> **Building with AI coding agents?** Install the authstack plugin with one command. This equips your agent with accurate Scalekit implementation patterns.
>
> **Recommended**:
> ```bash
> npx @scalekit-inc/cli setup
> ```
>
> Global:
> ```bash
> npm install -g @scalekit-inc/cli
> scalekit setup
> ```
>
> Supports Claude Code, Cursor, GitHub Copilot, Codex + skills for 40+ agents.
> Features: full-stack-auth, agent-auth, mcp-auth, modular-sso, modular-scim.
> [Full setup guide](https://docs.scalekit.com/dev-kit/build-with-ai/)

---

# Proxy API Calls

Use Scalekit managed authentication and make direct HTTP calls to third party applications
Even though Scalekit Agent Auth offers pre-built connector tools out of the box for the supported applications, if you would like to make direct API calls to the third party applications for any custom behaviour, you can leverage proxy_api tool to directly invoke the third party application.

Based on the connected account or user identifier details, Scalekit will automatically inject the user authorization tokens so that API calls to the third application will be successful.

> caution: Proxy must be enabled per environment
>
> Proxy access for built-in providers (Gmail, Notion, Slack, and others) is **not enabled by default** on new environments. If you receive the error `proxy not enabled for provider`, contact [support@scalekit.com](mailto:support@scalekit.com) to enable the proxy for your environment.

```python
# Fetch recent emails
emails = actions.tools.execute(
    connected_account_id=connected_account.id,
    tool='gmail_proxy_api',
    parameters={
        'path': '/gmail/v1/users/me/messages',
        'method': 'GET',
        'headers': [{'Content-Type': 'application/json'}],
        'params': [{'max_results': '5'}],
        'body': '' #actual JSON payload
    }
)

print(f'Recent emails: {emails.result}')
```

As part of the above execution, Scalekit will automatically inject Bearer token in the request header before making the API call to GMAIL.

## Common scenarios

## How do I allowlist Scalekit's outbound IP addresses on a downstream service?

Scalekit makes outbound tool calls and proxied API requests to third-party applications from a fixed set of IP addresses. If a downstream service restricts inbound traffic to an allowlist, add the IP address for your environment's region so these calls succeed.

| Region | Outbound IP address |
|--------|---------------------|
| United States | `34.94.129.140` |
| European Union | `35.198.115.68` |

All outbound tool calls and proxied requests originate from the IP address that matches your environment's region.


---

## More Scalekit documentation

| Resource | What it contains | When to use it |
|----------|-----------------|----------------|
| [/llms.txt](/llms.txt) | Structured index with routing hints per product area | Start here — find which documentation set covers your topic before loading full content |
| [/llms-full.txt](/llms-full.txt) | Complete documentation for all Scalekit products in one file | Use when you need exhaustive context across multiple products or when the topic spans several areas |
| [sitemap-0.xml](https://docs.scalekit.com/sitemap-0.xml) | Full URL list of every documentation page | Use to discover specific page URLs you can fetch for targeted, page-level answers |