Make an HTTP POST request.

Response object

Both http.get and http.post return an object:
To work with JSON APIs, parse the body:

Limits

Security

  • All requests are routed through an authenticated proxy — they never originate from the application server directly
  • Private/internal IPs are blocked (localhost, 10.x.x.x, 172.16-31.x.x, 192.168.x.x, 169.254.x.x, AWS metadata endpoint)
  • Only http:// and https:// protocols are allowed

Example: external auth check