HTTP Request

Method, URL & Payload

• Method. Choose GET, POST, PUT, PATCH, DELETE, HEAD, or OPTIONS.
• URL. Enter a full public URL (https://api.example.com/orders/{{ 1.order_id }}).
• Query Parameters. Add as Fields or JSON (filter[status]=active or ids[]=1&ids[]=2). Do not add | url_encode here. Glow encodes values automatically and warns (url_encode_in_query_parameter) against double encoding.
• Body Type (for POST, PUT, PATCH). Choose JSON (application/json), Form URL Encoded (a=1&b=2), Form Data (multipart/form-data text fields only), Text (text/plain), or None (Content-Length: 0). In JSON bodies, {{ 1.id }} resolves dynamically while literal braces need no escaping.

Authentication

Pick an Authentication mode above Headers so Glow builds the header for you:

Use Headers (Fields or JSON) for extra headers like Accept or X-Request-ID. Header names require 1 to 256 ASCII token characters without spaces or colons. Header values cannot contain newlines, control characters (except tabs), or characters above U+00FF.

Pagination

Configure Pagination (options.pagination) under Advanced Options to fetch multiple pages and merge items into one output:

• Cursor or URL modes (mode). Choose None ("none", default), Cursor in the response ("cursor", using cursorResponsePath and cursorRequestParam, default "cursor"), Next-page URL ("nextUrl", using nextUrlResponsePath), or Link header (rel="next") ("linkHeader").
• Offset or Page modes. Choose Offset ("offset", startAt default 0) or Page number ("page", startAt default 1) with paramName and stepSize.
• Parameter location & Items path. Send values via paramLocation (Query parameter "query" or JSON body field "body"). Set itemsPath (data.items) or leave blank for a top-level array.
• Caps. Fetches up to Max pages 1 to 50 (default 10, step tests cap at 3) and Max items 1 to 10,000 (default 1,000). All pages share a 10 MiB ceiling (OutboundResponseTooLargeError) and 120-second budget.

Retries & Timeouts

• Timeout (seconds). Enter 1 to 300 seconds (blank defaults to 30, and 0 does not disable it).
• Max Redirects (0-10). Follows 301, 302, 307, and 308 redirects (blank defaults to 3).
• Parse Response as JSON. Parses text responses as JSON regardless of Content-Type and strips a leading UTF-8 BOM.
• Ignore SSL Certificate Issues. Skips TLS checks for controlled non-credential test endpoints only (localhost and private IPs remain blocked).
• Automatic Retry-After. Servers may return Retry-After of 15 seconds or less on 429 (any method) or 503 (GET/HEAD/OPTIONS). HTTP Request then waits and retries up to 2 times within the 120-second budget.

1. POST JSON + Bearer Auth

curl -X POST https://api.example.com/v1/leads \
  -H "Authorization: Bearer {{ $secret.API_KEY }}" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -d '{"email": "[email protected]", "name": "Ada Lovelace"}'

2. GET + Custom Header

curl -X GET "https://api.example.com/v1/customers?status=active&limit=50" \
  -H "X-API-Key: {{ $secret.SERVICE_KEY }}" \
  -H "Accept: application/json"

JSON Response (Default)

{
  "ret": { "id": 1042, "title": "Invoice #1042", "status": "paid" }
}

Read fields as {{ 3.ret.id }} or {{ 3.ret.status }}.

Include Full Response

{
  "ret": {
    "body": { "id": 1042, "title": "Invoice #1042" },
    "status": 200,
    "statusCode": 200,
    "statusMessage": "OK",
    "headers": { "content-type": "application/json; charset=utf-8" }
  }
}

Read body fields as {{ 3.ret.body.id }} and status as {{ 3.ret.status }}.

Binary / File Downloads

{
  "ret": {
    "data": "JVBERi0xLjQKJcfs...",
    "encoding": "base64",
    "contentType": "application/pdf",
    "fileName": "statement.pdf"
  }
}

Pass {{ 3.ret }} to Extract from File or map its fields downstream.

1. Post Lead / CRM Record

Method: POST · URL: https://api.yourcompany.com/v1/leads · Auth: Bearer Token ({{ $secret.CRM_API_KEY }}).

{
  "email": "{{ 1.email }}",
  "first_name": "{{ 1.first_name }}",
  "company": "{{ 1.company_name }}",
  "source": "glow_workflow"
}

2. Loop Over Items

In Run for each item or a Repeater with Items per batch = 1 (batches above 1 pass a list and need a bulk endpoint). Method: PATCH · URL: https://api.example.com/v2/contacts/{{ item.id }}.

{
  "status": "synchronized",
  "last_updated": "{{ $now }}"
}

3. Forward Full Payload

Forward an entire incoming event with $full_result. Method: POST · URL: https://webhook.site/your-endpoint.

{
  "event_type": "typeform_submission",
  "timestamp": "{{ $now }}",
  "raw_payload": "{{ 1.$full_result }}"
}

4. Fetch OAuth Token

Method: POST · URL: https://auth.provider.com/oauth/token · Body Type: Form URL Encoded · Fields: grant_type=client_credentials, client_id={{ $secret.CLIENT_ID }}, client_secret={{ $secret.CLIENT_SECRET }}.

Read the token from Step 2 as {{ 2.ret.access_token }} (with Include Full Response off). Never log or prompt with raw tokens.